$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa File: 571af571-6df9-342f-9fbd-bfce123e0686.roa (raw, json) Hash identifier: xEDLkLayvJAHjJavj3e1zxKiYDSYOZWcUvaboDRhV6g= Subject key identifier: 12:5A:12:75:8B:93:91:9C:48:73:50:51:E4:25:D4:56:02:87:67:49 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5270438D64A381371E40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.58.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:52:70:43:8d:64:a3:81:37:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=1e23809f-2651-4936-9ac0-51a8665dc145 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:91:bc:77:1c:f3:93:a6:48:54:d6:bf:2b:6b: e2:b8:b7:2a:84:44:dd:c6:6c:7e:f6:ea:bc:f3:6a: 4f:32:77:fa:9b:59:4f:ad:a3:85:54:d6:07:f1:28: b7:fa:97:cd:65:1e:cc:47:e9:22:5e:22:7f:14:eb: d7:e6:bb:85:b9:fa:81:fc:f9:ad:93:ff:82:4a:65: 04:b9:7c:7b:79:28:d5:91:d1:4d:06:8d:70:df:ad: 57:4c:28:6a:71:16:6b:8b:3e:b6:ba:e3:6e:69:fd: 7c:43:15:49:f8:68:be:10:06:95:4c:bc:fb:75:69: 5c:52:98:f2:a6:4a:51:c5:bc:2b:f3:c2:ce:68:b1: e1:0a:d6:e2:fc:50:41:b8:0b:19:cc:44:e1:d5:a6: 46:b2:4f:1c:1e:ad:37:f5:b5:8b:2c:7a:af:8a:e4: d5:2a:d7:45:20:7d:8a:3a:59:b2:bd:24:35:c8:94: 34:7b:07:22:52:29:16:ef:4f:b4:ab:4f:1c:36:44: 2b:44:be:3f:b3:53:6a:9c:db:28:35:b3:5b:e8:79: 3f:47:d9:1a:8e:31:0b:48:47:b0:e0:01:43:e6:f7: 4c:b7:36:16:7d:d5:06:01:3a:66:64:3f:5c:41:57: cd:3a:21:d6:34:7e:c1:87:b2:c3:db:09:24:1f:0a: 6f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:5A:12:75:8B:93:91:9C:48:73:50:51:E4:25:D4:56:02:87:67:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/571af571-6df9-342f-9fbd-bfce123e0686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:58:3b:1a:3d:ee:83:c5:a9:6d:7a:c6:91:ca:3e:2b:c3:a9: 0e:3a:15:7c:8e:26:64:00:18:a4:70:39:26:d7:da:e2:ed:3a: 26:0f:f2:ae:36:a2:1d:0a:e3:23:fa:3a:2f:1f:01:86:71:dd: 75:2a:da:1c:40:74:e7:c0:80:cd:14:48:49:11:57:4b:9f:63: 2c:6b:3a:c6:57:ba:34:c3:3b:d8:27:c5:6f:a1:f9:aa:30:13: f0:43:8f:f8:f6:5a:2d:f5:a9:78:70:9f:1c:b2:2a:a0:30:26: ad:93:9c:17:99:34:3a:0b:a2:0d:97:6d:e4:43:d2:76:a6:c5: 94:f1:48:ec:5d:20:d9:04:e7:d9:5d:f2:ca:db:d8:5e:3e:87: c0:ff:2e:48:20:9f:be:25:ec:03:41:de:44:78:49:e5:b2:8e: f9:6f:da:8b:a3:d7:c9:3b:12:86:bf:51:b6:e7:f4:56:6c:cc: 7f:f1:2e:20:2a:74:c1:bb:db:6e:1a:73:1e:e1:c1:be:36:9e: f3:2d:7d:4c:8c:99:37:bc:9a:0d:64:99:49:4d:42:47:66:fe: 40:e3:15:e0:75:d9:cb:e0:26:5f:35:76:0a:4a:dc:7c:9a:33: 25:1e:1d:bd:62:60:84:14:b8:62:15:3c:ef:61:34:3f:b6:c0: 55:eb:22:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFJwQ41ko4E3HkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MWUyMzgwOWYtMjY1MS00OTM2LTlhYzAtNTFhODY2NWRjMTQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5G8dxzzk6ZIVNa/K2viuLcqhETdxmx+9uq8 82pPMnf6m1lPraOFVNYH8Si3+pfNZR7MR+kiXiJ/FOvX5ruFufqB/Pmtk/+CSmUE uXx7eSjVkdFNBo1w361XTChqcRZriz62uuNuaf18QxVJ+Gi+EAaVTLz7dWlcUpjy pkpRxbwr88LOaLHhCtbi/FBBuAsZzETh1aZGsk8cHq039bWLLHqviuTVKtdFIH2K OlmyvSQ1yJQ0ewciUikW70+0q08cNkQrRL4/s1NqnNsoNbNb6Hk/R9kajjELSEew 4AFD5vdMtzYWfdUGATpmZD9cQVfNOiHWNH7Bh7LD2wkkHwpvsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJaEnWLk5GcSHNQUeQl1FYCh2dJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTcxYWY1NzEtNmRmOS0z NDJmLTlmYmQtYmZjZTEyM2UwNjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDogMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBYOxo97oPFqW16xpHKPivDqQ46FXyOJmQAGKRwOSbX2uLtOiYP8q42 oh0K4yP6Oi8fAYZx3XUq2hxAdOfAgM0USEkRV0ufYyxrOsZXujTDO9gnxW+h+aow E/BDj/j2Wi31qXhwnxyyKqAwJq2TnBeZNDoLog2XbeRD0namxZTxSOxdINkE59ld 8srb2F4+h8D/Lkggn74l7ANB3kR4SeWyjvlv2ouj18k7Eoa/Ubbn9FZszH/xLiAq dMG7224acx7hwb42nvMtfUyMmTe8mg1kmUlNQkdm/kDjFeB12cvgJl81dgpK3Hya MyUeHb1iYIQUuGIVPO9hND+2wFXrIjk= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:00 2025 by rpki-client