$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa File: 3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa (raw, json) Hash identifier: IyQxtDJHC+7w+UbAGUbEvfnz7dxf+biDqSTGhiXTyQ4= Subject key identifier: 27:45:CE:F4:F8:8D:AC:5B:C4:E3:CB:99:1A:77:20:D4:B8:EE:66:24 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA4C386DD90252FA7B8C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.63.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a4:c3:86:dd:90:25:2f:a7:b8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2d401921-7809-468a-b041-5a7b3dcce708 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:2d:b9:00:01:bd:28:9f:c7:5e:ae:df:e1:1b: b3:22:08:d6:bc:c1:55:d0:de:33:be:52:0b:f0:9e: d3:3f:6c:27:b3:9c:29:64:b4:29:06:30:d9:d0:ef: d0:53:b7:ac:66:05:74:53:0c:33:5b:d3:c0:c6:84: 39:e5:f2:65:34:5f:c2:6f:76:27:1e:be:59:d3:55: 58:10:3e:e4:a9:f4:12:b7:16:2e:f8:4b:3f:4d:86: f4:74:7a:5d:2d:24:4a:6d:fc:fb:b7:07:1d:41:92: 0a:9f:a7:36:d4:97:ae:23:8a:fd:67:3b:0d:3b:6d: 39:33:00:ac:93:dd:ef:30:36:e1:40:1c:9e:b7:d7: 18:56:29:4b:95:50:fe:2b:b6:fe:d5:85:59:5d:b5: 58:96:ca:f7:34:a1:17:e6:c7:50:b2:29:9c:cd:f1: 70:ff:58:3c:af:5a:53:85:97:9d:a6:9f:c0:18:42: c0:f8:6d:7f:12:ea:90:49:f7:d3:9d:13:d2:1a:1f: 44:36:ea:26:45:74:c4:16:8b:4b:93:b5:c9:ad:86: 76:13:d4:4d:ba:1e:3f:d5:34:3b:2f:9d:8e:f4:cf: 6c:d6:c0:da:32:59:ac:45:bd:d8:7c:d0:8a:e2:5c: dd:90:b2:61:12:80:92:87:5c:36:05:a7:85:a3:f6: ac:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:45:CE:F4:F8:8D:AC:5B:C4:E3:CB:99:1A:77:20:D4:B8:EE:66:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3762e11f-303e-3d09-a4fc-d2fa0e31a984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.63.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:a2:3a:e4:0a:52:24:51:c6:6e:bb:8c:4d:93:52:11:7d:03: 8b:30:57:27:4b:71:3d:c2:7f:a6:4d:24:f9:e4:39:7c:00:1e: 60:39:d3:b4:57:44:8c:7b:d8:aa:2a:dd:60:b9:e7:bd:c9:f6: 71:24:2e:76:0b:48:c5:68:4e:c3:e3:43:22:e2:8d:29:53:9e: 0a:49:0d:7d:e8:ca:8f:02:92:8d:e0:ae:8b:78:d9:c7:41:bf: 9d:0f:a7:aa:03:5b:17:0a:b8:db:ae:be:38:b9:0e:0c:97:0f: 6a:a4:62:aa:ec:83:e0:11:75:36:5e:18:74:dd:74:37:b6:b9: c6:1d:54:3e:09:4d:0f:9d:f4:55:d4:47:23:e2:cf:76:e2:0c: c5:59:90:f2:cc:20:02:25:86:17:a6:2b:e0:6f:76:50:5f:ff: 34:25:3d:f4:0a:0d:3e:3f:e7:4d:62:6a:c6:12:bb:34:ca:1f: e8:4a:44:2a:63:6e:b8:ec:42:fb:b7:d3:3a:4e:ba:c0:bc:c6: 29:74:9f:b8:50:8b:73:b4:09:3f:f2:7b:47:b9:ca:4a:61:cd: a2:67:29:67:29:88:ac:1a:dc:a7:69:48:03:0a:17:d4:38:ba: 91:49:50:d3:ca:3f:68:19:bc:ec:1d:16:4a:1e:01:67:16:8e: 87:25:ac:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKTDht2QJS+nuMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmQ0MDE5MjEtNzgwOS00NjhhLWIwNDEtNWE3YjNkY2NlNzA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoy25AAG9KJ/HXq7f4RuzIgjWvMFV0N4zvlIL 8J7TP2wns5wpZLQpBjDZ0O/QU7esZgV0UwwzW9PAxoQ55fJlNF/Cb3YnHr5Z01VY ED7kqfQStxYu+Es/TYb0dHpdLSRKbfz7twcdQZIKn6c21JeuI4r9ZzsNO205MwCs k93vMDbhQByet9cYVilLlVD+K7b+1YVZXbVYlsr3NKEX5sdQsimczfFw/1g8r1pT hZedpp/AGELA+G1/EuqQSffTnRPSGh9ENuomRXTEFotLk7XJrYZ2E9RNuh4/1TQ7 L52O9M9s1sDaMlmsRb3YfNCK4lzdkLJhEoCSh1w2BaeFo/asuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCdFzvT4jaxbxOPLmRp3INS47mYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzc2MmUxMWYtMzAzZS0z ZDA5LWE0ZmMtZDJmYTBlMzFhOTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD8QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6iOuQKUiRRxm67jE2TUhF9A4swVydLcT3Cf6ZNJPnkOXwAHmA507RX RIx72Koq3WC5573J9nEkLnYLSMVoTsPjQyLijSlTngpJDX3oyo8Cko3grot42cdB v50Pp6oDWxcKuNuuvji5DgyXD2qkYqrsg+ARdTZeGHTddDe2ucYdVD4JTQ+d9FXU RyPiz3biDMVZkPLMIAIlhhemK+BvdlBf/zQlPfQKDT4/501iasYSuzTKH+hKRCpj brjsQvu30zpOusC8xil0n7hQi3O0CT/ye0e5ykphzaJnKWcpiKwa3KdpSAMKF9Q4 upFJUNPKP2gZvOwdFkoeAWcWjoclrHM= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:00 2025 by rpki-client