$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa File: 412bea5c-bd35-32c0-89f2-12d964a74a4d.roa (raw, json) Hash identifier: Ai69uux7e6g9jSzYV7IMQpmmZ65X+JrTCJJtfYPP9I4= Subject key identifier: F8:BF:76:1E:FA:81:77:A7:3B:A3:31:22:5C:BE:4E:7D:33:4C:46:AD Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4FC0E313F57E2A2D0F00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.36.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4f:c0:e3:13:f5:7e:2a:2d:0f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=45791cca-5d89-41c4-a729-09f8586aa84d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:7a:26:1d:aa:b4:83:f6:16:de:de:4f:5c:e9: fc:de:46:02:b1:9e:11:82:9e:3c:b3:e6:b9:f8:03: e4:e7:1e:ad:4b:2e:c9:a6:54:99:4e:a2:0a:4b:92: d2:23:61:50:03:79:a3:71:7b:77:d8:73:43:b3:09: 35:99:1e:94:8c:34:a6:72:c3:46:62:f8:47:9c:ea: 9b:6a:e8:9b:58:41:f5:de:5a:ce:43:c6:2c:18:d1: 03:50:4d:91:33:bc:80:61:0b:d7:ca:d8:b7:8e:5e: f6:78:4d:0d:ae:79:7f:bb:12:56:5c:23:4f:a3:bd: 0b:d5:86:eb:eb:bd:08:bf:12:a7:e8:c4:41:4b:15: c3:ca:14:d7:b3:70:e9:c9:7b:ed:7d:63:d4:33:f2: 51:2d:66:b5:17:1b:9e:61:e3:94:5f:1a:be:38:f6: 02:6b:f1:bf:62:cc:19:27:15:94:2e:82:55:b6:5c: ff:ae:b4:b0:bf:ab:7f:4b:96:70:0b:b7:44:54:94: b0:34:db:36:e7:22:b5:4b:a5:82:01:59:1c:11:ad: 7e:a9:e0:1c:20:b6:ed:f0:bb:4c:ae:22:53:b1:21: 3e:a8:b0:f1:e3:30:0c:58:b4:b2:dd:e7:49:76:05: 09:d0:0b:d2:fe:1c:78:e7:c9:7f:5b:d9:08:f5:12: 7e:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:BF:76:1E:FA:81:77:A7:3B:A3:31:22:5C:BE:4E:7D:33:4C:46:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/412bea5c-bd35-32c0-89f2-12d964a74a4d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:34:ec:83:00:58:06:a9:62:17:d6:65:56:bd:66:a5:60:e7: db:06:62:b9:7f:d0:28:c7:17:a4:ee:d1:18:3c:df:dc:cd:b9: ce:77:a9:fe:54:47:1b:42:5f:ab:a7:d4:64:76:91:6b:5b:ff: 0b:b6:30:8b:7c:38:f8:54:54:4a:19:6b:4a:cb:5a:49:b5:24: 71:a7:8b:7d:64:e1:e8:bb:42:99:f4:4a:57:78:56:e7:f4:6c: 57:d5:36:c3:85:3a:d1:eb:85:ab:7e:b6:ee:59:e0:bd:42:60: 74:ce:15:ad:b0:66:28:2c:8c:71:b1:57:1e:3f:0d:52:dd:4c: b4:21:07:88:1f:94:b6:de:db:9f:79:a1:0f:20:88:15:ba:bb: 55:ad:66:72:f5:83:ea:a4:6a:ed:3c:da:f2:38:3e:34:d7:c1: 15:a3:67:b1:0d:d8:1a:3d:04:c0:82:2b:e3:57:bd:64:f0:00: e8:52:0e:38:3f:24:70:fd:9e:f3:d4:35:d0:eb:62:e3:0f:eb: 1d:fa:39:e8:97:23:17:fc:9d:8f:9d:ee:51:ba:24:d5:f0:3d: af:83:32:34:55:0b:f9:43:a9:40:c7:2a:81:5c:3b:77:50:40: c8:25:20:52:f8:2a:1f:a6:90:9b:45:9a:7f:dc:df:2c:45:08: 36:7a:46:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTE/A4xP1fiotDwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NDU3OTFjY2EtNWQ4OS00MWM0LWE3MjktMDlmODU4NmFhODRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArXomHaq0g/YW3t5PXOn83kYCsZ4Rgp48s+a5 +APk5x6tSy7JplSZTqIKS5LSI2FQA3mjcXt32HNDswk1mR6UjDSmcsNGYvhHnOqb auibWEH13lrOQ8YsGNEDUE2RM7yAYQvXyti3jl72eE0Nrnl/uxJWXCNPo70L1Ybr 670IvxKn6MRBSxXDyhTXs3DpyXvtfWPUM/JRLWa1FxueYeOUXxq+OPYCa/G/YswZ JxWULoJVtlz/rrSwv6t/S5ZwC7dEVJSwNNs25yK1S6WCAVkcEa1+qeAcILbt8LtM riJTsSE+qLDx4zAMWLSy3edJdgUJ0AvS/hx458l/W9kI9RJ+JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPi/dh76gXenO6MxIly+Tn0zTEatMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDEyYmVhNWMtYmQzNS0z MmMwLTg5ZjItMTJkOTY0YTc0YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo07IMAWAapYhfWZVa9ZqVg59sGYrl/0CjHF6Tu0Rg839zNuc53qf5U RxtCX6un1GR2kWtb/wu2MIt8OPhUVEoZa0rLWkm1JHGni31k4ei7Qpn0Sld4Vuf0 bFfVNsOFOtHrhat+tu5Z4L1CYHTOFa2wZigsjHGxVx4/DVLdTLQhB4gflLbe2595 oQ8giBW6u1WtZnL1g+qkau082vI4PjTXwRWjZ7EN2Bo9BMCCK+NXvWTwAOhSDjg/ JHD9nvPUNdDrYuMP6x36OeiXIxf8nY+d7lG6JNXwPa+DMjRVC/lDqUDHKoFcO3dQ QMglIFL4Kh+mkJtFmn/c3yxFCDZ6Ruw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:52 2025 by rpki-client