$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa File: 63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa (raw, json) Hash identifier: 6niP9J6YtPUWnZqIPwviDolWq9Hl/dC2+8hAgM4nAl0= Subject key identifier: FE:34:72:8A:9C:13:67:39:56:C4:C7:0B:54:30:79:8A:FF:DA:CB:43 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CACB6929D3FA084EB1FC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.53.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ac:b6:92:9d:3f:a0:84:eb:1f:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=21c9429f-497b-4971-8321-8dc6e6efb57f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f1:f0:b9:c3:7f:ff:b3:5e:18:90:dc:89:c1: d0:fa:06:e5:48:a5:b5:ff:61:2d:8f:5e:6e:14:a0: 29:c1:52:ba:33:de:a2:00:15:db:23:da:21:b1:c7: 95:3a:99:6b:d7:fc:b2:ae:0a:27:0e:a9:58:a2:b6: e1:87:3e:16:a1:5c:73:28:81:bf:79:07:94:6c:b1: 43:ea:c4:9d:fa:64:54:5e:f9:4a:3e:ca:e3:cc:d9: b6:60:98:65:f6:a0:5f:93:13:a9:01:c5:37:a0:27: 48:2b:a2:cd:f7:63:eb:e0:43:9c:00:c4:1a:b5:f7: 07:1a:cb:01:46:f8:7f:c4:8b:b3:b2:de:a3:ba:49: 11:c3:cb:e8:13:e7:d0:1e:28:b5:fc:f4:cf:9c:1a: 84:fc:c4:2c:3d:4d:77:5a:57:f1:2a:30:c0:ec:b1: cd:53:68:f3:da:a1:14:85:0f:b9:dd:28:22:c6:1c: df:d3:8b:24:24:cf:87:fe:47:ee:3f:95:8f:47:6a: 48:77:a6:73:b5:82:b3:51:5a:c2:11:7b:45:cd:a3: b4:e2:b0:95:ce:66:be:5f:35:ab:c0:b4:6a:87:54: a3:20:70:1d:ef:bf:77:f1:a3:b0:e2:2d:7b:b2:8f: 0c:89:70:95:d9:1e:c5:6e:40:3f:c9:03:c0:42:57: f6:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:72:8A:9C:13:67:39:56:C4:C7:0B:54:30:79:8A:FF:DA:CB:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/63a2667e-3886-3b2c-b2e9-e1d169d43b23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:24:c5:ba:6a:0d:d8:3a:0b:4f:a0:29:7f:77:ba:dd:13:1c: 5d:ac:35:e1:b6:04:9f:7e:0a:bb:60:19:41:2b:04:85:9a:47: ac:07:8d:b3:84:78:76:43:08:a5:22:ad:3c:c4:35:e6:4e:23: 98:ed:b3:98:07:f4:1c:90:16:f5:c8:7b:ac:f8:e2:54:f1:8b: 29:5b:ed:3d:17:45:62:8d:89:3b:29:60:63:ad:82:e4:e2:e4: f0:40:00:e3:4a:43:d3:fa:d6:fc:51:b8:08:f4:7a:da:92:5d: ad:ad:a9:5d:d7:be:3a:6b:d2:bd:16:a1:6c:e8:9d:09:3f:11: 25:24:3c:90:24:ac:fc:41:41:dd:5f:2f:e1:16:75:03:ca:75: b3:4d:70:27:2b:cf:66:a5:e3:29:52:87:a6:a5:38:96:3b:10: 96:91:9d:ec:a3:11:a9:dd:64:1a:de:72:ad:8d:10:31:10:d6: 47:22:28:eb:ca:e2:34:76:5c:35:32:b1:2c:03:ae:f6:6a:24: 1b:30:48:e1:dd:16:1c:62:fb:8e:d5:1b:b2:b3:f0:59:06:22: a8:81:1e:9e:58:95:bb:7b:43:d4:5a:47:52:5d:42:2a:0a:9a: 04:71:7e:f2:0b:f1:76:b5:83:d6:04:10:73:ad:7e:3c:2c:d8: ae:21:7b:fe -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKy2kp0/oITrH8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjFjOTQyOWYtNDk3Yi00OTcxLTgzMjEtOGRjNmU2ZWZiNTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/HwucN//7NeGJDcicHQ+gblSKW1/2Etj15u FKApwVK6M96iABXbI9ohsceVOplr1/yyrgonDqlYorbhhz4WoVxzKIG/eQeUbLFD 6sSd+mRUXvlKPsrjzNm2YJhl9qBfkxOpAcU3oCdIK6LN92Pr4EOcAMQatfcHGssB Rvh/xIuzst6jukkRw8voE+fQHii1/PTPnBqE/MQsPU13WlfxKjDA7LHNU2jz2qEU hQ+53Sgixhzf04skJM+H/kfuP5WPR2pId6ZztYKzUVrCEXtFzaO04rCVzma+XzWr wLRqh1SjIHAd77938aOw4i17so8MiXCV2R7FbkA/yQPAQlf2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP40coqcE2c5VsTHC1QweYr/2stDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjNhMjY2N2UtMzg4Ni0z YjJjLWIyZTktZTFkMTY5ZDQzYjIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEckxbpqDdg6C0+gKX93ut0THF2sNeG2BJ9+CrtgGUErBIWaR6wHjbOE eHZDCKUirTzENeZOI5jts5gH9ByQFvXIe6z44lTxiylb7T0XRWKNiTspYGOtguTi 5PBAAONKQ9P61vxRuAj0etqSXa2tqV3Xvjpr0r0WoWzonQk/ESUkPJAkrPxBQd1f L+EWdQPKdbNNcCcrz2al4ylSh6alOJY7EJaRneyjEandZBrecq2NEDEQ1kciKOvK 4jR2XDUysSwDrvZqJBswSOHdFhxi+47VG7Kz8FkGIqiBHp5Ylbt7Q9RaR1JdQioK mgRxfvIL8Xa1g9YEEHOtfjws2K4he/4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:53 2025 by rpki-client