$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa File: 257de336-1c6c-3005-959d-52f3e18c305d.roa (raw, json) Hash identifier: Dg7RsOS8rEAVy8Vd9J98qN1mch3B+zkFBGg0yBpZOg4= Subject key identifier: 30:90:A5:A7:30:67:BC:09:41:45:0D:70:F9:AF:2A:93:53:8A:D2:FB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C6237FF8174A03F065C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:62:37:ff:81:74:a0:3f:06:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=86fb6676-d6b8-42a1-bb43-c7a23577f65c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:7c:14:b9:e7:7a:d3:bd:1e:78:ea:41:e4:c2: 76:a1:5b:f5:21:0c:75:36:ce:f0:ca:d7:6f:dc:cb: 3e:90:32:07:8a:bb:7d:91:33:f7:66:ee:45:3b:08: a2:38:47:c8:db:70:1e:31:5f:5a:e8:1c:67:d2:58: 44:e3:0f:0a:73:d2:9f:9f:0f:ea:2e:cc:e1:49:7e: ed:1e:57:78:43:e3:5c:cf:f1:71:96:e0:cd:d2:2e: 45:59:2b:b3:ed:8e:72:56:5f:16:c0:2f:63:87:17: 91:8a:6f:13:30:bc:07:04:6c:0a:b7:13:5d:9a:4e: 1a:f4:ec:c9:55:ae:51:ca:25:85:35:98:39:d8:83: c1:9a:b7:1f:99:fa:2b:9f:44:f8:b1:31:28:8a:13: 30:c3:82:ae:c3:ce:5d:cb:8f:43:1f:68:0a:40:14: b4:50:a2:39:bf:b8:91:d8:1d:14:6d:b5:43:78:48: 0d:fb:30:30:d5:57:9e:37:ed:b2:1a:82:8b:84:76: 48:c7:57:af:f5:f5:bd:1b:f0:31:17:d1:67:a2:df: 78:34:d0:c1:9f:f8:e1:06:ad:f3:0e:e5:92:66:7c: 2e:2a:cb:20:25:62:44:b7:b3:3b:fe:ca:e0:eb:23: 48:2e:ae:f9:22:7c:2c:ab:2f:75:8f:c4:dc:a5:5b: 4b:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:90:A5:A7:30:67:BC:09:41:45:0D:70:F9:AF:2A:93:53:8A:D2:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:6c:ad:c8:c3:15:f2:c4:56:6b:e4:eb:1f:2c:e7:1e:2f:12: aa:f4:1a:45:14:04:e3:99:17:40:a1:c6:3d:ae:9b:7a:8b:f3: 9b:e0:90:70:5e:bc:b1:59:bd:90:20:bd:88:1d:4a:1e:51:49: 21:f8:d6:7c:26:e4:d0:b4:4e:f5:af:28:cb:05:41:e2:13:91: ba:46:a3:0d:21:62:50:14:99:70:9b:55:f3:28:0e:d2:0f:a1: f4:a2:04:3c:02:32:12:71:eb:3c:d5:80:4e:3d:46:4d:0b:53: 8e:4d:03:28:72:a2:b8:86:2a:ff:43:ec:1c:b4:ef:4a:c1:7d: 2d:13:51:bd:03:e7:c0:05:ef:bb:e5:e9:e7:90:2a:2b:47:fc: 5e:02:f7:12:82:95:35:8c:70:88:ec:20:6a:97:79:a1:22:7d: 41:e8:d1:99:00:c6:90:8b:32:f1:76:05:d3:3c:00:e8:89:87: 87:22:ed:85:8d:e4:c2:84:0d:23:03:6a:f7:c4:bf:d5:fd:8a: d2:eb:2f:80:2b:12:8c:fe:ed:4a:92:a1:4c:72:df:57:13:85: 3b:0a:84:c3:93:fc:03:74:73:e7:4c:9d:68:ef:9a:ec:1b:59: 2c:07:63:db:5d:8f:62:09:10:db:f2:41:7c:11:d8:d7:54:ba: 70:f0:14:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGI3/4F0oD8GXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ODZmYjY2NzYtZDZiOC00MmExLWJiNDMtYzdhMjM1NzdmNjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3wUued6070eeOpB5MJ2oVv1IQx1Ns7wytdv 3Ms+kDIHirt9kTP3Zu5FOwiiOEfI23AeMV9a6Bxn0lhE4w8Kc9Kfnw/qLszhSX7t Hld4Q+Ncz/FxluDN0i5FWSuz7Y5yVl8WwC9jhxeRim8TMLwHBGwKtxNdmk4a9OzJ Va5RyiWFNZg52IPBmrcfmforn0T4sTEoihMww4Kuw85dy49DH2gKQBS0UKI5v7iR 2B0UbbVDeEgN+zAw1VeeN+2yGoKLhHZIx1ev9fW9G/AxF9Fnot94NNDBn/jhBq3z DuWSZnwuKssgJWJEt7M7/srg6yNILq75Inwsqy91j8TcpVtL4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCQpacwZ7wJQUUNcPmvKpNTitL7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjU3ZGUzMzYtMWM2Yy0z MDA1LTk1OWQtNTJmM2UxOGMzMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9srcjDFfLEVmvk6x8s5x4vEqr0GkUUBOOZF0Chxj2um3qL85vgkHBe vLFZvZAgvYgdSh5RSSH41nwm5NC0TvWvKMsFQeITkbpGow0hYlAUmXCbVfMoDtIP ofSiBDwCMhJx6zzVgE49Rk0LU45NAyhyoriGKv9D7By070rBfS0TUb0D58AF77vl 6eeQKitH/F4C9xKClTWMcIjsIGqXeaEifUHo0ZkAxpCLMvF2BdM8AOiJh4ci7YWN 5MKEDSMDavfEv9X9itLrL4ArEoz+7UqSoUxy31cThTsKhMOT/AN0c+dMnWjvmuwb WSwHY9tdj2IJENvyQXwR2NdUunDwFIE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:08 2025 by rpki-client