$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json) Hash identifier: pEhf/kG7KeoR9qxcaF/YW/kRwUjppVj+B4kN45DWiZ0= Subject key identifier: 0F:A7:43:A9:1A:97:3D:29:49:6E:57:78:B1:F4:F7:E2:DD:60:E8:9F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C49FA00E1072AFFE149C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.57.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:49:fa:00:e1:07:2a:ff:e1:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2f416e99-a5e5-4a14-a8fc-e23d1d3602dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:8a:6c:b5:99:99:b3:93:c5:a9:61:e9:c1: 74:60:10:c4:3b:d7:4d:7a:1a:10:9c:eb:0c:02:d2: 1d:02:19:9c:1c:f8:43:2b:28:4d:1f:ed:af:c2:61: 9b:48:a7:cc:ee:7f:63:0d:74:10:12:2c:1a:d6:c1: e0:45:fd:0d:87:ac:5c:34:d6:e5:b1:3a:23:90:10: 05:2e:f8:59:04:76:b5:6e:7f:62:c9:08:dc:7b:50: 3d:d1:84:f8:58:28:a6:ca:ba:0e:8a:52:09:9d:60: e8:a3:db:21:ee:5f:98:cd:02:e3:f2:33:de:a8:56: 97:3b:df:5c:f1:0e:f4:ee:b9:65:dd:05:3d:58:6c: 63:3b:b9:b8:98:6e:2f:63:3b:5a:56:f4:ce:fc:e1: 41:09:4d:9b:41:9e:d6:29:5d:c8:d7:5f:bb:e7:8f: ea:30:4e:ce:12:f6:35:4b:df:fc:a6:90:b4:a3:db: f7:34:57:4d:d3:f7:9e:c9:ef:93:b1:0c:cd:72:4a: db:05:12:7a:87:33:90:70:a6:78:69:1b:90:88:84: b3:67:18:25:75:64:39:6b:64:66:36:ec:11:d8:3d: 9a:02:84:72:6e:53:5a:10:36:7e:0b:2f:39:80:9b: be:4b:44:d3:f0:d8:f8:03:9c:30:fb:01:3f:8c:ef: 84:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:A7:43:A9:1A:97:3D:29:49:6E:57:78:B1:F4:F7:E2:DD:60:E8:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:84:ca:6f:bf:c1:0a:76:62:fe:85:14:d9:28:2f:ef:92:9a: 7e:30:7e:19:3d:9e:d9:77:3e:88:a3:10:44:79:54:86:3a:5d: 45:3c:fc:21:50:68:8f:a0:88:c2:60:30:4b:e2:2d:a7:37:81: 36:58:08:28:57:b2:9a:10:f9:59:0f:e2:bb:95:23:09:62:df: ad:f0:ce:28:12:89:bc:fa:20:05:8e:84:f3:17:c4:2f:e9:8b: 6c:4c:14:04:4b:d6:43:25:bc:a1:4c:cd:af:bd:31:1c:03:76: c5:4e:df:62:49:b9:fa:9f:8b:66:9d:88:c2:44:e3:78:4b:f8: 27:4f:34:ef:98:2d:26:ec:66:29:14:fa:28:e3:cc:a6:f1:bc: 54:4c:ea:8b:e3:a1:06:ab:0b:0c:3b:41:b6:ba:25:d1:24:45: d5:8c:8a:24:27:7f:98:8d:41:ec:f2:ec:0d:d1:fe:a4:70:9a: dd:45:85:d6:d9:2d:3e:3f:55:85:90:4e:34:9d:bf:22:3b:e0: f7:ee:34:c5:34:59:7a:29:1f:5b:f5:64:b4:ee:d4:6b:9f:a2: 86:04:12:e6:bf:b3:5d:66:0e:10:a3:50:ea:d9:e1:59:ac:7f: bb:36:17:47:e3:8c:e8:d1:c9:07:66:a0:dd:d2:df:4e:cb:7c: e9:cd:4c:99 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEn6AOEHKv/hScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmY0MTZlOTktYTVlNS00YTE0LWE4ZmMtZTIzZDFkMzYwMmRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBGKbLWZmbOTxalh6cF0YBDEO9dNehoQnOsM AtIdAhmcHPhDKyhNH+2vwmGbSKfM7n9jDXQQEiwa1sHgRf0Nh6xcNNblsTojkBAF LvhZBHa1bn9iyQjce1A90YT4WCimyroOilIJnWDoo9sh7l+YzQLj8jPeqFaXO99c 8Q707rll3QU9WGxjO7m4mG4vYztaVvTO/OFBCU2bQZ7WKV3I11+754/qME7OEvY1 S9/8ppC0o9v3NFdN0/eeye+TsQzNckrbBRJ6hzOQcKZ4aRuQiISzZxgldWQ5a2Rm NuwR2D2aAoRyblNaEDZ+Cy85gJu+S0TT8Nj4A5ww+wE/jO+ExQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA+nQ6kalz0pSW5XeLH09+LdYOifMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjg0MGI4ZTktNjlhYi0z YThmLWFiODUtZjgzZDg1MmIwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIGEym+/wQp2Yv6FFNkoL++Smn4wfhk9ntl3PoijEER5VIY6XUU8/CFQ aI+giMJgMEviLac3gTZYCChXspoQ+VkP4ruVIwli363wzigSibz6IAWOhPMXxC/p i2xMFARL1kMlvKFMza+9MRwDdsVO32JJufqfi2adiMJE43hL+CdPNO+YLSbsZikU +ijjzKbxvFRM6ovjoQarCww7Qba6JdEkRdWMiiQnf5iNQezy7A3R/qRwmt1FhdbZ LT4/VYWQTjSdvyI74PfuNMU0WXopH1v1ZLTu1GufooYEEua/s11mDhCjUOrZ4Vms f7s2F0fjjOjRyQdmoN3S307LfOnNTJk= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:47 2025 by rpki-client