$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39c22cee-0f88-339d-ac5e-da0a3abfe7d5.roa File: 39c22cee-0f88-339d-ac5e-da0a3abfe7d5.roa (raw, json) Hash identifier: A0MetS5Hv99zU4uiY07VJ0VqzdZMuzW2mhUjCf8OWGY= Subject key identifier: 16:61:29:ED:F7:F0:50:17:84:21:49:57:C7:F7:E8:EE:34:01:A3:1B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CAC38CAFDC7F436B78100 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39c22cee-0f88-339d-ac5e-da0a3abfe7d5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.57.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ac:38:ca:fd:c7:f4:36:b7:81:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6619d4ee-2e73-490a-87d7-96ae185ab807 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:73:cf:00:6c:9b:19:81:ca:72:79:dc:32:eb: c1:08:3e:5d:49:62:d9:47:08:0e:e3:1a:6e:50:a8: 50:5c:1d:ea:09:b5:ad:59:72:de:4d:79:2d:ed:43: 1e:66:6a:25:2c:fb:7b:82:39:ed:b8:60:48:0e:89: d1:e5:2e:b7:72:9c:e4:89:ab:33:85:5a:d2:72:e6: 33:5e:7e:b1:02:1c:45:4d:ff:67:0d:73:19:39:19: b8:e2:55:25:03:c2:65:07:f0:79:2c:20:17:04:07: 61:e0:19:3b:01:d1:0c:5c:98:b3:fc:93:d3:9f:ab: 45:93:b0:52:97:44:1a:4c:ca:98:61:29:66:27:b5: 32:7c:40:25:9a:fc:63:74:89:8e:c1:0e:31:57:f3: 5f:c1:5f:3e:30:d8:4c:15:ba:d8:41:dc:b6:14:65: 7f:3b:53:25:e4:f0:b2:17:af:eb:5a:fe:bb:a2:ad: 2e:c0:2c:2a:2f:58:bc:3c:26:11:00:7d:ea:60:0b: a2:f9:a5:eb:e6:bb:1e:3a:a3:26:32:11:26:5b:6a: 6d:6a:60:49:2f:14:ae:7e:f2:e9:66:11:04:20:de: 52:0f:34:e0:50:d7:9c:c0:2d:90:89:35:15:1d:a0: 56:6b:2e:69:d4:fd:bd:29:2e:95:f6:71:a3:e9:b9: 07:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:61:29:ED:F7:F0:50:17:84:21:49:57:C7:F7:E8:EE:34:01:A3:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39c22cee-0f88-339d-ac5e-da0a3abfe7d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:0f:fc:2e:e7:83:2a:76:6a:39:ad:b9:5e:18:3f:61:51:63: 2b:2c:de:d0:c6:4c:34:a1:85:2d:60:ab:db:57:26:6a:c3:e5: 3e:1c:54:d9:34:3d:53:50:a1:b6:32:20:df:ea:10:ef:7b:80: 1e:ba:da:5d:c2:e3:d5:19:a6:63:a9:32:82:e1:de:92:5f:64: 89:21:cd:4d:c3:af:65:df:14:f2:24:76:60:6b:46:0e:bf:98: 42:8e:bc:07:fe:21:73:02:92:1e:38:37:80:8c:0e:84:0a:7e: 72:70:b6:34:fb:16:cc:4b:1e:0b:35:78:66:4a:34:18:ff:11: 30:09:fb:fe:5f:62:e6:bf:61:07:38:63:de:53:ca:e1:18:5a: 3d:cc:ba:5d:75:bc:b0:bc:d7:a2:9b:91:58:bc:21:6b:53:1c: d5:a3:6b:d4:42:fd:09:bf:26:5d:05:3a:8f:cc:55:6b:d8:21: c9:3d:27:ab:c2:fa:e3:2a:69:b0:7a:6e:25:60:07:77:96:b9: 7e:31:a0:87:07:74:8d:6a:1c:b4:b5:7a:72:4f:30:92:06:09: b1:cf:b7:e4:5c:44:e5:1d:d8:43:31:d3:2e:12:b9:fe:2c:96: bb:9f:ae:bd:ac:23:05:ec:5c:42:23:ba:43:89:06:0d:36:2c: ab:9a:0f:7f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKw4yv3H9Da3gQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjYxOWQ0ZWUtMmU3My00OTBhLTg3ZDctOTZhZTE4NWFiODA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnPPAGybGYHKcnncMuvBCD5dSWLZRwgO4xpu UKhQXB3qCbWtWXLeTXkt7UMeZmolLPt7gjntuGBIDonR5S63cpzkiaszhVrScuYz Xn6xAhxFTf9nDXMZORm44lUlA8JlB/B5LCAXBAdh4Bk7AdEMXJiz/JPTn6tFk7BS l0QaTMqYYSlmJ7UyfEAlmvxjdImOwQ4xV/NfwV8+MNhMFbrYQdy2FGV/O1Ml5PCy F6/rWv67oq0uwCwqL1i8PCYRAH3qYAui+aXr5rseOqMmMhEmW2ptamBJLxSufvLp ZhEEIN5SDzTgUNecwC2QiTUVHaBWay5p1P29KS6V9nGj6bkHvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBZhKe338FAXhCFJV8f36O40AaMbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzljMjJjZWUtMGY4OC0z MzlkLWFjNWUtZGEwYTNhYmZlN2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDmwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAP/C7ngyp2ajmtuV4YP2FRYyss3tDGTDShhS1gq9tXJmrD5T4cVNk0 PVNQobYyIN/qEO97gB662l3C49UZpmOpMoLh3pJfZIkhzU3Dr2XfFPIkdmBrRg6/ mEKOvAf+IXMCkh44N4CMDoQKfnJwtjT7FsxLHgs1eGZKNBj/ETAJ+/5fYua/YQc4 Y95TyuEYWj3Mul11vLC816KbkVi8IWtTHNWja9RC/Qm/Jl0FOo/MVWvYIck9J6vC +uMqabB6biVgB3eWuX4xoIcHdI1qHLS1enJPMJIGCbHPt+RcROUd2EMx0y4Suf4s lrufrr2sIwXsXEIjukOJBg02LKuaD38= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:05 2025 by rpki-client