$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa File: 43bc24c4-e6e1-3452-a132-895a65997e92.roa (raw, json) Hash identifier: bcE7NjvmN9zUk8ZnnbHyrofVVorc9AQVqTBqPROrj6U= Subject key identifier: 7B:E3:58:D3:8A:35:85:DA:D3:7C:9C:F3:9A:30:1B:8B:94:BD:13:D7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C6274B33B49A991F56160 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:62:74:b3:3b:49:a9:91:f5:61:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b1fe888a-61e2-44a5-a972-310f059c691f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:63:da:b2:e5:64:74:09:e6:45:11:ac:82:1a: f8:30:62:5e:cf:7b:61:3b:3f:5b:c1:e5:8b:60:cd: 4a:67:1e:75:42:bb:35:f5:1c:90:1d:99:05:b8:d7: 35:37:51:a4:26:99:98:a6:bf:6c:b4:40:e7:4c:b3: 36:1e:ae:92:4f:72:97:71:96:30:ed:a5:0b:18:c5: b8:a4:7e:8c:af:82:8b:7b:88:19:0a:88:19:c0:69: e2:85:99:94:1f:dd:05:b0:f3:01:24:8e:79:ba:3d: c2:8e:85:d5:90:5d:8b:6a:ac:ec:e8:25:39:67:de: f2:27:b0:e7:83:64:c7:2c:d4:a7:33:95:a6:0c:7f: e1:3f:ab:fe:8d:6a:1a:8b:ef:cb:91:ba:5d:cf:f0: 24:8f:78:01:20:57:91:7d:e3:c5:f6:cc:f3:6f:1e: e3:51:58:d4:fc:0b:df:bd:d1:42:fa:c4:11:1e:b2: 97:e8:5b:da:2d:f7:46:f8:4e:a9:b1:7c:6d:e8:ec: e9:6b:ac:96:34:b5:a1:48:d0:db:d4:2f:7b:fb:ff: 3a:be:6b:3a:64:d0:b2:3f:1b:81:ba:43:f9:e2:e0: 1c:4d:cd:dc:59:7a:1b:5b:b6:79:db:67:40:90:05: 14:ac:d0:f8:1d:29:e0:ac:93:45:47:4f:ea:d3:4c: 3b:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:E3:58:D3:8A:35:85:DA:D3:7C:9C:F3:9A:30:1B:8B:94:BD:13:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:a7:8d:4f:5a:12:1f:14:ac:52:1b:e8:e6:65:3b:b6:a4:14: 37:c8:05:d1:c3:70:46:f0:83:18:b3:7f:3c:d8:b8:dc:7c:db: 42:7f:5b:9b:3c:90:cd:a2:9d:39:67:6f:c6:81:8e:a7:81:2f: 83:7f:fa:20:36:8b:ed:49:b7:09:3c:3e:af:74:28:0a:96:91: 82:d7:7b:eb:2d:be:ce:4b:d8:a6:34:09:26:7c:2b:89:4b:71: 48:64:cb:82:a3:4b:26:83:cc:78:35:ab:90:e4:05:59:b5:27: de:a7:ef:ef:b0:e6:e0:bd:7a:18:da:f3:18:70:76:13:7e:97: 1c:e5:38:76:0b:3a:34:ff:52:f8:43:6a:40:28:f7:a5:ca:27: 92:78:de:56:2b:46:bc:a4:35:15:25:14:1c:8f:c0:d6:99:18: 48:fb:15:54:32:c2:7e:ff:14:8f:1d:70:d6:f1:56:e9:cd:3d: b0:54:61:67:a6:81:9b:24:ff:fb:26:1e:00:22:20:f1:9f:b0: 5e:0c:19:31:44:7d:6e:ca:4d:00:74:b5:4c:d1:84:cb:fd:55: f8:05:34:c8:76:76:75:6b:25:26:05:89:f9:99:6c:46:21:8d: ba:14:b8:28:09:66:0d:1c:2f:91:cf:77:60:14:21:7e:a7:22: 4f:e8:4e:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGJ0sztJqZH1YWAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjFmZTg4OGEtNjFlMi00NGE1LWE5NzItMzEwZjA1OWM2OTFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmPasuVkdAnmRRGsghr4MGJez3thOz9bweWL YM1KZx51Qrs19RyQHZkFuNc1N1GkJpmYpr9stEDnTLM2Hq6ST3KXcZYw7aULGMW4 pH6Mr4KLe4gZCogZwGnihZmUH90FsPMBJI55uj3CjoXVkF2Laqzs6CU5Z97yJ7Dn g2THLNSnM5WmDH/hP6v+jWoai+/Lkbpdz/Akj3gBIFeRfePF9szzbx7jUVjU/Avf vdFC+sQRHrKX6FvaLfdG+E6psXxt6Ozpa6yWNLWhSNDb1C97+/86vms6ZNCyPxuB ukP54uAcTc3cWXobW7Z522dAkAUUrND4HSngrJNFR0/q00w7YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHvjWNOKNYXa03yc85owG4uUvRPXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDNiYzI0YzQtZTZlMS0z NDUyLWExMzItODk1YTY1OTk3ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABKnjU9aEh8UrFIb6OZlO7akFDfIBdHDcEbwgxizfzzYuNx820J/W5s8 kM2inTlnb8aBjqeBL4N/+iA2i+1Jtwk8Pq90KAqWkYLXe+stvs5L2KY0CSZ8K4lL cUhky4KjSyaDzHg1q5DkBVm1J96n7++w5uC9ehja8xhwdhN+lxzlOHYLOjT/UvhD akAo96XKJ5J43lYrRrykNRUlFByPwNaZGEj7FVQywn7/FI8dcNbxVunNPbBUYWem gZsk//smHgAiIPGfsF4MGTFEfW7KTQB0tUzRhMv9VfgFNMh2dnVrJSYFifmZbEYh jboUuCgJZg0cL5HPd2AUIX6nIk/oThM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:06 2025 by rpki-client