$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa File: fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa (raw, json) Hash identifier: 0i0k068wCTY8QNRptlwkCqe3C7Vyz+8tEmgA6VrIG+M= Subject key identifier: 20:C0:FC:F6:55:56:A0:71:F1:AB:80:6F:BF:F5:4D:82:0F:89:F2:F4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C60D11AF32BE10D152C38 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:60:d1:1a:f3:2b:e1:0d:15:2c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=ea4892a3-e343-45a0-b2dd-98ae0a9d15f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:15:70:97:7e:32:79:4a:d2:c0:92:8f:3d:a0: a3:42:f3:a6:35:d6:2b:db:f2:94:dd:a0:9e:3e:d3: 4e:60:13:3c:44:e9:68:01:03:a7:03:5b:88:3e:c9: 8c:ef:9f:a7:63:00:18:ae:1e:0b:2a:7d:34:a7:1d: 15:75:5b:ff:a4:f8:31:9c:4a:06:77:f2:75:4b:d7: 3f:54:47:42:55:55:79:52:1f:dc:e4:40:c6:1f:41: c5:6b:29:cd:e3:02:9d:d1:a0:eb:c5:89:a9:1f:9a: d8:9f:d0:84:15:76:bc:42:12:f1:29:46:9f:b5:79: fc:1e:5f:88:36:b2:8b:1d:5f:06:84:42:61:1b:20: 6f:50:9c:47:c5:48:b3:99:8d:19:d6:8f:28:4a:f7: d5:29:c0:bb:78:d8:30:5e:61:c9:4d:9d:5f:b8:d1: 38:20:c0:10:aa:45:a7:3c:75:27:97:45:dc:14:a6: e9:4b:13:61:70:5f:7f:7b:34:97:54:1c:47:6a:6b: 48:2a:38:b8:6a:db:e1:a0:5a:4b:84:cc:2c:a2:f4: f6:1f:b8:0e:da:ab:29:b4:d4:67:c5:33:a1:85:28: e5:f5:33:ad:ed:18:af:2d:dc:b4:b2:8f:db:cd:99: 09:e7:dc:75:80:d0:dc:ba:5f:96:4e:21:e4:bd:17: 39:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:C0:FC:F6:55:56:A0:71:F1:AB:80:6F:BF:F5:4D:82:0F:89:F2:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fbe7076d-7d69-38b5-9d9f-bad682a691e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:91:49:01:ba:2c:f4:70:33:1c:a2:a9:5f:24:22:ef:60:e3: c6:99:fb:80:c0:58:ef:e2:93:87:42:99:6d:8a:89:4f:a7:f1: c5:c5:53:34:36:40:c3:b8:f3:30:6c:ee:af:da:41:0a:96:34: f2:d5:6c:07:d0:80:db:bd:07:aa:34:6e:f1:41:15:35:2e:03: 74:b8:b6:98:bc:34:3d:ab:7d:40:4d:e7:2d:2c:88:98:0f:71: 7d:4e:49:33:63:51:f3:3e:c7:d0:38:9d:65:16:e4:70:91:be: 5d:6b:9a:a7:10:eb:d2:a4:5d:eb:b3:94:77:8a:20:28:f3:8a: c3:dc:66:da:85:81:8a:0c:94:2a:38:53:eb:c0:9a:d4:98:e5: 16:f4:75:f7:65:de:7d:ab:29:87:2e:ef:0f:5a:0c:1b:14:46: 5d:19:f7:70:f5:95:a3:11:27:4b:0d:aa:e7:b9:57:f1:c2:7b: af:84:a1:89:86:3f:48:11:02:ac:9d:cb:e2:28:b0:67:c3:12: c9:26:1c:01:4f:d0:2b:17:d2:f7:05:15:6e:85:b8:40:10:fa: 69:08:c7:8c:5a:c3:3a:b0:5a:10:91:cb:f0:f4:bc:40:05:49: dd:74:18:b5:7a:91:a8:a9:75:10:de:b1:c9:49:c7:d1:08:90: 12:c6:17:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGDRGvMr4Q0VLDgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWE0ODkyYTMtZTM0My00NWEwLWIyZGQtOThhZTBhOWQxNWY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhVwl34yeUrSwJKPPaCjQvOmNdYr2/KU3aCe PtNOYBM8ROloAQOnA1uIPsmM75+nYwAYrh4LKn00px0VdVv/pPgxnEoGd/J1S9c/ VEdCVVV5Uh/c5EDGH0HFaynN4wKd0aDrxYmpH5rYn9CEFXa8QhLxKUaftXn8Hl+I NrKLHV8GhEJhGyBvUJxHxUizmY0Z1o8oSvfVKcC7eNgwXmHJTZ1fuNE4IMAQqkWn PHUnl0XcFKbpSxNhcF9/ezSXVBxHamtIKji4atvhoFpLhMwsovT2H7gO2qsptNRn xTOhhSjl9TOt7RivLdy0so/bzZkJ59x1gNDcul+WTiHkvRc5OwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCDA/PZVVqBx8auAb7/1TYIPifL0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmJlNzA3NmQtN2Q2OS0z OGI1LTlkOWYtYmFkNjgyYTY5MWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACyRSQG6LPRwMxyiqV8kIu9g48aZ+4DAWO/ik4dCmW2KiU+n8cXFUzQ2 QMO48zBs7q/aQQqWNPLVbAfQgNu9B6o0bvFBFTUuA3S4tpi8ND2rfUBN5y0siJgP cX1OSTNjUfM+x9A4nWUW5HCRvl1rmqcQ69KkXeuzlHeKICjzisPcZtqFgYoMlCo4 U+vAmtSY5Rb0dfdl3n2rKYcu7w9aDBsURl0Z93D1laMRJ0sNque5V/HCe6+EoYmG P0gRAqydy+IosGfDEskmHAFP0CsX0vcFFW6FuEAQ+mkIx4xawzqwWhCRy/D0vEAF Sd10GLV6kaipdRDesclJx9EIkBLGF3I= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:51 2025 by rpki-client