$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa File: cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa (raw, json) Hash identifier: 0ZejueLVf03HJNPrnyVEIohRe6jez2cvML/IdpU6K9k= Subject key identifier: C4:F2:66:9F:42:7D:C2:52:7A:CC:BD:39:9C:C3:57:66:9D:4D:13:0A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA477A875A1DF1454E280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a4:77:a8:75:a1:df:14:54:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3a355b5c-786d-4056-a900-617f524b6134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:55:7f:d2:74:49:49:7b:69:4d:8e:df:20:8c: 55:44:29:e0:8c:9d:b1:c3:9e:8e:7a:fb:7a:5e:ce: 70:b2:80:4b:d2:75:ff:35:70:1a:49:19:74:fb:02: d2:29:6e:5b:72:b7:29:cd:e5:91:6a:3e:b7:6b:27: 70:21:8a:9e:a1:46:4a:de:24:f2:df:04:75:f7:f9: b9:b4:0f:55:bd:77:cb:b5:56:0f:ab:2a:cd:10:de: 68:c8:c5:6e:47:64:7e:4f:57:46:0a:8a:b7:e2:06: 95:d2:10:bc:ad:15:02:84:75:74:73:9f:72:ab:f1: c4:9a:b1:2b:4f:f4:64:9a:e0:ae:b8:23:39:63:5f: 1c:4b:12:5b:69:fc:57:bb:4b:89:60:46:16:52:63: 01:92:a5:c2:29:9f:e8:84:ad:b0:40:fe:01:45:15: e8:d6:0a:3d:b6:b2:9f:94:d7:83:50:c9:dc:3c:01: 05:3a:69:2f:90:00:f4:a2:e6:98:14:c2:a6:39:6b: dd:33:40:47:06:d8:e1:af:08:e2:0e:c0:33:f8:f7: 40:dc:6f:ae:df:1a:1e:65:3c:29:ca:b8:6a:76:51: 58:1b:97:b2:0d:c5:d2:1e:0a:15:d0:9f:b5:60:74: 87:4f:c9:2d:84:c6:72:0c:4c:4f:67:5c:a7:a3:45: b8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:F2:66:9F:42:7D:C2:52:7A:CC:BD:39:9C:C3:57:66:9D:4D:13:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cf5fb60d-2f6c-3edd-b5bf-3792b0e4e6f0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:3d:6f:b5:70:97:34:3b:27:00:71:f5:f5:9f:db:43:fb:9e: ef:47:bf:08:b6:58:ad:d0:a7:31:7b:8e:ee:e6:cf:1f:83:54: 71:d3:d1:39:65:16:a1:96:8f:ab:d2:10:55:61:51:9d:a6:dc: cc:3e:99:f9:08:57:a7:11:be:00:82:e7:04:45:f9:f1:fe:34: 71:02:32:13:d4:4e:d1:0d:6a:f6:9b:be:13:b0:1f:34:b5:63: 8d:0e:17:4b:cc:30:b8:80:28:bc:2e:50:ea:80:ce:8e:89:57: 9a:62:f8:fd:28:ae:89:fc:33:66:a0:d4:b5:01:52:e7:56:6e: e7:7a:74:c9:c9:db:c4:bc:b6:30:b8:c5:51:08:92:bc:c5:6b: 22:2d:c9:a1:58:64:73:92:26:a6:2f:5f:d3:91:10:98:96:c2: 53:b2:e8:47:0c:89:ed:77:50:de:fe:25:75:de:d3:df:31:1a: a2:4b:02:86:bb:49:ab:3b:e1:69:6d:d7:11:8c:06:26:a2:14: 39:d8:32:89:ec:06:2c:8c:51:be:02:da:fb:6b:3a:ac:69:1f: 07:eb:35:d8:5f:78:8b:27:bc:3e:49:ea:a1:ca:47:d3:d1:e8: c5:45:d5:f9:1d:95:89:9f:ca:4b:a1:b8:85:73:5a:36:f8:2f: 5c:ea:da:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKR3qHWh3xRU4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2EzNTViNWMtNzg2ZC00MDU2LWE5MDAtNjE3ZjUyNGI2MTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolV/0nRJSXtpTY7fIIxVRCngjJ2xw56Oevt6 Xs5wsoBL0nX/NXAaSRl0+wLSKW5bcrcpzeWRaj63aydwIYqeoUZK3iTy3wR19/m5 tA9VvXfLtVYPqyrNEN5oyMVuR2R+T1dGCoq34gaV0hC8rRUChHV0c59yq/HEmrEr T/RkmuCuuCM5Y18cSxJbafxXu0uJYEYWUmMBkqXCKZ/ohK2wQP4BRRXo1go9trKf lNeDUMncPAEFOmkvkAD0ouaYFMKmOWvdM0BHBtjhrwjiDsAz+PdA3G+u3xoeZTwp yrhqdlFYG5eyDcXSHgoV0J+1YHSHT8kthMZyDExPZ1yno0W4gwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTyZp9CfcJSesy9OZzDV2adTRMKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2Y1ZmI2MGQtMmY2Yy0z ZWRkLWI1YmYtMzc5MmIwZTRlNmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIc9b7VwlzQ7JwBx9fWf20P7nu9Hvwi2WK3QpzF7ju7mzx+DVHHT0Tll FqGWj6vSEFVhUZ2m3Mw+mfkIV6cRvgCC5wRF+fH+NHECMhPUTtENavabvhOwHzS1 Y40OF0vMMLiAKLwuUOqAzo6JV5pi+P0oron8M2ag1LUBUudWbud6dMnJ28S8tjC4 xVEIkrzFayItyaFYZHOSJqYvX9OREJiWwlOy6EcMie13UN7+JXXe098xGqJLAoa7 Sas74Wlt1xGMBiaiFDnYMonsBiyMUb4C2vtrOqxpHwfrNdhfeIsnvD5J6qHKR9PR 6MVF1fkdlYmfykuhuIVzWjb4L1zq2uM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:44 2025 by rpki-client