$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa File: 716ef213-e8a2-34db-b2ca-14228c37f7b9.roa (raw, json) Hash identifier: R2V8Hg80cC2Do/cvgp0SFKOWpqh2TBQjW0+rNNPmY0Y= Subject key identifier: 98:85:53:9E:55:D0:B7:4B:C3:2E:23:90:3F:B0:BA:AA:BE:13:B5:5B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA2B4156A1D3A8733F200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a2:b4:15:6a:1d:3a:87:33:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=524583ab-fdad-4247-b53f-eecbe2300216 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:9b:10:cd:6d:2e:43:af:a5:dd:79:02:b4:a2: dd:61:91:b8:1a:11:92:54:5d:54:1c:77:c5:2b:ab: 1d:60:60:1a:60:46:9d:43:05:cb:d7:af:03:7a:30: d4:4c:75:69:c2:bc:15:b3:a9:06:9f:43:54:24:d9: 76:3a:53:84:0b:47:1d:95:21:07:15:4f:86:c8:e6: af:27:f1:61:89:00:3e:60:c3:4d:12:be:37:e5:0b: 46:3a:55:cb:96:e9:80:3b:51:4a:51:67:d0:24:fc: df:ee:08:ca:cf:a7:d2:46:d2:a4:23:e6:11:7a:9a: 3c:cd:bc:91:62:83:49:3c:05:f3:5f:69:84:b4:5f: d4:f2:02:5f:0d:65:2f:f6:1c:da:d9:ac:b1:9d:1c: 13:23:ed:25:88:cb:20:54:c4:df:bc:30:ac:b1:ce: 26:e8:91:4e:7f:fe:6c:03:da:91:e9:46:40:bf:02: c9:31:3d:b4:7a:25:68:f5:d7:2b:60:66:9c:dc:d1: bc:48:83:07:82:4f:bc:66:eb:9d:c8:e5:c5:c7:6c: d1:fa:a9:a8:7f:75:a3:f3:9b:d5:0c:8b:20:88:42: a9:bb:65:33:ad:a0:c0:af:f7:62:b2:1c:32:42:e4: da:41:08:3d:4e:04:6e:df:15:41:ef:f2:00:72:d0: c3:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:85:53:9E:55:D0:B7:4B:C3:2E:23:90:3F:B0:BA:AA:BE:13:B5:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/716ef213-e8a2-34db-b2ca-14228c37f7b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:e3:b6:56:ca:c1:3c:f5:db:5d:5d:c7:bf:bd:2d:65:d4:8a: 62:a4:ee:8a:db:75:a1:44:be:4d:f9:b4:23:2e:0f:1e:5e:56: a5:96:ae:7b:91:49:bf:b1:00:f7:e8:d0:6b:c8:d7:a7:72:b2: d5:74:63:82:c2:6f:5b:49:8c:68:2a:47:55:d0:f9:17:27:b6: 6a:6f:b5:5d:61:f7:89:8e:53:ad:04:58:0e:e9:5e:78:3c:5f: 1d:cc:35:52:be:3d:a8:19:9e:3e:df:0c:a5:55:39:b2:fd:4c: 90:e4:19:1d:7a:4d:06:3e:59:4d:d3:18:39:58:18:7f:8c:b0: 97:d4:83:10:ca:65:3d:d4:07:b4:d8:f9:2a:32:af:b3:55:12: 62:b9:48:6b:10:c5:07:18:27:ef:32:88:64:a3:d4:ac:e7:3e: 67:80:b2:f3:d3:31:68:77:42:ba:f5:8c:76:53:d7:94:02:e8: 85:2a:34:b0:85:99:46:47:62:c3:13:37:3c:b5:c3:bf:3c:5a: c4:dd:79:19:c0:c2:a3:d6:71:49:83:ad:37:23:34:c4:e3:a6: 33:96:46:bf:1f:de:7e:90:13:58:01:07:54:e4:67:c2:a4:bd: f8:fe:01:a9:0d:33:d3:1b:f8:42:ab:5c:ca:89:9f:9c:a8:d6: 41:9b:06:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKK0FWodOocz8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NTI0NTgzYWItZmRhZC00MjQ3LWI1M2YtZWVjYmUyMzAwMjE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2ZsQzW0uQ6+l3XkCtKLdYZG4GhGSVF1UHHfF K6sdYGAaYEadQwXL168DejDUTHVpwrwVs6kGn0NUJNl2OlOEC0cdlSEHFU+GyOav J/FhiQA+YMNNEr435QtGOlXLlumAO1FKUWfQJPzf7gjKz6fSRtKkI+YRepo8zbyR YoNJPAXzX2mEtF/U8gJfDWUv9hza2ayxnRwTI+0liMsgVMTfvDCssc4m6JFOf/5s A9qR6UZAvwLJMT20eiVo9dcrYGac3NG8SIMHgk+8ZuudyOXFx2zR+qmof3Wj85vV DIsgiEKpu2UzraDAr/dishwyQuTaQQg9TgRu3xVB7/IActDDCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiFU55V0LdLwy4jkD+wuqq+E7VbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzE2ZWYyMTMtZThhMi0z NGRiLWIyY2EtMTQyMjhjMzdmN2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAbjtlbKwTz1211dx7+9LWXUimKk7orbdaFEvk35tCMuDx5eVqWWrnuR Sb+xAPfo0GvI16dystV0Y4LCb1tJjGgqR1XQ+RcntmpvtV1h94mOU60EWA7pXng8 Xx3MNVK+PagZnj7fDKVVObL9TJDkGR16TQY+WU3TGDlYGH+MsJfUgxDKZT3UB7TY +Soyr7NVEmK5SGsQxQcYJ+8yiGSj1KznPmeAsvPTMWh3Qrr1jHZT15QC6IUqNLCF mUZHYsMTNzy1w788WsTdeRnAwqPWcUmDrTcjNMTjpjOWRr8f3n6QE1gBB1TkZ8Kk vfj+AakNM9Mb+EKrXMqJn5yo1kGbBnA= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:37 2025 by rpki-client