$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa File: 33fa41b8-82e8-3942-8551-e56832c3b17b.roa (raw, json) Hash identifier: sMb4P3R9ci7bZvnpsh0oQOWIfjJQYVge6jLDqn6psSE= Subject key identifier: 25:62:68:4E:01:02:48:61:BD:1A:DC:EF:47:EE:49:DA:AD:A7:D5:71 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CAB0C7EB381B40F79CC00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.57.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ab:0c:7e:b3:81:b4:0f:79:cc:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3b6f19d7-93b1-40ee-9f93-5ff5c09b0363 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:1a:67:25:65:cc:38:db:8f:f9:53:e0:0b:92: 19:6c:6f:7d:30:a4:1a:9f:44:4a:32:7f:2f:f7:c5: 05:e5:65:c0:4b:b7:bd:56:b2:cf:98:9d:9f:44:f8: d4:18:50:c0:db:39:b4:e6:95:52:df:ad:cb:93:3b: f6:48:63:92:10:9e:14:7d:72:ba:3c:85:77:d4:55: 05:df:10:3b:6e:f2:87:9a:81:6f:6d:38:89:27:7e: 99:22:43:66:0d:4f:59:6e:a7:07:07:63:d8:9c:f5: e3:21:ae:91:8b:1d:ad:8f:55:db:ba:ce:33:56:48: 44:1c:60:a7:0e:4d:be:09:ed:4f:0a:18:dc:cb:70: d8:cd:8f:72:97:95:d9:b3:43:af:ef:01:9f:52:c8: 1f:ef:d1:55:db:d8:13:c3:7f:57:e1:d4:fc:64:10: f7:bb:9a:ec:60:01:ca:61:39:75:86:a3:a4:16:a7: 2b:d9:a1:e9:11:65:2f:12:c7:cd:6f:ac:6e:1c:d1: a7:cb:15:88:f2:df:e3:dd:a8:13:72:e6:d0:a3:61: b7:59:73:93:87:ee:90:13:be:49:31:66:a6:bd:c0: 7d:17:ce:1c:b0:e3:09:1d:a8:1e:90:3e:e4:55:2b: 7f:3a:11:0d:4f:32:61:61:00:76:e4:09:fb:1b:06: a3:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:62:68:4E:01:02:48:61:BD:1A:DC:EF:47:EE:49:DA:AD:A7:D5:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33fa41b8-82e8-3942-8551-e56832c3b17b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:d3:80:9b:96:87:2e:25:9b:93:01:17:1d:1d:d9:19:96:26: c8:0b:97:25:8e:45:ed:51:7e:7d:3e:03:6b:30:b6:7d:d6:e0: 07:2d:b4:1b:ed:53:1c:e1:f5:87:de:d4:e0:c7:47:fa:35:db: e5:0a:78:b8:c5:96:c7:ae:a4:6f:ea:78:d1:da:49:4a:bf:07: 0f:ad:d6:0d:3a:39:1c:7b:8b:14:d5:6b:83:13:ba:1a:85:e4: 60:1a:c7:57:69:23:10:e0:71:05:82:9e:cd:03:fd:3a:a8:30: 04:ac:d0:f9:84:4a:cc:73:08:cc:84:ac:10:05:5d:a1:3a:a7: 9e:83:6f:a2:b8:f8:19:f8:a1:48:53:8e:44:6d:4d:bc:d7:33: 87:59:18:a0:15:73:a2:45:27:92:2c:fd:57:3b:ce:f0:1f:d5: 76:f6:11:89:93:0d:8b:83:28:a1:aa:3d:a4:c1:07:1e:a9:ba: db:62:74:12:12:ec:81:7c:fe:13:09:07:ed:ea:5f:6a:e3:9d: 75:c9:a0:28:d9:8f:8a:ec:97:83:7a:0f:f9:6d:20:d2:83:00: f2:68:b7:5e:a1:29:0a:e8:c0:c2:cc:8b:ed:89:81:c4:1b:1c: b5:8c:38:a3:fa:93:81:60:3c:94:49:9a:b4:d5:56:e8:02:27: a0:02:dd:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKsMfrOBtA95zAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2I2ZjE5ZDctOTNiMS00MGVlLTlmOTMtNWZmNWMwOWIwMzYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBpnJWXMONuP+VPgC5IZbG99MKQan0RKMn8v 98UF5WXAS7e9VrLPmJ2fRPjUGFDA2zm05pVS363Lkzv2SGOSEJ4UfXK6PIV31FUF 3xA7bvKHmoFvbTiJJ36ZIkNmDU9ZbqcHB2PYnPXjIa6Rix2tj1Xbus4zVkhEHGCn Dk2+Ce1PChjcy3DYzY9yl5XZs0Ov7wGfUsgf79FV29gTw39X4dT8ZBD3u5rsYAHK YTl1hqOkFqcr2aHpEWUvEsfNb6xuHNGnyxWI8t/j3agTcubQo2G3WXOTh+6QE75J MWamvcB9F84csOMJHagekD7kVSt/OhENTzJhYQB25An7GwajGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCViaE4BAkhhvRrc70fuSdqtp9VxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNmYTQxYjgtODJlOC0z OTQyLTg1NTEtZTU2ODMyYzNiMTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfTgJuWhy4lm5MBFx0d2RmWJsgLlyWORe1Rfn0+A2swtn3W4ActtBvt Uxzh9Yfe1ODHR/o12+UKeLjFlseupG/qeNHaSUq/Bw+t1g06ORx7ixTVa4MTuhqF 5GAax1dpIxDgcQWCns0D/TqoMASs0PmESsxzCMyErBAFXaE6p56Db6K4+Bn4oUhT jkRtTbzXM4dZGKAVc6JFJ5Is/Vc7zvAf1Xb2EYmTDYuDKKGqPaTBBx6puttidBIS 7IF8/hMJB+3qX2rjnXXJoCjZj4rsl4N6D/ltINKDAPJot16hKQrowMLMi+2JgcQb HLWMOKP6k4FgPJRJmrTVVugCJ6AC3dE= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:00 2025 by rpki-client