$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa File: 3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa (raw, json) Hash identifier: JThBvHBZXXy/P+rkakE2xvZT+LqIBIu8VTnSW1Uufj0= Subject key identifier: 18:7C:63:59:FC:1F:86:B8:E0:10:0F:CD:05:B4:AF:5B:F9:EF:20:40 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C6897BC1E29E8F4CC9880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:68:97:bc:1e:29:e8:f4:cc:98:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=0617f909-86f3-4038-8b32-7660fc884c1d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:74:92:5e:48:3b:ee:6b:4d:a1:b5:90:08:ed: d0:35:33:42:c2:a6:01:b0:35:77:3c:65:48:74:94: 0a:12:93:2e:19:ac:09:f7:36:96:71:b6:cc:58:eb: 32:c9:12:5d:ef:66:40:d4:30:98:0f:29:e1:56:af: b6:ba:c5:c7:b0:9d:2b:e5:ee:d2:55:ec:00:63:82: e7:ef:8b:c6:e9:71:b1:06:ef:60:8b:25:8e:ac:fe: 7c:b5:19:ac:1e:65:2b:2c:fe:19:75:45:cf:d6:76: c9:26:73:d4:6f:de:a7:12:53:c3:55:af:cb:e0:c2: ec:e9:a6:1b:d2:06:c0:e2:8e:1d:b1:a1:0b:12:d2: 22:4f:d4:be:f5:a4:32:73:48:a9:18:7e:4f:cb:b8: 9a:ad:c0:c5:01:6c:4c:f0:92:03:fb:78:4d:25:b1: 41:99:56:8b:3d:c0:8d:98:bc:12:e3:b6:6d:da:20: f0:f1:9d:75:07:6a:9b:ab:18:9d:98:4b:44:20:55: 6c:61:c2:f4:1c:e2:2f:0d:71:6f:5c:fe:a0:31:f8: a4:ca:6b:3e:88:ea:45:44:cb:49:7a:be:45:b4:be: 08:82:d5:67:de:14:4a:e8:e7:39:00:a7:24:4a:57: 5c:49:91:59:e3:72:b6:4d:70:6b:45:fc:6f:da:ce: a3:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:7C:63:59:FC:1F:86:B8:E0:10:0F:CD:05:B4:AF:5B:F9:EF:20:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:40:eb:af:67:42:a5:29:be:da:33:ba:d8:5c:94:7a:4c:46: 88:5b:d8:77:73:80:45:9a:09:bc:91:70:bc:3e:ce:16:dd:09: 1e:65:1b:e4:b4:78:f0:a9:6d:48:32:27:95:13:fc:d7:7c:0e: 8c:64:7f:6b:76:49:47:4a:b6:c3:5d:53:d5:37:c0:11:66:b4: 01:13:f6:02:5d:f2:07:5c:a4:de:a1:5b:16:bc:ee:43:36:22: 53:7a:f5:bb:ff:03:ac:22:02:fc:e1:a1:bb:7a:9f:ee:81:e3: b9:35:c6:28:5d:f7:a0:ca:72:48:8e:24:5b:b4:6a:99:07:7a: 4a:3e:48:df:2a:7b:5f:31:09:2c:f1:c9:86:d7:5a:97:a5:fc: 7f:d4:ad:23:1b:bd:6e:7c:17:c4:1e:38:0b:e7:3e:9b:ed:3a: 2f:64:63:93:81:6d:ac:f8:c0:b3:97:52:8e:6b:ed:b5:f2:93: ef:62:7e:76:9b:9d:33:0b:48:6e:ac:7f:bb:8b:b7:84:75:6a: 9c:57:bf:20:96:67:8e:d3:8c:96:6b:b7:7c:41:22:57:20:5e: 46:4b:89:c6:21:56:fe:95:a6:ac:32:1b:52:50:e4:af:44:97: a6:8c:73:de:a2:48:34:0f:ee:b3:8a:65:01:b5:22:ac:02:ac: 67:a6:22:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGiXvB4p6PTMmIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MDYxN2Y5MDktODZmMy00MDM4LThiMzItNzY2MGZjODg0YzFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq3SSXkg77mtNobWQCO3QNTNCwqYBsDV3PGVI dJQKEpMuGawJ9zaWcbbMWOsyyRJd72ZA1DCYDynhVq+2usXHsJ0r5e7SVewAY4Ln 74vG6XGxBu9giyWOrP58tRmsHmUrLP4ZdUXP1nbJJnPUb96nElPDVa/L4MLs6aYb 0gbA4o4dsaELEtIiT9S+9aQyc0ipGH5Py7iarcDFAWxM8JID+3hNJbFBmVaLPcCN mLwS47Zt2iDw8Z11B2qbqxidmEtEIFVsYcL0HOIvDXFvXP6gMfikyms+iOpFRMtJ er5FtL4IgtVn3hRK6Oc5AKckSldcSZFZ43K2TXBrRfxv2s6jxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBh8Y1n8H4a44BAPzQW0r1v57yBAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2VmMTg5NjQtMGIzZi0z ZmY2LTg0NjMtOGZkYTQ0NDYzZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJA669nQqUpvtozuthclHpMRohb2HdzgEWaCbyRcLw+zhbdCR5lG+S0 ePCpbUgyJ5UT/Nd8Doxkf2t2SUdKtsNdU9U3wBFmtAET9gJd8gdcpN6hWxa87kM2 IlN69bv/A6wiAvzhobt6n+6B47k1xihd96DKckiOJFu0apkHeko+SN8qe18xCSzx yYbXWpel/H/UrSMbvW58F8QeOAvnPpvtOi9kY5OBbaz4wLOXUo5r7bXyk+9ifnab nTMLSG6sf7uLt4R1apxXvyCWZ47TjJZrt3xBIlcgXkZLicYhVv6VpqwyG1JQ5K9E l6aMc96iSDQP7rOKZQG1IqwCrGemInY= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:03 2025 by rpki-client