$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa File: 39708eac-3243-3a6a-88da-6bc7ae510463.roa (raw, json) Hash identifier: wljvzPr8ehx18DvnES0U0rdX558ayRdKT+4R4Up6rfY= Subject key identifier: C4:B7:A5:C7:77:07:0D:5D:91:4D:6F:F1:C9:AB:0A:65:22:C9:2B:24 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA988DD239BEEBA960FC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a9:88:dd:23:9b:ee:ba:96:0f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b2bd9cc8-3a9b-45c2-9bfb-3725e0f1258c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:77:da:d5:7d:93:eb:d0:b8:c7:34:89:e3:47: c5:f6:23:fe:84:c1:0d:5c:8a:51:5c:f2:33:e9:26: 3a:75:e8:b0:eb:99:28:e7:f6:4e:74:47:bc:b5:b4: e5:90:88:a5:ce:16:5e:d1:57:70:68:2a:6d:a5:12: 7a:76:2d:fd:ff:ad:ee:33:7e:9a:2b:f4:68:8d:52: d9:e4:76:2f:f1:8a:a1:37:35:89:8c:7b:53:57:5b: 31:d2:44:80:f8:c0:c2:1b:ae:ee:65:01:fc:6d:1b: 13:81:1e:b7:4b:37:04:95:b1:41:6a:c8:e0:f4:d2: 45:52:97:23:04:56:cd:c7:18:4f:ce:32:f7:16:9e: 39:95:6e:50:fd:66:52:59:b4:56:2a:46:8e:38:07: f3:03:5b:48:27:70:e4:d2:a8:23:71:51:3c:db:c6: 82:dd:c0:3d:26:f9:18:f2:eb:4f:32:ca:a2:fc:de: 64:74:ba:f6:a1:dc:e4:b5:53:c5:0b:6d:f0:7c:4f: 4a:ba:ed:a5:cd:0f:c1:b5:e0:98:3c:b8:2c:1d:03: f0:41:08:0e:c8:6b:1a:81:9b:02:62:8f:c2:e3:6f: b0:e5:8a:0d:a9:90:d4:06:5d:f1:76:ab:bd:82:41: c0:10:f3:c6:86:2d:b9:86:dc:17:e0:e8:6e:ed:f2: a4:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:B7:A5:C7:77:07:0D:5D:91:4D:6F:F1:C9:AB:0A:65:22:C9:2B:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:09:cd:96:37:13:a2:81:d7:42:42:5e:d6:e7:60:e3:78:f8: f3:03:e1:32:b8:8c:27:cb:b2:2e:ca:97:41:26:bb:9c:17:5c: dc:a5:3a:e7:1b:e2:33:57:b2:95:19:85:11:4e:1f:e2:11:1e: b1:0d:87:4e:35:64:ba:a7:4a:3e:34:43:39:4a:83:39:2f:1a: 41:27:83:9b:32:b1:0c:4f:e4:38:9e:21:b7:b0:26:3f:dc:7a: 0b:e9:30:f9:08:1a:9f:dd:bb:a9:b6:da:1c:36:1a:5c:18:63: e8:2b:9c:2e:b0:a6:42:26:49:09:40:ff:11:46:ab:12:7a:ff: 26:93:86:bf:c2:18:a0:3c:9d:43:14:8a:78:30:04:56:68:dd: a8:ae:e4:ea:98:4d:fd:c7:21:f3:04:7b:67:2d:0a:d5:c6:66: b3:13:ed:f9:bf:dc:b3:4f:6e:41:ca:23:52:d1:79:93:ce:3d: a1:6e:c3:99:e7:83:79:36:fe:28:17:81:2d:f4:0c:38:c2:6d: 1c:19:24:79:e3:d9:27:3b:e2:c8:92:1f:d0:26:23:c8:00:0d: c9:32:4a:c5:90:f1:e0:74:67:3a:39:11:96:f0:28:bf:96:83: de:3c:56:ae:c7:2b:78:d4:f8:eb:56:f7:a3:ba:ae:ce:4d:5b: 00:d2:0d:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKmI3SOb7rqWD8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjJiZDljYzgtM2E5Yi00NWMyLTliZmItMzcyNWUwZjEyNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHfa1X2T69C4xzSJ40fF9iP+hMENXIpRXPIz 6SY6deiw65ko5/ZOdEe8tbTlkIilzhZe0VdwaCptpRJ6di39/63uM36aK/RojVLZ 5HYv8YqhNzWJjHtTV1sx0kSA+MDCG67uZQH8bRsTgR63SzcElbFBasjg9NJFUpcj BFbNxxhPzjL3Fp45lW5Q/WZSWbRWKkaOOAfzA1tIJ3Dk0qgjcVE828aC3cA9JvkY 8utPMsqi/N5kdLr2odzktVPFC23wfE9Kuu2lzQ/BteCYPLgsHQPwQQgOyGsagZsC Yo/C42+w5YoNqZDUBl3xdqu9gkHAEPPGhi25htwX4Ohu7fKksQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMS3pcd3Bw1dkU1v8cmrCmUiySskMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzk3MDhlYWMtMzI0My0z YTZhLTg4ZGEtNmJjN2FlNTEwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABIJzZY3E6KB10JCXtbnYON4+PMD4TK4jCfLsi7Kl0Emu5wXXNylOucb 4jNXspUZhRFOH+IRHrENh041ZLqnSj40QzlKgzkvGkEng5sysQxP5DieIbewJj/c egvpMPkIGp/du6m22hw2GlwYY+grnC6wpkImSQlA/xFGqxJ6/yaThr/CGKA8nUMU ingwBFZo3aiu5OqYTf3HIfMEe2ctCtXGZrMT7fm/3LNPbkHKI1LReZPOPaFuw5nn g3k2/igXgS30DDjCbRwZJHnj2Sc74siSH9AmI8gADckySsWQ8eB0Zzo5EZbwKL+W g948Vq7HK3jU+OtW96O6rs5NWwDSDUQ= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:44 2025 by rpki-client