$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa File: 0032e347-6e3a-3cea-940c-039940ff7a70.roa (raw, json) Hash identifier: eBYYWr6kTIoHNx1CiG5KV1ZkCRl/bh06pFBbqu8ZJbc= Subject key identifier: 5F:66:2D:20:77:0D:B5:7B:9D:D3:B0:D9:DB:CE:20:F3:A3:B9:DF:1D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA441F3D7A10E1A5162A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a4:41:f3:d7:a1:0e:1a:51:62:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=d65233e4-9d1c-44e7-8a37-7b1d21dda728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:51:15:6d:52:6b:18:19:76:c3:8a:2e:35:db: ca:4a:1e:8f:d3:3c:c1:92:2c:20:5a:4f:ae:af:46: 50:55:65:dd:d3:70:24:a7:b2:65:1b:68:ad:2e:13: fd:db:63:64:17:19:8b:2f:2b:05:94:88:3b:9e:b6: 03:17:b7:f2:db:42:74:1d:85:b4:64:52:d4:e6:a2: 4c:86:10:ec:ea:4c:ac:6f:5c:2a:83:dc:a3:ce:d9: a2:8d:c8:df:80:6f:66:f4:b5:08:73:7a:05:91:b2: 40:d1:9d:1f:7d:43:e3:fe:ad:6e:63:64:24:7f:ce: 01:9b:6e:4f:ea:28:61:ee:0f:aa:1b:e5:6d:49:db: a3:b8:ed:ca:10:ec:03:cf:2f:b8:af:b3:86:d6:8f: 3b:16:4b:b1:e3:ad:6c:a9:ef:92:d9:89:cb:45:84: 2e:f9:60:dd:59:69:0b:0a:c4:b1:73:2b:ca:0d:f8: 28:77:da:5c:2a:a0:a5:78:c6:69:3f:15:f7:d7:84: c5:77:b7:cd:5a:9f:52:88:b3:2a:ce:7f:61:1c:4b: 7e:32:b0:c8:a8:70:53:ac:fd:80:f9:f3:b7:d5:af: 4f:33:ab:1c:d0:ec:c3:26:e1:03:fc:4a:be:ae:cb: ff:75:da:fb:53:79:41:4f:47:09:ae:ae:ae:e8:74: e9:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:66:2D:20:77:0D:B5:7B:9D:D3:B0:D9:DB:CE:20:F3:A3:B9:DF:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:3d:27:ce:17:c8:09:90:65:54:57:cb:16:93:2c:88:10:4f: 54:e9:03:ee:19:27:10:98:94:69:d4:3c:c2:d8:2d:36:9d:c2: 07:23:10:23:79:a6:0d:44:f1:ce:03:e1:69:ad:64:a6:d6:ac: f8:fc:33:f6:cd:07:bf:d9:b5:94:59:0d:c1:7a:1d:5c:ad:a5: e0:23:54:9d:ab:98:0f:13:a2:4c:47:18:d7:d2:66:42:ab:a0: 6b:8f:6a:a8:73:a1:15:dd:42:14:c8:7b:cf:5c:af:8b:38:fe: 26:f3:8a:32:89:9f:31:ce:db:8f:4c:5b:b6:65:17:e8:ab:d0: b4:32:aa:42:d0:25:94:47:1c:49:48:79:b7:26:83:53:d8:93: 2d:78:87:3b:e8:23:1d:92:68:ff:3c:bb:05:66:61:37:9a:04: cb:4c:98:28:19:ab:54:c7:2f:87:a9:43:38:39:10:fb:fa:f5: a0:8b:00:36:96:16:02:48:5b:8e:44:a3:72:8e:64:37:c3:85: db:0e:6c:07:93:94:db:0e:a6:75:94:18:b4:84:3f:d7:62:ed: a0:22:17:34:6e:04:20:9b:97:91:3b:a2:fb:ba:aa:67:a3:38: 42:b4:37:87:a3:57:a0:cd:b1:2e:80:ed:f2:79:8a:0c:fc:a9: 7d:c5:a8:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKRB89ehDhpRYqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZDY1MjMzZTQtOWQxYy00NGU3LThhMzctN2IxZDIxZGRhNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqVEVbVJrGBl2w4ouNdvKSh6P0zzBkiwgWk+u r0ZQVWXd03Akp7JlG2itLhP922NkFxmLLysFlIg7nrYDF7fy20J0HYW0ZFLU5qJM hhDs6kysb1wqg9yjztmijcjfgG9m9LUIc3oFkbJA0Z0ffUPj/q1uY2Qkf84Bm25P 6ihh7g+qG+VtSdujuO3KEOwDzy+4r7OG1o87Fkux461sqe+S2YnLRYQu+WDdWWkL CsSxcyvKDfgod9pcKqCleMZpPxX314TFd7fNWp9SiLMqzn9hHEt+MrDIqHBTrP2A +fO31a9PM6sc0OzDJuED/Eq+rsv/ddr7U3lBT0cJrq6u6HTpmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9mLSB3DbV7ndOw2dvOIPOjud8dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDAzMmUzNDctNmUzYS0z Y2VhLTk0MGMtMDM5OTQwZmY3YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG49J84XyAmQZVRXyxaTLIgQT1TpA+4ZJxCYlGnUPMLYLTadwgcjECN5 pg1E8c4D4WmtZKbWrPj8M/bNB7/ZtZRZDcF6HVytpeAjVJ2rmA8TokxHGNfSZkKr oGuPaqhzoRXdQhTIe89cr4s4/ibzijKJnzHO249MW7ZlF+ir0LQyqkLQJZRHHElI ebcmg1PYky14hzvoIx2SaP88uwVmYTeaBMtMmCgZq1THL4epQzg5EPv69aCLADaW FgJIW45Eo3KOZDfDhdsObAeTlNsOpnWUGLSEP9di7aAiFzRuBCCbl5E7ovu6qmej OEK0N4ejV6DNsS6A7fJ5igz8qX3FqGw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:40 2025 by rpki-client