$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa File: 4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa (raw, json) Hash identifier: MXAt42SHdBKNhqiAEZU+yUHxiLQsEFP9FUxfD8TPPAE= Subject key identifier: AB:42:55:DA:EE:C0:F4:29:B8:1A:99:0C:F0:19:F1:66:9F:86:78:E5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C644F0C36608D7B071C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.61.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:64:4f:0c:36:60:8d:7b:07:1c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=b6561c66-7601-453f-a06e-bfa2d2dbf29b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:b5:31:76:02:63:84:38:b4:10:28:c7:42:6f: bd:31:88:c7:1b:6d:19:6c:5e:e5:ea:a1:92:17:78: ca:3e:ed:90:6f:dd:76:6f:29:3e:5c:c9:9f:35:23: 01:84:0e:5e:61:ed:8a:ec:4c:f1:d5:47:c3:a3:52: 2d:9a:f8:b4:62:9a:44:92:fb:98:3b:e3:00:39:e9: 34:f8:84:1b:81:33:8c:27:6a:73:84:7d:97:d9:64: 02:50:55:89:45:ff:d6:e8:5d:50:7b:77:5d:b6:60: 75:18:6c:fd:01:12:92:8f:e4:67:f0:27:74:51:db: e7:40:28:8d:fb:5e:87:79:5c:0e:a1:a9:16:5f:1e: 97:89:af:1f:f8:b5:95:69:05:75:41:a1:85:d1:4a: 31:4d:c3:67:6f:4a:46:28:f6:c3:bf:57:d8:d9:60: cb:c4:9a:0f:de:28:9b:67:ad:46:86:13:f6:b3:6b: 57:74:a4:1f:27:49:40:5c:77:16:34:73:d2:5e:29: 8e:7f:47:d7:d9:ad:46:49:b2:6a:2e:7b:8f:4c:06: 66:0b:8a:60:a7:ad:d8:25:b7:8e:a3:08:3e:84:a7: b4:3b:55:66:d2:2a:f7:5c:7f:94:6f:6a:2c:f4:04: 51:77:da:30:f2:fb:74:9b:d5:f7:d9:f6:2b:d3:00: 8e:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:42:55:DA:EE:C0:F4:29:B8:1A:99:0C:F0:19:F1:66:9F:86:78:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4b899db3-55d6-3a3c-8b71-7fcce45f09b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ac:85:16:03:ab:4a:0b:2c:f2:45:94:01:eb:0f:bf:34:28: 07:e4:37:91:87:e8:bc:fa:47:89:da:ba:94:9a:9c:fb:08:02: 1f:c9:68:bb:80:ed:52:58:20:a9:28:17:23:d8:f4:34:02:ef: 6a:44:c5:ee:af:d9:59:be:1b:3f:5c:d0:01:96:2c:44:92:e9: 86:76:55:f6:6c:c2:d0:74:5a:e8:e6:29:66:81:37:9d:d6:ba: 6f:12:59:94:ae:7d:9d:ef:27:de:42:20:b5:ec:c4:ec:7c:48: f9:76:fb:d0:49:1d:bc:b9:11:62:2b:5c:af:16:01:f4:6f:3e: 18:be:17:3b:62:fd:3e:55:69:4d:4f:0b:75:4b:3f:a5:38:7e: 97:47:c2:6a:b7:c6:1f:17:df:e3:88:4f:17:99:0a:73:5a:80: a4:7e:15:da:71:e5:96:8e:f2:6c:b2:c3:c3:3c:f3:39:6f:dd: 14:a0:d6:41:3f:dd:1b:5a:0b:e3:e7:2b:c7:d8:e8:09:f0:de: ad:d5:92:e5:69:77:a7:78:34:77:49:c6:7b:27:4b:87:a2:3c: 77:a7:09:60:1f:29:28:2d:f2:45:a3:f9:77:d8:78:32:90:23: bf:fe:c3:af:6e:48:cb:a4:40:ae:c6:28:8a:69:f6:37:a5:76: eb:4d:28:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGRPDDZgjXsHHAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YjY1NjFjNjYtNzYwMS00NTNmLWEwNmUtYmZhMmQyZGJmMjliMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bUxdgJjhDi0ECjHQm+9MYjHG20ZbF7l6qGS F3jKPu2Qb912byk+XMmfNSMBhA5eYe2K7Ezx1UfDo1Itmvi0YppEkvuYO+MAOek0 +IQbgTOMJ2pzhH2X2WQCUFWJRf/W6F1Qe3ddtmB1GGz9ARKSj+Rn8Cd0UdvnQCiN +16HeVwOoakWXx6Xia8f+LWVaQV1QaGF0UoxTcNnb0pGKPbDv1fY2WDLxJoP3iib Z61GhhP2s2tXdKQfJ0lAXHcWNHPSXimOf0fX2a1GSbJqLnuPTAZmC4pgp63YJbeO owg+hKe0O1Vm0ir3XH+Ub2os9ARRd9ow8vt0m9X32fYr0wCOEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKtCVdruwPQpuBqZDPAZ8WafhnjlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGI4OTlkYjMtNTVkNi0z YTNjLThiNzEtN2ZjY2U0NWYwOWI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFKshRYDq0oLLPJFlAHrD780KAfkN5GH6Lz6R4naupSanPsIAh/JaLuA 7VJYIKkoFyPY9DQC72pExe6v2Vm+Gz9c0AGWLESS6YZ2VfZswtB0WujmKWaBN53W um8SWZSufZ3vJ95CILXsxOx8SPl2+9BJHby5EWIrXK8WAfRvPhi+Fzti/T5VaU1P C3VLP6U4fpdHwmq3xh8X3+OITxeZCnNagKR+Fdpx5ZaO8myyw8M88zlv3RSg1kE/ 3RtaC+PnK8fY6Anw3q3VkuVpd6d4NHdJxnsnS4eiPHenCWAfKSgt8kWj+XfYeDKQ I7/+w69uSMukQK7GKIpp9jeldutNKAc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:42 2025 by rpki-client