$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa File: a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa (raw, json) Hash identifier: jnZzJkbuuYASH5wN4kG/TLs+qJ1kFc7HvRe6FYPCP9M= Subject key identifier: 9F:8F:4C:2B:AB:3A:72:A4:DE:32:7A:9B:AC:B0:7B:2E:E1:39:D6:7C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C67FC29B821D2E9144400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:67:fc:29:b8:21:d2:e9:14:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=8d1e959c-cd17-4752-9656-9fd14e6e426c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:81:49:cb:d1:b5:25:aa:5b:3f:54:17:0a:d6: e6:90:db:fe:ed:cb:c3:26:40:6b:00:9c:80:8a:81: eb:e2:0e:41:b1:34:78:d8:2a:04:95:70:d4:75:f6: f4:d9:84:39:80:b1:70:44:ed:7d:a0:da:bb:e4:6d: 51:d1:31:7d:c8:98:9d:c9:d7:5a:39:c3:fd:30:20: 92:55:21:a1:13:b7:e6:21:ec:20:6a:62:a8:84:a7: 8e:07:50:26:e2:b4:ef:bb:65:7a:c4:1f:72:f6:f8: b7:9c:5b:a7:65:4e:29:0a:9f:46:31:0d:d7:39:90: d6:ed:28:fd:82:3c:af:41:dd:29:2e:0c:a2:d6:0a: b1:01:1e:60:e4:f8:8d:d5:94:d4:22:2a:5f:c1:b1: 9a:64:b7:b9:dd:36:64:0b:6e:aa:1e:ef:ff:6a:ef: 7c:61:b1:74:9f:b6:d1:83:a6:c3:59:b6:92:8b:92: 75:74:b9:76:55:14:34:15:ef:3a:47:ef:e5:57:ee: e3:07:e1:6a:1a:1e:c7:1e:ca:fe:51:3b:ad:db:b3: ee:60:7e:4a:21:b4:7b:01:69:d5:4b:fe:e6:86:7e: a7:11:6a:80:e3:cb:12:75:7c:d8:2a:9f:e6:0c:80: f9:26:b7:f9:64:61:6d:2a:b9:75:f0:65:d0:5e:85: 35:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:8F:4C:2B:AB:3A:72:A4:DE:32:7A:9B:AC:B0:7B:2E:E1:39:D6:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:40:20:de:9f:ac:73:3c:d0:09:7b:eb:e7:6c:38:6f:5e:83: c0:29:ec:45:ab:47:4d:f9:b3:d5:02:2b:a8:2f:43:52:65:24: 7d:46:fe:8e:81:a0:b9:5e:b2:51:d3:f8:e3:55:19:41:ca:e9: 2a:b3:25:33:4d:12:a9:10:34:28:92:41:cb:40:b9:c9:72:23: c1:ac:6f:51:38:ac:32:c6:37:b5:9f:ab:67:78:d3:39:91:d6: 71:ff:40:73:00:b8:1b:c5:28:2d:34:b5:87:17:96:cc:c4:ee: b4:c1:57:94:01:bd:80:dc:44:2e:5f:22:6d:7d:a1:db:e8:ad: 44:fc:1e:e8:77:3b:76:60:09:70:53:46:5a:a6:f8:db:44:b2: 4b:38:7d:38:02:36:c6:ce:78:79:46:4a:56:ff:a7:4e:b2:3a: c2:9c:7b:32:76:c3:f7:99:2c:d3:03:f5:9b:ea:eb:b9:51:6f: 2c:70:95:92:ef:2c:da:4f:f6:39:7c:bb:c8:46:1f:ef:bb:fd: ae:3d:bb:a3:78:ee:14:80:6c:bf:5a:0b:33:2c:97:7b:ca:5e: c1:d5:ca:cd:19:46:75:a9:ef:33:10:e5:f9:70:6b:fd:17:e3: df:ce:89:66:ab:2d:f1:34:cf:75:63:db:a9:16:d8:30:e6:14: 42:63:02:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGf8Kbgh0ukURAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk OGQxZTk1OWMtY2QxNy00NzUyLTk2NTYtOWZkMTRlNmU0MjZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyYFJy9G1JapbP1QXCtbmkNv+7cvDJkBrAJyA ioHr4g5BsTR42CoElXDUdfb02YQ5gLFwRO19oNq75G1R0TF9yJidyddaOcP9MCCS VSGhE7fmIewgamKohKeOB1Am4rTvu2V6xB9y9vi3nFunZU4pCp9GMQ3XOZDW7Sj9 gjyvQd0pLgyi1gqxAR5g5PiN1ZTUIipfwbGaZLe53TZkC26qHu//au98YbF0n7bR g6bDWbaSi5J1dLl2VRQ0Fe86R+/lV+7jB+FqGh7HHsr+UTut27PuYH5KIbR7AWnV S/7mhn6nEWqA48sSdXzYKp/mDID5Jrf5ZGFtKrl18GXQXoU1vQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+PTCurOnKk3jJ6m6ywey7hOdZ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTk5YzljNmItOGNlOC0z MWY0LWE0NDgtM2M3NDBlMjdkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJhAIN6frHM80Al76+dsOG9eg8Ap7EWrR035s9UCK6gvQ1JlJH1G/o6B oLleslHT+ONVGUHK6SqzJTNNEqkQNCiSQctAuclyI8Gsb1E4rDLGN7Wfq2d40zmR 1nH/QHMAuBvFKC00tYcXlszE7rTBV5QBvYDcRC5fIm19odvorUT8Huh3O3ZgCXBT Rlqm+NtEsks4fTgCNsbOeHlGSlb/p06yOsKcezJ2w/eZLNMD9Zvq67lRbyxwlZLv LNpP9jl8u8hGH++7/a49u6N47hSAbL9aCzMsl3vKXsHVys0ZRnWp7zMQ5flwa/0X 49/OiWarLfE0z3Vj26kW2DDmFEJjAtU= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:43 2025 by rpki-client