$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa File: 04a03306-2f12-3d10-806c-44f9debc1d75.roa (raw, json) Hash identifier: p2G/FpefC/eZ/qOHUlrJzJlfU8F7ehT/5tqtpZoxGSo= Subject key identifier: C1:95:55:55:C4:DC:0C:71:3D:19:AE:3B:C8:D7:86:00:04:30:1B:10 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA0D92A14E2D03A8612A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.58.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a0:d9:2a:14:e2:d0:3a:86:12:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a76f9fc5-4ce4-470e-901e-fa529a653111 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:d0:fa:7d:9e:2b:83:ff:60:fc:0f:15:0f:e3: 3a:bd:bd:9d:97:07:48:e4:d0:13:a8:79:04:01:66: 15:f3:f0:60:fc:c8:1c:5b:a9:8f:cf:ed:0d:ee:78: 72:65:d1:5d:c2:fa:85:90:c9:1b:45:ab:e5:0e:0b: ce:da:23:a8:ea:d0:11:47:ad:17:ac:a5:80:6f:7e: 47:62:54:51:6e:ec:59:f3:4f:9b:03:1e:e6:dd:ab: 1c:67:41:75:36:25:10:00:a0:ad:88:c5:d3:5b:fc: 1a:53:c5:0c:f3:99:86:d7:a7:5e:9a:f0:3a:60:48: 3d:ef:b3:6d:c9:49:ac:0c:6f:b4:5a:a8:bf:87:74: c0:05:bf:4f:7d:e5:03:1c:7f:92:6c:c5:2b:67:8d: b6:d7:05:ac:b0:cb:68:7f:8f:4d:9a:6f:b8:ea:a8: 3b:4c:b2:43:b7:af:a9:6c:04:6f:db:44:1a:d6:3a: 70:25:27:c3:3c:a7:ea:73:cb:3c:14:fd:a6:fa:53: 00:32:fc:42:38:8a:69:c0:2f:ee:8a:ea:5a:52:6f: 20:11:35:8a:9b:c9:f4:dd:69:d6:c8:12:45:4d:e5: 93:7c:c7:78:5a:45:56:ee:b7:df:5f:12:dc:41:a0: 23:5d:20:3a:6c:f6:bd:5f:51:99:ff:1e:58:0a:9d: fa:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:95:55:55:C4:DC:0C:71:3D:19:AE:3B:C8:D7:86:00:04:30:1B:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6a:ff:4c:f9:26:61:f3:40:8e:25:3d:3c:41:9a:5e:2a:b3:88: 9d:b6:4a:78:94:32:49:61:4e:0e:72:d1:65:5f:29:40:d7:f9: b2:ad:c0:e7:2f:2c:ec:ab:c3:a1:a3:f9:56:4d:f8:31:04:10: 1e:36:ae:99:05:f0:8b:13:b7:39:ca:d5:fe:05:4a:55:42:66: 46:bc:bc:05:b2:8d:d2:fa:72:57:e9:7b:d9:80:de:f0:1c:74: 88:2e:0f:e6:83:0a:77:8f:f4:ea:b1:be:cd:54:a3:5c:11:ac: 7c:5c:0b:f4:b8:16:4b:66:33:7c:30:b4:6f:e4:8e:9c:d3:96: 09:3d:7d:b1:53:8d:61:af:af:c6:8c:7b:68:bb:ba:35:70:f5: 7d:95:e2:f6:5d:c5:56:a2:54:0b:a8:70:9d:eb:b5:38:98:9c: c2:d9:8c:3d:0a:d0:e3:4b:18:c1:81:33:04:40:4f:72:4a:4e: ea:55:b6:16:af:db:55:bd:2d:58:44:ac:9f:b0:c1:c7:a6:7a: 9e:94:00:e1:8b:8a:67:83:1f:8f:72:3d:81:66:fb:62:da:63: 01:6b:ed:3e:b0:0c:24:6c:93:14:85:16:4f:2d:65:96:38:6a: 07:26:ca:47:53:fc:5f:55:c4:c6:15:3a:df:ae:8b:6f:a8:42: 36:12:27:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKDZKhTi0DqGEqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTc2ZjlmYzUtNGNlNC00NzBlLTkwMWUtZmE1MjlhNjUzMTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgdD6fZ4rg/9g/A8VD+M6vb2dlwdI5NATqHkE AWYV8/Bg/MgcW6mPz+0N7nhyZdFdwvqFkMkbRavlDgvO2iOo6tARR60XrKWAb35H YlRRbuxZ80+bAx7m3ascZ0F1NiUQAKCtiMXTW/waU8UM85mG16demvA6YEg977Nt yUmsDG+0Wqi/h3TABb9PfeUDHH+SbMUrZ4221wWssMtof49Nmm+46qg7TLJDt6+p bARv20Qa1jpwJSfDPKfqc8s8FP2m+lMAMvxCOIppwC/uiupaUm8gETWKm8n03WnW yBJFTeWTfMd4WkVW7rffXxLcQaAjXSA6bPa9X1GZ/x5YCp36DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMGVVVXE3AxxPRmuO8jXhgAEMBsQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDRhMDMzMDYtMmYxMi0z ZDEwLTgwNmMtNDRmOWRlYmMxZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGr/TPkmYfNAjiU9PEGaXiqziJ22SniUMklhTg5y0WVfKUDX+bKtwOcv LOyrw6Gj+VZN+DEEEB42rpkF8IsTtznK1f4FSlVCZka8vAWyjdL6clfpe9mA3vAc dIguD+aDCneP9Oqxvs1Uo1wRrHxcC/S4FktmM3wwtG/kjpzTlgk9fbFTjWGvr8aM e2i7ujVw9X2V4vZdxVaiVAuocJ3rtTiYnMLZjD0K0ONLGMGBMwRAT3JKTupVthav 21W9LVhErJ+wwcemep6UAOGLimeDH49yPYFm+2LaYwFr7T6wDCRskxSFFk8tZZY4 agcmykdT/F9VxMYVOt+ui2+oQjYSJ2o= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:52 2025 by rpki-client