$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa File: 11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa (raw, json) Hash identifier: F0ZHFbbMtBNXO+VEy5TX69pXu50yyRu/XR+MHvFz8HU= Subject key identifier: 2B:7C:80:9D:EE:DE:20:65:3E:E1:7C:95:11:D6:74:65:B0:C7:0A:94 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C60454823F216E9C83D00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.36.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:60:45:48:23:f2:16:e9:c8:3d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7649e3fb-a398-4b41-98ff-d5faf83e8667 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:11:69:1a:84:ec:6e:8b:d0:87:77:ec:81:d7: db:eb:38:02:3b:e6:06:dc:d4:88:d8:81:39:3d:eb: 75:fa:79:5b:9c:23:4d:3d:87:65:41:a9:06:39:cd: b4:0a:4e:5b:f9:db:6c:5d:ce:d0:98:80:8b:93:59: b5:26:28:74:b6:e9:35:06:77:53:a8:6f:90:bb:2d: cc:3a:6f:23:d5:a8:9f:46:71:90:7e:76:9a:59:d7: 42:90:4d:8b:ee:74:5c:a4:84:ca:07:3c:4d:4b:d6: 5f:09:19:68:2c:51:ae:98:bc:23:4e:15:0c:03:bd: a6:2a:00:0e:72:16:9d:a2:0e:da:cf:8e:4c:d9:fa: 82:97:6c:ac:81:b2:1f:c1:f1:a5:3c:6b:d4:13:ec: f6:c3:43:50:97:03:f5:b2:39:7d:c3:3f:b9:75:ed: 84:27:f5:7c:e2:01:e5:16:b0:06:d0:69:83:f7:bb: d3:71:51:91:f2:f6:78:81:46:d6:b5:dd:56:d8:e0: b8:4f:25:5e:fa:0c:86:11:95:96:b6:07:85:a4:f8: 1f:a9:83:7a:a9:fc:d1:4b:ae:49:66:8c:bd:d9:22: 6e:78:f2:3d:02:bd:f0:4a:54:2c:31:c8:a1:68:74: 0c:45:67:65:24:2c:e6:d0:48:86:59:28:52:58:21: 1c:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:7C:80:9D:EE:DE:20:65:3E:E1:7C:95:11:D6:74:65:B0:C7:0A:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:75:bb:b9:e9:a0:12:cf:ad:b3:13:61:aa:08:e9:16:3b:4d: 20:90:b1:b9:93:a6:01:81:6c:45:35:27:18:f7:97:3f:c6:cb: af:f6:f1:aa:b7:36:dd:2e:93:16:bd:6d:69:e3:cc:7f:d1:01: 04:1f:82:e0:eb:5b:1a:ef:54:f3:75:3a:2f:14:51:06:e0:ac: e8:27:ad:1b:6d:63:78:74:a7:21:f6:b1:d0:4b:71:15:47:b0: a2:d5:5a:df:ec:fb:f0:3a:1d:9a:ae:7e:8d:4b:70:5c:67:53: cc:8f:bf:42:7f:25:76:cc:2e:e8:14:d5:76:ec:19:3c:92:08: 1a:e3:e5:ba:43:36:78:65:63:a3:b2:11:55:fd:38:ed:09:70: d0:ae:9a:37:3b:69:e3:08:fa:93:30:44:31:f0:aa:dd:2f:b6: 79:12:45:57:06:b9:60:4e:22:05:8c:ba:21:99:64:bf:48:1d: ca:63:6e:d3:c8:28:cd:2f:21:60:4e:64:eb:73:e8:8c:3d:00: ae:64:12:39:1e:2c:c3:3b:a8:89:93:51:f7:f4:3b:e7:bc:0c: 89:cd:e4:7a:d6:08:ca:f4:94:43:62:74:03:f2:ad:ed:f3:39: a5:e9:6f:f1:34:ea:48:58:aa:0e:aa:6a:e0:ed:84:45:09:57: d1:68:eb:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGBFSCPyFunIPQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzY0OWUzZmItYTM5OC00YjQxLTk4ZmYtZDVmYWY4M2U4NjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxFpGoTsbovQh3fsgdfb6zgCO+YG3NSI2IE5 Pet1+nlbnCNNPYdlQakGOc20Ck5b+dtsXc7QmICLk1m1Jih0tuk1BndTqG+Quy3M Om8j1aifRnGQfnaaWddCkE2L7nRcpITKBzxNS9ZfCRloLFGumLwjThUMA72mKgAO chadog7az45M2fqCl2ysgbIfwfGlPGvUE+z2w0NQlwP1sjl9wz+5de2EJ/V84gHl FrAG0GmD97vTcVGR8vZ4gUbWtd1W2OC4TyVe+gyGEZWWtgeFpPgfqYN6qfzRS65J Zoy92SJuePI9Ar3wSlQsMcihaHQMRWdlJCzm0EiGWShSWCEcRwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCt8gJ3u3iBlPuF8lRHWdGWwxwqUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTFmZjFjYjYtMmMyMi0z MmVhLWE2NjUtMmNlNTc4ODVlOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFF1u7npoBLPrbMTYaoI6RY7TSCQsbmTpgGBbEU1Jxj3lz/Gy6/28aq3 Nt0ukxa9bWnjzH/RAQQfguDrWxrvVPN1Oi8UUQbgrOgnrRttY3h0pyH2sdBLcRVH sKLVWt/s+/A6HZqufo1LcFxnU8yPv0J/JXbMLugU1XbsGTySCBrj5bpDNnhlY6Oy EVX9OO0JcNCumjc7aeMI+pMwRDHwqt0vtnkSRVcGuWBOIgWMuiGZZL9IHcpjbtPI KM0vIWBOZOtz6Iw9AK5kEjkeLMM7qImTUff0O+e8DInN5HrWCMr0lENidAPyre3z OaXpb/E06khYqg6qauDthEUJV9Fo6+M= -----END CERTIFICATE-----Generated at Thu Oct 9 01:09:46 2025 by rpki-client