$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa File: dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa (raw, json) Hash identifier: tmnylCivwPdmxw6OCOhvQtkpZAXQkQORxDz8xtA4cC4= Subject key identifier: 3B:2E:4E:72:C7:C6:A2:E6:19:87:59:CA:73:2A:C4:61:09:6A:A9:5B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C65FAC88E37D004AE4980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.34.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:65:fa:c8:8e:37:d0:04:ae:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=94c0e811-9cf0-41e0-b958-e4ac8e981d6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:dd:4a:3f:8e:6d:cc:a0:05:66:c3:d9:d3:44: 14:05:bd:c2:bc:45:06:bb:43:58:2f:3e:ba:18:70: 34:4c:8a:2f:4c:9c:d8:1a:b8:fc:65:b7:c7:0a:e7: 3f:0a:91:19:33:bb:e3:2e:b1:38:a6:d3:fd:23:dc: eb:3f:29:fd:a6:58:a2:9b:13:ef:5d:cb:bc:82:4e: 77:cf:e2:ad:29:f0:72:6e:fd:ad:f0:da:b8:43:07: 23:df:69:e1:7f:77:eb:94:fa:34:b3:c5:9a:0e:84: 12:3c:17:72:af:07:c5:c1:27:a6:56:4a:a3:e9:95: e7:df:d2:a5:42:f0:95:7c:bc:b9:4b:5d:02:ae:d8: b3:40:96:8f:dc:bd:54:f1:b1:27:f2:68:e6:3a:67: e8:73:93:2e:32:63:7d:af:1a:7e:64:1e:ea:f3:07: 68:85:29:35:47:a6:0a:72:17:e1:1c:54:b2:dc:37: e5:a3:5b:62:e3:63:5e:91:31:fb:be:f3:68:0e:9f: 06:63:af:47:40:3f:96:d5:b2:95:f6:49:0a:cc:c1: 42:f3:c4:19:ce:97:de:03:79:13:71:dd:9c:eb:79: 97:25:73:38:16:bf:b8:07:8f:ae:16:c2:1c:73:12: 74:7f:f3:b9:b7:82:24:16:3b:74:dc:49:2e:fd:03: 21:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:2E:4E:72:C7:C6:A2:E6:19:87:59:CA:73:2A:C4:61:09:6A:A9:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:43:bd:2c:13:0b:49:72:e4:c1:a8:13:80:07:19:90:4f:d2: 97:87:9b:a8:1e:b8:f5:e2:e7:42:76:91:a9:9d:61:f8:a4:d8: 3b:6c:b3:b4:48:35:fa:c5:44:ef:a3:c3:dc:70:7a:e9:15:34: 4b:1d:d5:2c:a4:0a:8a:a0:33:43:9f:a7:42:0b:bc:54:fe:85: c0:69:9d:41:b5:4c:4d:ce:97:2f:1e:43:52:47:d1:6a:06:15: d7:ea:28:ba:19:8d:a6:f4:cd:77:74:60:5f:7e:f6:ce:ab:d5: 67:8f:88:11:e6:b2:fe:bc:0d:b8:15:10:e5:d3:56:db:9c:f3: 67:6e:60:92:d1:d0:52:c9:56:12:d0:86:b7:fb:ed:49:ea:a2: f2:9b:e5:f0:87:0a:19:36:db:6c:77:cd:e6:f7:fd:dc:4b:49: 8e:6e:ce:b0:55:df:e9:84:49:ec:34:c6:bc:f2:ba:ba:b4:aa: 27:30:77:25:80:51:51:4d:d1:dd:fa:0c:da:99:9b:95:34:62: 34:4a:27:b1:ba:30:3e:c5:6a:a5:15:fc:6f:71:3b:2a:81:22: 51:36:b7:74:81:fe:19:e6:2f:72:f4:88:30:fc:ac:b1:7b:50: a2:2d:d5:d5:7b:a1:3d:6d:05:2b:5c:a1:2a:69:27:f7:1b:42: ef:e6:93:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGX6yI430ASuSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk OTRjMGU4MTEtOWNmMC00MWUwLWI5NTgtZTRhYzhlOTgxZDZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4d1KP45tzKAFZsPZ00QUBb3CvEUGu0NYLz66 GHA0TIovTJzYGrj8ZbfHCuc/CpEZM7vjLrE4ptP9I9zrPyn9pliimxPvXcu8gk53 z+KtKfBybv2t8Nq4Qwcj32nhf3frlPo0s8WaDoQSPBdyrwfFwSemVkqj6ZXn39Kl QvCVfLy5S10CrtizQJaP3L1U8bEn8mjmOmfoc5MuMmN9rxp+ZB7q8wdohSk1R6YK chfhHFSy3Dflo1ti42NekTH7vvNoDp8GY69HQD+W1bKV9kkKzMFC88QZzpfeA3kT cd2c63mXJXM4Fr+4B4+uFsIccxJ0f/O5t4IkFjt03Eku/QMhDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDsuTnLHxqLmGYdZynMqxGEJaqlbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGNhZTMzZmQtZTExYy0z ZjIwLWIwZmItODcxMjkyYjk3YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdDvSwTC0ly5MGoE4AHGZBP0peHm6geuPXi50J2kamdYfik2Dtss7RI NfrFRO+jw9xweukVNEsd1SykCoqgM0Ofp0ILvFT+hcBpnUG1TE3Oly8eQ1JH0WoG FdfqKLoZjab0zXd0YF9+9s6r1WePiBHmsv68DbgVEOXTVtuc82duYJLR0FLJVhLQ hrf77UnqovKb5fCHChk222x3zeb3/dxLSY5uzrBV3+mESew0xrzyurq0qicwdyWA UVFN0d36DNqZm5U0YjRKJ7G6MD7FaqUV/G9xOyqBIlE2t3SB/hnmL3L0iDD8rLF7 UKIt1dV7oT1tBStcoSppJ/cbQu/mk70= -----END CERTIFICATE-----Generated at Wed Nov 5 06:05:16 2025 by rpki-client