$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa File: 34a9c223-7200-3018-ae98-b28abb099fa9.roa (raw, json) Hash identifier: Esw+vJUMzcb+utujSYqSbwupRK3EUNlS9Sa3q9onVbU= Subject key identifier: 8E:7A:CC:DA:4F:42:35:10:AD:8D:0E:A9:72:8B:09:95:C0:67:8C:97 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CAA99078E67F9023DC880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:aa:99:07:8e:67:f9:02:3d:c8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a02cd606-18a3-4333-858a-03cb9b73cf57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:5f:0b:0b:ea:f4:73:47:56:ff:48:af:80:81: c0:ee:cb:7b:2d:29:94:08:c2:29:24:5c:5e:bb:9e: a8:e7:d8:0a:80:8d:fc:1c:5a:a8:b6:84:62:e3:5a: f4:f4:80:11:78:86:b0:0c:57:44:b7:d8:0e:0e:13: f3:94:be:0c:65:ab:25:db:ce:63:3d:35:1a:1c:ed: 70:43:52:de:d2:91:8d:58:a2:be:f5:21:78:92:b6: 1e:25:5e:b0:48:a4:0b:b0:e4:22:5e:15:44:d4:d6: 90:51:bd:0c:fd:a0:c3:76:dd:8c:44:ce:2b:35:cb: 7d:a2:16:8f:70:26:0b:ae:c5:48:33:42:db:7a:5c: e4:b3:20:36:fc:67:9e:95:f6:54:d7:a7:ac:85:c3: 0f:2d:ff:74:a9:52:92:5e:1e:ff:f7:61:d2:f1:5c: 76:74:ea:f4:bb:98:b2:17:0a:cd:80:f7:06:a1:10: 9b:7a:0a:9c:83:c3:1f:ff:59:48:56:f3:83:32:50: 9b:ae:cb:83:df:f4:1b:d7:71:42:f1:0d:a3:bc:e8: d1:9a:22:ef:74:ff:76:1d:1e:15:4f:22:17:51:0a: eb:63:06:90:28:92:d4:42:9f:a1:8d:24:83:d7:87: 4b:22:a5:ed:a2:00:2b:41:c2:12:2b:f3:31:3d:58: d7:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:7A:CC:DA:4F:42:35:10:AD:8D:0E:A9:72:8B:09:95:C0:67:8C:97 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/34a9c223-7200-3018-ae98-b28abb099fa9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:bc:f9:45:ad:6d:14:56:77:b3:18:61:c1:6b:b6:34:f5:88: 23:cc:72:f5:b3:d3:f1:ab:1b:fe:c0:e0:a3:ff:e7:f2:68:33: f7:cb:dc:f1:ff:69:34:3d:00:e3:69:cf:73:56:aa:a9:b7:2b: 2c:34:d2:2f:72:bf:f9:94:ca:78:77:e4:8c:25:f9:05:7c:56: e0:7c:eb:c0:69:d7:94:5f:8c:61:93:47:75:a1:ae:57:48:6b: ef:ca:99:db:ce:87:e1:ac:d5:58:6b:d6:49:50:2f:2e:de:80: 72:43:0b:3d:0f:fe:8d:5a:06:3c:c8:57:00:a8:c2:84:f0:32: 4f:f3:70:7f:f4:2f:32:74:c0:b9:5f:24:87:e6:b4:09:94:32: 55:88:23:db:a8:02:8b:5d:df:65:fe:fd:05:d2:f8:d4:4e:b4: 28:da:59:f0:2f:06:25:f0:28:8f:1d:d8:d0:26:80:9f:5f:18: 85:aa:a7:e7:7d:e5:f4:36:a9:24:32:a1:8e:da:90:71:48:64: 44:5c:f8:43:cb:80:c3:29:c0:be:e0:85:e9:1d:d0:7f:48:aa: c1:bb:84:e5:f6:41:79:4c:44:5b:e7:b5:d3:66:dd:fc:6d:ad: 11:b8:51:84:43:95:32:1d:f2:fd:55:37:2c:d3:6f:af:e6:f3: e1:cd:68:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKqZB45n+QI9yIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTAyY2Q2MDYtMThhMy00MzMzLTg1OGEtMDNjYjliNzNjZjU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhF8LC+r0c0dW/0ivgIHA7st7LSmUCMIpJFxe u56o59gKgI38HFqotoRi41r09IAReIawDFdEt9gODhPzlL4MZasl285jPTUaHO1w Q1Le0pGNWKK+9SF4krYeJV6wSKQLsOQiXhVE1NaQUb0M/aDDdt2MRM4rNct9ohaP cCYLrsVIM0LbelzksyA2/GeelfZU16eshcMPLf90qVKSXh7/92HS8Vx2dOr0u5iy FwrNgPcGoRCbegqcg8Mf/1lIVvODMlCbrsuD3/Qb13FC8Q2jvOjRmiLvdP92HR4V TyIXUQrrYwaQKJLUQp+hjSSD14dLIqXtogArQcISK/MxPVjXjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFI56zNpPQjUQrY0OqXKLCZXAZ4yXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzRhOWMyMjMtNzIwMC0z MDE4LWFlOTgtYjI4YWJiMDk5ZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGK8+UWtbRRWd7MYYcFrtjT1iCPMcvWz0/GrG/7A4KP/5/JoM/fL3PH/ aTQ9AONpz3NWqqm3Kyw00i9yv/mUynh35Iwl+QV8VuB868Bp15RfjGGTR3WhrldI a+/KmdvOh+Gs1Vhr1klQLy7egHJDCz0P/o1aBjzIVwCowoTwMk/zcH/0LzJ0wLlf JIfmtAmUMlWII9uoAotd32X+/QXS+NROtCjaWfAvBiXwKI8d2NAmgJ9fGIWqp+d9 5fQ2qSQyoY7akHFIZERc+EPLgMMpwL7ghekd0H9IqsG7hOX2QXlMRFvntdNm3fxt rRG4UYRDlTId8v1VNyzTb6/m8+HNaCY= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:40 2025 by rpki-client