$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa File: f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa (raw, json) Hash identifier: HI99aibGaVxL6m7cAE3yVQC+BbCRV+KLNDHEMjFS3kI= Subject key identifier: B3:F4:C8:36:7D:05:F6:22:D8:52:2D:61:1A:35:36:4B:CA:23:C2:9D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5D64938DB2EE2D5CFC00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5d:64:93:8d:b2:ee:2d:5c:fc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=62a13414-f991-48f0-b839-85ec9fc0f01b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:4e:cf:f1:c7:53:5a:9d:68:77:5c:b5:04:1e: 26:6f:03:8a:b2:42:59:5e:1e:c8:b7:9a:a1:a2:da: ef:b7:9c:75:47:a0:41:fc:27:42:e9:f2:32:94:e0: a7:fd:e1:cb:3c:e3:5c:aa:4c:74:a9:07:aa:f8:be: db:b4:ae:04:0a:4a:48:4a:e0:4c:f1:66:7e:f1:80: 75:c1:7d:69:57:81:7c:a9:a6:17:42:16:b2:40:bd: 8d:ec:ef:95:86:aa:f2:9b:63:6e:55:e0:08:76:89: 2d:be:21:bf:49:0f:aa:04:19:b5:8a:fb:75:ef:68: 68:23:91:1f:9a:81:8e:bd:f8:1b:e2:ec:05:c4:c6: da:67:ec:61:18:07:39:68:b1:04:7a:33:62:77:49: 45:79:26:ef:fb:92:3b:d8:92:b4:99:63:2b:a6:08: a5:1f:4f:39:2d:59:ad:93:4b:86:b0:73:16:2e:d2: e4:cc:67:b5:c0:43:d9:12:7a:ad:8c:20:1e:ab:5a: e0:2f:16:d1:09:33:da:6c:0b:25:f8:25:1f:36:83: 1e:19:9a:e5:29:66:48:b1:12:c5:47:52:53:01:50: 31:50:b6:3e:c0:fd:b5:25:80:bb:54:51:ee:d0:6a: 59:04:c9:bf:75:7b:bf:d3:dd:0d:4f:07:a0:bf:53: d1:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:F4:C8:36:7D:05:F6:22:D8:52:2D:61:1A:35:36:4B:CA:23:C2:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f89fd7d9-7938-3cf9-a6cc-fd8d7e9b566a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0b:33:29:4a:6f:78:af:e2:f9:1a:12:dc:a6:31:b9:75:c5:ce: 06:5f:30:b2:67:b4:f8:33:d3:49:56:8a:97:2e:8a:d9:95:a9: 6e:95:73:42:19:8a:06:ce:c1:b5:82:ee:68:ca:ec:3a:df:aa: 0a:84:bb:17:c5:dc:62:01:5f:e7:19:81:5d:76:f7:f1:27:b1: c8:48:36:b0:6d:af:b9:fe:14:49:5a:c3:d6:9e:4b:20:b4:98: f9:aa:32:72:7c:af:d6:02:a0:3c:05:cd:f8:f3:ba:70:e6:5a: 0b:64:e9:aa:44:5e:d4:de:40:31:12:a7:48:68:00:d2:92:87: 73:62:6d:94:0f:11:65:85:30:b8:06:3d:13:8a:19:eb:ae:84: ad:42:55:9c:d5:71:24:d1:b2:3d:da:61:2d:4e:f5:9c:d7:d0: 8c:1f:eb:fe:1f:b3:fe:a4:96:fc:ab:0a:2e:51:b6:7c:97:56: 5f:4c:53:1f:3b:fe:b4:54:f7:16:07:e7:eb:e8:3a:86:73:55: 5d:94:77:29:20:30:eb:a8:56:a8:91:54:00:bc:ed:40:0b:92: d1:c9:ae:5a:bf:5c:99:af:45:01:23:3a:22:6d:ca:34:8d:19: 0c:c5:7e:33:3a:49:ce:77:40:29:81:ec:5e:79:88:e8:f2:f0: 46:fc:71:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF1kk42y7i1c/AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjJhMTM0MTQtZjk5MS00OGYwLWI4MzktODVlYzlmYzBmMDFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkE7P8cdTWp1od1y1BB4mbwOKskJZXh7It5qh otrvt5x1R6BB/CdC6fIylOCn/eHLPONcqkx0qQeq+L7btK4ECkpISuBM8WZ+8YB1 wX1pV4F8qaYXQhayQL2N7O+Vhqrym2NuVeAIdoktviG/SQ+qBBm1ivt172hoI5Ef moGOvfgb4uwFxMbaZ+xhGAc5aLEEejNid0lFeSbv+5I72JK0mWMrpgilH085LVmt k0uGsHMWLtLkzGe1wEPZEnqtjCAeq1rgLxbRCTPabAsl+CUfNoMeGZrlKWZIsRLF R1JTAVAxULY+wP21JYC7VFHu0GpZBMm/dXu/090NTwegv1PR9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLP0yDZ9BfYi2FItYRo1NkvKI8KdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjg5ZmQ3ZDktNzkzOC0z Y2Y5LWE2Y2MtZmQ4ZDdlOWI1NjZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAszKUpveK/i+RoS3KYxuXXFzgZfMLJntPgz00lWipcuitmVqW6Vc0IZ igbOwbWC7mjK7DrfqgqEuxfF3GIBX+cZgV129/EnschINrBtr7n+FElaw9aeSyC0 mPmqMnJ8r9YCoDwFzfjzunDmWgtk6apEXtTeQDESp0hoANKSh3NibZQPEWWFMLgG PROKGeuuhK1CVZzVcSTRsj3aYS1O9ZzX0Iwf6/4fs/6klvyrCi5RtnyXVl9MUx87 /rRU9xYH5+voOoZzVV2UdykgMOuoVqiRVAC87UALktHJrlq/XJmvRQEjOiJtyjSN GQzFfjM6Sc53QCmB7F55iOjy8Eb8cdo= -----END CERTIFICATE-----Generated at Wed Nov 5 08:18:31 2025 by rpki-client