$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa File: f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa (raw, json) Hash identifier: 3qgdgU4jEWcrmGNhDt+pcNezZ2aU9Lr8d7TaYnpTbfs= Subject key identifier: 2E:A8:47:27:0D:FA:F0:7A:01:CD:DC:3D:42:F3:7F:E1:55:13:CA:E6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4CB21CD624CD3CB97180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.47.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4c:b2:1c:d6:24:cd:3c:b9:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=60ed8f1f-4971-4ca1-9f23-0e1aa8366ecf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:aa:f5:ae:80:03:43:61:d1:6c:02:62:70:85: 4d:0d:d3:d0:fe:19:0a:d4:c3:6e:38:cf:42:4b:f8: 4b:8a:78:e2:83:ee:f2:b3:1b:28:cb:b6:8b:dc:37: 37:bb:21:7a:57:77:e9:9b:b2:b5:2f:37:3c:c0:db: 62:69:67:c4:5f:b7:97:39:d9:83:ee:47:f5:fe:ef: e2:8b:89:3b:2e:67:0f:9a:3c:95:9e:9a:45:12:3b: 28:c8:0b:8f:ea:e0:4f:aa:75:68:25:91:d2:07:52: 3e:45:b2:b2:fe:6b:fa:c3:c6:db:17:71:61:6b:8e: 85:6d:85:2b:1c:3a:d6:4a:e2:75:55:b2:50:ac:4a: a3:54:30:5b:1a:ce:92:bb:c7:76:fc:96:20:3a:5f: e5:d6:96:21:ea:85:b4:d5:9f:cc:af:f4:b5:9a:e2: 1f:bc:e8:8f:bc:f9:41:fd:88:56:a4:da:6a:5e:01: a6:86:4e:4c:48:f8:f1:7b:3b:70:4b:19:fd:0b:a8: 44:4f:e6:7d:a4:26:69:c9:29:8a:3d:55:ef:7b:8b: 49:d6:e2:2f:b3:45:6d:4b:6c:ce:86:07:73:00:59: dd:53:11:7e:8c:76:d4:d9:1d:88:a5:1f:1a:ec:ac: b8:ad:92:70:9b:98:62:01:c1:51:51:91:72:aa:e3: ce:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:A8:47:27:0D:FA:F0:7A:01:CD:DC:3D:42:F3:7F:E1:55:13:CA:E6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9312de1-5c8b-34c5-9ad3-e4a451935b67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a4:c7:2c:02:dd:78:70:31:0e:94:b6:17:e5:6e:45:58:0d: 10:5d:fd:5a:ee:c3:52:4c:b0:f1:44:52:9d:97:f0:c6:79:be: 44:d9:de:f7:d9:82:cd:40:64:57:c2:fc:c9:85:78:c8:4c:cd: 97:41:85:53:0d:18:63:94:52:26:4c:81:1d:0d:f1:65:c0:7e: 9d:24:d9:5b:51:1d:7f:f2:fe:f9:04:ea:58:5e:db:cf:35:04: da:7e:a3:b2:75:ba:8d:64:57:bf:68:69:da:51:af:a7:a3:46: 35:fb:26:ac:c6:5c:fa:9c:2e:3e:73:f1:7a:87:ab:5a:fe:cf: c0:0f:7e:46:06:71:19:03:40:7b:c7:b3:e5:08:e1:20:e0:9c: ec:a6:98:4a:b8:45:d3:7c:a8:bf:f7:1f:09:7b:64:84:e8:7e: 6c:f9:3b:3b:cc:4e:9d:ca:0c:56:27:0b:bc:b0:f2:01:a1:3d: b8:42:66:d9:7a:72:27:87:45:fc:0f:c0:b2:1a:86:39:2a:8f: dc:19:d5:78:65:84:b3:b2:43:b9:c5:de:a7:44:1c:27:11:6a: 09:4b:a4:79:50:55:e1:31:c2:87:40:ad:ca:1f:da:53:3e:91: 1c:8d:a4:fb:99:ad:00:76:e5:cf:a3:e9:e5:f5:d5:07:7d:8d: 5c:e1:ca:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEyyHNYkzTy5cYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjBlZDhmMWYtNDk3MS00Y2ExLTlmMjMtMGUxYWE4MzY2ZWNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjKr1roADQ2HRbAJicIVNDdPQ/hkK1MNuOM9C S/hLinjig+7ysxsoy7aL3Dc3uyF6V3fpm7K1Lzc8wNtiaWfEX7eXOdmD7kf1/u/i i4k7LmcPmjyVnppFEjsoyAuP6uBPqnVoJZHSB1I+RbKy/mv6w8bbF3Fha46FbYUr HDrWSuJ1VbJQrEqjVDBbGs6Su8d2/JYgOl/l1pYh6oW01Z/Mr/S1muIfvOiPvPlB /YhWpNpqXgGmhk5MSPjxeztwSxn9C6hET+Z9pCZpySmKPVXve4tJ1uIvs0VtS2zO hgdzAFndUxF+jHbU2R2IpR8a7Ky4rZJwm5hiAcFRUZFyquPONwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC6oRycN+vB6Ac3cPULzf+FVE8rmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjkzMTJkZTEtNWM4Yi0z NGM1LTlhZDMtZTRhNDUxOTM1YjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESkxywC3XhwMQ6UthflbkVYDRBd/Vruw1JMsPFEUp2X8MZ5vkTZ3vfZ gs1AZFfC/MmFeMhMzZdBhVMNGGOUUiZMgR0N8WXAfp0k2VtRHX/y/vkE6lhe2881 BNp+o7J1uo1kV79oadpRr6ejRjX7JqzGXPqcLj5z8XqHq1r+z8APfkYGcRkDQHvH s+UI4SDgnOymmEq4RdN8qL/3Hwl7ZITofmz5OzvMTp3KDFYnC7yw8gGhPbhCZtl6 cieHRfwPwLIahjkqj9wZ1XhlhLOyQ7nF3qdEHCcRaglLpHlQVeExwodArcof2lM+ kRyNpPuZrQB25c+j6eX11Qd9jVzhymc= -----END CERTIFICATE-----Generated at Wed Nov 5 07:56:01 2025 by rpki-client