$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa File: b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json) Hash identifier: uC5HBLTa4eIY+0C+ZkDP2BeMCsxVzJu/Ux4vtjlJmXo= Subject key identifier: FA:69:2C:5B:2F:08:7F:72:EC:CD:CB:70:D6:D5:F2:59:49:42:F9:2A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA95195FD534DF25A5140 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a9:51:95:fd:53:4d:f2:5a:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=4c2a726f-424b-44bb-8cd0-57b34472124b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:86:c1:52:b7:e1:ed:87:94:ff:2e:9c:2e:70: 9a:33:98:f3:3b:55:1b:42:e4:f9:f3:26:3e:04:3c: c3:dd:55:a5:95:74:f8:13:ce:e6:9f:ad:12:11:85: 56:92:9a:d3:0a:fe:b6:79:58:2c:26:c7:4a:3e:2c: cb:14:be:b4:33:e7:4e:ad:6e:b8:2c:12:3c:3c:ec: 1f:04:11:91:fa:45:97:55:29:74:71:ba:ba:ec:5c: 51:42:3a:ad:ff:51:76:5e:b9:fb:c0:93:1e:52:8b: 13:66:27:14:32:2a:37:26:7b:8f:ea:79:4c:75:67: d6:48:33:7f:73:91:93:9d:1f:ca:e2:fe:46:5f:df: 68:8c:f3:35:d8:00:bb:3c:83:91:59:48:27:de:37: 4f:8b:8f:c8:84:6b:f1:68:a5:5c:b3:51:95:36:2f: 66:5a:5b:2b:3c:f5:a1:2c:04:42:0a:70:ae:f6:2d: 3d:97:91:1b:fa:2a:66:a0:5d:de:5e:37:86:ea:39: 3a:ab:64:45:43:6e:23:a4:8d:3b:fb:7a:4e:87:ef: a0:ac:67:26:d7:f1:f0:51:02:b3:a4:1a:64:f9:50: ed:1d:a4:2c:01:0d:79:3c:da:e3:ae:c5:d8:57:1a: aa:61:72:74:00:f6:24:04:60:61:45:71:34:8a:9d: 43:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:69:2C:5B:2F:08:7F:72:EC:CD:CB:70:D6:D5:F2:59:49:42:F9:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:e8:19:6d:88:7c:69:77:23:7d:fe:a3:de:e7:85:63:be:46: 2b:54:51:5f:4d:23:7a:c6:03:27:d1:e3:da:a1:a8:19:37:1a: f8:d0:72:b6:79:f9:cd:81:65:90:be:e4:6a:90:58:cd:4b:67: ed:70:06:4c:a8:e2:0e:a5:d0:b0:a9:4c:01:61:ea:88:1e:8d: 12:eb:b9:b9:e7:40:05:45:30:86:cd:b7:7c:71:bf:e5:3e:77: 0f:d9:86:31:1e:15:63:b3:4b:f9:24:1b:b9:68:6a:17:d5:65: 89:5f:f7:a5:8e:7b:b2:2d:b1:b4:1c:70:3a:66:37:dc:c1:43: 19:19:59:8f:b2:9f:c8:dc:cf:11:c7:fe:b6:d2:f4:a4:1b:5f: c4:cb:9c:25:64:f3:21:65:7a:e3:88:e1:fd:62:9b:de:86:46: 95:b3:82:82:02:48:5a:b5:d0:3a:b4:c3:b4:1a:f9:3f:8f:02: 65:98:90:22:ba:d4:ce:51:a0:80:bc:31:29:ba:ea:38:7c:ea: 3e:b5:90:26:ca:5c:54:61:24:a4:cf:d4:26:1c:0f:b3:3d:f5: a2:bd:20:05:d8:76:71:2e:db:bc:73:a5:b1:ac:56:4a:2a:76: 93:d1:0d:aa:9c:52:16:d6:3e:ab:90:50:4a:d1:74:19:ea:e7: d1:ea:26:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKlRlf1TTfJaUUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NGMyYTcyNmYtNDI0Yi00NGJiLThjZDAtNTdiMzQ0NzIxMjRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYbBUrfh7YeU/y6cLnCaM5jzO1UbQuT58yY+ BDzD3VWllXT4E87mn60SEYVWkprTCv62eVgsJsdKPizLFL60M+dOrW64LBI8POwf BBGR+kWXVSl0cbq67FxRQjqt/1F2Xrn7wJMeUosTZicUMio3JnuP6nlMdWfWSDN/ c5GTnR/K4v5GX99ojPM12AC7PIORWUgn3jdPi4/IhGvxaKVcs1GVNi9mWlsrPPWh LARCCnCu9i09l5Eb+ipmoF3eXjeG6jk6q2RFQ24jpI07+3pOh++grGcm1/HwUQKz pBpk+VDtHaQsAQ15PNrjrsXYVxqqYXJ0APYkBGBhRXE0ip1DTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPppLFsvCH9y7M3LcNbV8llJQvkqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjk2OGEwZjUtYTlhNC0z N2ExLWFlMjItMjk3ODMwZDY1OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA3oGW2IfGl3I33+o97nhWO+RitUUV9NI3rGAyfR49qhqBk3GvjQcrZ5 +c2BZZC+5GqQWM1LZ+1wBkyo4g6l0LCpTAFh6ogejRLrubnnQAVFMIbNt3xxv+U+ dw/ZhjEeFWOzS/kkG7loahfVZYlf96WOe7ItsbQccDpmN9zBQxkZWY+yn8jczxHH /rbS9KQbX8TLnCVk8yFleuOI4f1im96GRpWzgoICSFq10Dq0w7Qa+T+PAmWYkCK6 1M5RoIC8MSm66jh86j61kCbKXFRhJKTP1CYcD7M99aK9IAXYdnEu27xzpbGsVkoq dpPRDaqcUhbWPquQUErRdBnq59HqJuY= -----END CERTIFICATE-----Generated at Wed Nov 5 11:10:23 2025 by rpki-client