$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa File: 58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa (raw, json) Hash identifier: azBV/TOfxvtdug0CP2DWjsoFapQ+weYb0pQ4HiYW4Nw= Subject key identifier: 59:CD:CD:F9:25:D4:49:AC:F1:D0:9C:46:23:5A:C3:1E:EF:CC:9C:30 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B5C6CB8361D78CA172AE2E180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa Signing time: Tue 30 Sep 2025 01:00:31 +0000 ROA not before: Tue 30 Sep 2025 01:00:31 +0000 ROA not after: Mon 29 Dec 2025 02:00:31 +0000 asID: 16591 IP address blocks: 136.60.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5c:6c:b8:36:1d:78:ca:17:2a:e2:e1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 30 01:00:31 2025 GMT Not After : Dec 29 02:00:31 2025 GMT Subject: CN=2cb91841-842a-4d9a-9fd7-ee4077096f2f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:ce:8a:4b:e9:bb:b3:8f:a1:71:c5:31:b9:a5: 2b:28:19:fc:66:96:29:9c:13:a0:22:08:d8:08:b9: bd:cf:e4:25:7c:e5:d4:51:b6:d7:fa:71:83:1b:b0: ab:6e:76:f6:45:26:61:57:77:4c:dd:e6:ca:d7:9c: 4f:e0:f3:3c:63:59:ef:f5:4b:89:e3:76:af:91:0c: 9b:ed:12:ff:26:1e:ff:60:18:e2:e8:1a:72:e0:d9: ee:8d:2d:2b:c1:9b:0c:77:73:8e:33:ad:cc:d0:46: f0:67:e4:c3:32:20:ad:f6:da:fd:2b:00:59:b3:fe: 4b:46:0c:33:aa:89:e1:aa:57:b8:b7:13:9f:e1:9a: 87:48:33:a1:01:12:5e:9b:95:ac:8c:68:19:c4:fb: db:dd:b1:4a:48:8f:36:cf:58:27:62:8b:44:2b:28: 6e:86:70:03:b1:45:74:d1:d0:d7:8b:ad:a8:51:55: 01:1a:ea:32:18:c3:b6:40:c9:15:46:4a:0f:60:d1: bb:97:14:d9:a7:ea:94:6a:73:6a:82:80:62:07:71: 0d:9f:83:1f:c7:7d:d7:9b:82:f9:35:33:a2:4f:1e: 19:d5:72:ad:29:85:a0:7e:2b:c4:34:2a:36:ce:77: b6:71:75:a7:95:9a:ce:70:77:ea:5e:9d:bd:a7:b0: 41:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:CD:CD:F9:25:D4:49:AC:F1:D0:9C:46:23:5A:C3:1E:EF:CC:9C:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/58a8f4b8-461a-3dda-8a4d-e716b0eb71c2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:80:0b:1b:7f:ec:3b:15:d4:a7:7a:a2:b4:bd:46:6d:d5:15: 2b:ea:11:29:34:ab:48:31:2b:a3:75:35:29:5e:87:13:78:47: f9:c0:73:42:e3:ab:ec:e7:8f:2e:4a:8c:45:50:85:cf:98:4e: 35:8a:ec:b4:8d:98:74:09:ab:19:62:eb:0a:6d:c5:51:22:ec: d3:55:ad:1b:93:ae:ad:74:c3:ee:55:1d:1a:24:bf:50:c8:f9: 30:52:e1:6d:ad:b6:47:7b:78:4d:95:e4:a5:13:99:3b:bf:b3: fb:dc:8a:7f:e2:0d:4e:a6:a5:74:b2:77:f0:ca:33:fa:17:73: 6a:00:1a:84:6b:b8:9b:2f:da:f7:63:f3:3a:5d:5f:b4:3c:fa: 4d:36:b6:1a:74:68:4e:f8:8a:4b:70:7b:d2:b7:ee:7e:c3:74: f5:93:65:67:2a:5a:35:6b:70:8c:00:12:1d:3b:8e:69:ca:25: 34:20:13:ad:77:ba:38:e3:2e:98:b5:9c:57:9a:65:ef:43:e9: 14:2b:2e:3b:35:39:80:80:88:c3:d8:03:ba:32:93:b4:2a:00: 25:e1:88:c6:19:29:7d:63:ae:77:51:a1:db:d0:8b:89:01:18: df:fd:cf:19:a5:0f:7b:15:b6:00:bb:e9:58:1a:79:a0:c8:20: d1:ce:2e:d6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtcbLg2HXjKFyri4YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkzMDAxMDAzMVoXDTI1MTIyOTAyMDAzMVowLzEtMCsGA1UEAxMk MmNiOTE4NDEtODQyYS00ZDlhLTlmZDctZWU0MDc3MDk2ZjJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgs6KS+m7s4+hccUxuaUrKBn8ZpYpnBOgIgjY CLm9z+QlfOXUUbbX+nGDG7Crbnb2RSZhV3dM3ebK15xP4PM8Y1nv9UuJ43avkQyb 7RL/Jh7/YBji6Bpy4NnujS0rwZsMd3OOM63M0EbwZ+TDMiCt9tr9KwBZs/5LRgwz qonhqle4txOf4ZqHSDOhARJem5WsjGgZxPvb3bFKSI82z1gnYotEKyhuhnADsUV0 0dDXi62oUVUBGuoyGMO2QMkVRkoPYNG7lxTZp+qUanNqgoBiB3ENn4Mfx33Xm4L5 NTOiTx4Z1XKtKYWgfivENCo2zne2cXWnlZrOcHfqXp29p7BBfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFnNzfkl1Ems8dCcRiNawx7vzJwwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNThhOGY0YjgtNDYxYS0z ZGRhLThhNGQtZTcxNmIwZWI3MWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDxQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByACxt/7DsV1Kd6orS9Rm3VFSvqESk0q0gxK6N1NSlehxN4R/nAc0Lj q+znjy5KjEVQhc+YTjWK7LSNmHQJqxli6wptxVEi7NNVrRuTrq10w+5VHRokv1DI +TBS4W2ttkd7eE2V5KUTmTu/s/vcin/iDU6mpXSyd/DKM/oXc2oAGoRruJsv2vdj 8zpdX7Q8+k02thp0aE74iktwe9K37n7DdPWTZWcqWjVrcIwAEh07jmnKJTQgE613 ujjjLpi1nFeaZe9D6RQrLjs1OYCAiMPYA7oyk7QqACXhiMYZKX1jrndRodvQi4kB GN/9zxmlD3sVtgC76VgaeaDIINHOLtY= -----END CERTIFICATE-----Generated at Wed Oct 8 21:10:33 2025 by rpki-client