$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa File: 4ab1410e-c41d-3b63-9e9b-64651e424f74.roa (raw, json) Hash identifier: qBh2+eYmWvdpx3Yhvob1OzrIJ2IW89GBC9Ig1UnIZ1U= Subject key identifier: 14:0C:D0:8D:94:AD:F9:95:D0:22:9B:E9:E8:2A:04:B4:6B:12:39:5A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CAAFCC9C11066060B0400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.47.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:aa:fc:c9:c1:10:66:06:0b:04:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3dd2b7ea-421e-4538-8efd-c9cc0f7e0956 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:77:35:f2:97:f9:94:cd:d7:5b:f5:76:94:c9: 48:d9:1d:95:94:d2:ef:76:34:7e:26:2a:ea:39:c2: 1c:d6:84:ba:b1:cb:a8:68:b0:87:a0:d0:bb:99:9e: 1c:53:79:8c:76:c0:b0:08:a8:19:f2:5b:81:8a:2b: ad:1a:36:32:f4:60:9e:57:2b:e1:81:a6:09:f1:97: 23:83:7b:34:a8:25:4d:88:1e:ac:e8:72:e7:3c:b9: 5e:f5:61:08:1f:ed:32:5c:bb:9c:27:7d:28:22:f4: fa:30:54:3a:86:f3:83:ba:f7:51:63:55:17:af:64: 1f:00:87:be:41:b5:5b:4f:46:64:01:80:aa:5d:36: 16:e9:c2:29:18:1d:c2:8e:3e:09:b8:30:93:67:c0: 43:f6:1d:53:7d:c8:79:9e:ba:8c:21:a7:a6:88:6b: 07:e5:1a:c6:b8:b6:5f:da:16:29:23:fd:d5:68:a3: c9:45:f8:9b:41:09:fa:81:7e:82:a2:ab:14:d4:93: 2d:88:64:fc:1b:8c:ad:aa:89:dd:98:0f:16:80:ae: 7d:14:e9:a0:98:10:88:81:b0:52:37:fa:f6:f4:2a: 88:46:e0:43:48:a6:aa:8d:60:49:ca:ee:d9:3c:c0: a8:de:09:c6:f7:cd:9c:b8:07:ff:0d:e4:9f:b0:ef: ea:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:0C:D0:8D:94:AD:F9:95:D0:22:9B:E9:E8:2A:04:B4:6B:12:39:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:57:e4:47:66:c0:6b:21:8f:b0:57:6f:0f:0e:55:1d:e4:fd: ef:c9:52:ef:08:9d:e5:7f:77:e4:dd:fd:6b:5b:63:98:48:f0: 81:b2:a3:77:5c:a9:c5:ff:f5:bf:57:16:39:b9:dc:7d:49:1b: 8a:41:72:a6:a5:41:9d:e4:54:a9:60:98:74:96:bb:e8:64:29: 00:c6:8e:e3:d3:fe:71:ab:74:f5:ac:c0:b2:7b:ff:d3:fc:c5: 81:55:87:81:ef:1e:51:d6:e9:71:11:c7:32:25:76:bd:a5:f8: 1a:5c:a3:a4:e8:20:8f:62:54:e8:2d:33:e5:7c:b9:6d:0e:23: 1f:49:75:58:d3:34:65:e5:f0:c2:9d:8f:db:3d:c3:c6:77:99: 2f:19:99:fb:9c:ec:69:80:f8:7d:d6:35:6b:2a:11:d3:3d:fb: b0:ed:c7:17:44:79:86:a1:ff:e2:71:7f:42:04:0d:61:6f:6d: 49:6d:b5:1b:07:ee:4e:ab:3e:7b:d1:ec:90:a6:f5:36:0a:8e: 17:23:c8:f1:f4:e0:62:21:b9:e8:9d:97:4b:55:f7:66:2f:03: 72:ee:5e:e8:cf:c6:3b:be:d5:26:d3:1a:82:21:d8:49:c9:62: 93:dd:6f:a0:75:e5:75:00:10:41:b8:91:1a:8d:f9:18:33:5b: 5a:f6:8e:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKr8ycEQZgYLBAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2RkMmI3ZWEtNDIxZS00NTM4LThlZmQtYzljYzBmN2UwOTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA33c18pf5lM3XW/V2lMlI2R2VlNLvdjR+Jirq OcIc1oS6scuoaLCHoNC7mZ4cU3mMdsCwCKgZ8luBiiutGjYy9GCeVyvhgaYJ8Zcj g3s0qCVNiB6s6HLnPLle9WEIH+0yXLucJ30oIvT6MFQ6hvODuvdRY1UXr2QfAIe+ QbVbT0ZkAYCqXTYW6cIpGB3Cjj4JuDCTZ8BD9h1Tfch5nrqMIaemiGsH5RrGuLZf 2hYpI/3VaKPJRfibQQn6gX6CoqsU1JMtiGT8G4ytqondmA8WgK59FOmgmBCIgbBS N/r29CqIRuBDSKaqjWBJyu7ZPMCo3gnG982cuAf/DeSfsO/qfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQM0I2UrfmV0CKb6egqBLRrEjlaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGFiMTQxMGUtYzQxZC0z YjYzLTllOWItNjQ2NTFlNDI0Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAVX5EdmwGshj7BXbw8OVR3k/e/JUu8IneV/d+Td/WtbY5hI8IGyo3dc qcX/9b9XFjm53H1JG4pBcqalQZ3kVKlgmHSWu+hkKQDGjuPT/nGrdPWswLJ7/9P8 xYFVh4HvHlHW6XERxzIldr2l+Bpco6ToII9iVOgtM+V8uW0OIx9JdVjTNGXl8MKd j9s9w8Z3mS8Zmfuc7GmA+H3WNWsqEdM9+7DtxxdEeYah/+Jxf0IEDWFvbUlttRsH 7k6rPnvR7JCm9TYKjhcjyPH04GIhueidl0tV92YvA3LuXujPxju+1SbTGoIh2EnJ YpPdb6B15XUAEEG4kRqN+RgzW1r2jvk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:06 2025 by rpki-client