$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: Lf/SvtHoXyBLzyOlvIK1hrOpVC9SQ2Ob7k5sdZ/DFD8= Subject key identifier: 1E:95:88:AF:66:46:57:EB:86:93:D6:74:96:F9:DC:C2:30:AF:2A:9D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4FF9D31BFBD35A678400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4f:f9:d3:1b:fb:d3:5a:67:84:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=1efd52f6-b43d-4570-a3cf-e66edaebc2b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:5a:c4:7d:b7:4c:f3:04:02:25:66:0d:cb:54: 39:67:42:62:4b:63:ea:af:66:d9:0a:85:36:c3:cc: 8e:58:a9:39:00:e4:13:0c:c9:90:86:01:19:46:80: af:75:7d:11:c6:2e:32:a7:12:dd:41:2b:ad:c1:61: ee:bd:03:49:bf:d0:35:92:b9:f4:6f:1c:09:83:64: b9:cf:2e:86:c2:98:5d:7e:1d:3d:48:3c:c4:81:6c: cf:e4:95:20:12:08:57:b5:a8:ab:fc:12:92:bf:88: 7c:b5:fc:c8:c9:91:79:da:d6:23:e3:70:f9:34:f0: 3c:ef:19:6b:f4:75:2f:e8:44:44:2d:df:78:f9:bc: 51:c9:12:39:f7:34:78:90:84:56:b0:8d:85:7a:17: 5a:ac:21:55:86:01:94:1c:6e:f5:fb:2b:69:96:b8: fa:c7:b1:f6:58:49:62:c5:ef:14:c8:b6:c2:57:5f: 7c:50:6e:33:24:a6:33:ea:7d:1a:1d:be:84:95:44: 5e:aa:42:80:4a:95:55:96:62:a7:01:57:4d:11:27: 4e:77:56:f9:7f:6d:c4:20:f8:f9:a5:c1:69:bd:11: 88:6a:04:33:6c:81:7e:f6:95:0c:62:37:49:9c:fc: 9e:27:94:e5:01:e6:b2:db:f1:a4:2b:9c:c9:48:38: 86:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:95:88:AF:66:46:57:EB:86:93:D6:74:96:F9:DC:C2:30:AF:2A:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:9d:37:67:0f:29:af:5d:de:d5:b2:a6:3e:e7:c5:03:15:0d: 8b:37:68:7b:37:1c:a2:95:1a:09:aa:9e:9c:0b:da:dc:98:32: 67:38:6c:dd:0c:83:27:8f:57:67:77:22:d7:8e:be:26:09:fd: 7e:8e:4f:d0:e3:ab:b9:e8:99:62:f5:a4:e3:a3:96:58:68:84: 67:d6:5a:9e:7b:fd:e0:61:1a:e3:8a:c4:76:d8:09:d0:b9:d5: 7b:65:1c:bf:5e:3b:87:aa:5a:8f:4d:c9:47:3c:63:bc:cf:40: 02:9b:57:9d:e0:67:69:4f:87:d0:c9:ce:5f:25:54:54:c2:de: 03:0a:e7:4d:99:4b:17:cd:8b:9d:43:82:7e:a8:8d:ff:bd:4e: 2c:d8:06:c2:39:13:d4:0e:cb:f1:d3:cd:df:cc:cb:07:f7:5c: 15:46:e5:ab:6f:c4:fe:8d:c4:85:14:09:c0:01:77:89:7d:91: a9:2c:f5:36:e1:b4:80:59:6c:3e:cc:40:c7:b1:63:ac:9e:23: 1a:46:5b:65:f0:f9:9a:68:ed:84:44:36:a8:9a:7d:c3:e8:cd: 75:fb:ba:f7:ca:69:aa:d8:a4:68:b1:d1:b5:be:c9:31:a6:e8: 06:ec:4f:f2:ae:d8:87:9f:93:c2:93:34:2a:f9:79:eb:5c:b0: 74:bc:c6:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTE/50xv701pnhAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MWVmZDUyZjYtYjQzZC00NTcwLWEzY2YtZTY2ZWRhZWJjMmI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAolrEfbdM8wQCJWYNy1Q5Z0JiS2Pqr2bZCoU2 w8yOWKk5AOQTDMmQhgEZRoCvdX0Rxi4ypxLdQSutwWHuvQNJv9A1krn0bxwJg2S5 zy6Gwphdfh09SDzEgWzP5JUgEghXtair/BKSv4h8tfzIyZF52tYj43D5NPA87xlr 9HUv6ERELd94+bxRyRI59zR4kIRWsI2FehdarCFVhgGUHG71+ytplrj6x7H2WEli xe8UyLbCV198UG4zJKYz6n0aHb6ElUReqkKASpVVlmKnAVdNESdOd1b5f23EIPj5 pcFpvRGIagQzbIF+9pUMYjdJnPyeJ5TlAeay2/GkK5zJSDiG5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB6ViK9mRlfrhpPWdJb53MIwryqdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKdN2cPKa9d3tWypj7nxQMVDYs3aHs3HKKVGgmqnpwL2tyYMmc4bN0M gyePV2d3IteOviYJ/X6OT9Djq7nomWL1pOOjllhohGfWWp57/eBhGuOKxHbYCdC5 1XtlHL9eO4eqWo9NyUc8Y7zPQAKbV53gZ2lPh9DJzl8lVFTC3gMK502ZSxfNi51D gn6ojf+9TizYBsI5E9QOy/HTzd/Mywf3XBVG5atvxP6NxIUUCcABd4l9kaks9Tbh tIBZbD7MQMexY6yeIxpGW2Xw+Zpo7YRENqiafcPozXX7uvfKaarYpGix0bW+yTGm 6AbsT/Ku2Iefk8KTNCr5eetcsHS8xow= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:05 2025 by rpki-client