$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: 7n0tzDVbQAjhozzWuOVDpj+B4X0ZY2Y3qkE73iTGyEQ= Subject key identifier: 38:A0:E0:7E:CE:3F:12:AD:17:23:5C:9D:83:00:40:51:F2:72:CD:D9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C548041E7180D0020EF60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:54:80:41:e7:18:0d:00:20:ef:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7622eaf1-e8a1-4ff1-a04c-e2cfda0f58f6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:3f:cf:52:00:b2:55:0f:2a:74:e2:61:a3:ee: e6:f3:ae:79:d4:14:bb:87:5f:99:eb:b5:b9:d4:73: 7e:57:7c:11:39:db:9d:d6:e0:0a:05:77:d5:d2:a5: 2d:06:cc:2b:4b:e1:ba:bc:62:f0:74:22:72:a0:bf: c9:7d:78:df:45:3d:f5:ff:34:d3:ab:11:0d:04:2d: db:88:88:50:01:f7:e7:d0:4a:d4:31:4b:e4:c5:81: 70:ee:9a:1e:99:67:eb:93:fd:f3:8d:5a:9d:37:1e: cb:56:3b:5c:23:79:7c:86:0a:18:4f:a7:3e:89:f7: f2:8a:67:6a:85:ce:42:43:9f:5d:f9:d7:9e:82:15: e0:a3:24:ba:50:ae:bc:3a:d2:f8:ce:8d:60:49:0a: 1d:1c:2d:0b:39:b5:63:0e:f3:5d:38:ea:de:29:58: 40:c9:ac:c6:26:ee:3a:fe:a6:db:3d:4a:f2:d8:d9: 2a:02:22:b7:be:ce:4d:bb:1e:f7:05:ee:20:a7:79: a9:2e:35:3f:f5:de:39:7b:63:04:d0:44:7c:6f:1b: a3:29:e1:22:b7:74:6c:c7:6a:e3:59:76:f5:24:3e: 00:41:6a:81:fb:98:fd:1a:c3:05:93:6e:59:8b:92: 5e:f0:c9:7c:11:e4:b7:89:d1:bc:f4:a0:9a:f1:79: 14:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:A0:E0:7E:CE:3F:12:AD:17:23:5C:9D:83:00:40:51:F2:72:CD:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:6f:7d:c3:d1:03:7a:de:b1:4d:84:b8:94:2f:99:2a:a4:7f: 5e:98:c1:a9:5d:c1:8e:4a:eb:6b:77:c3:4f:50:17:d7:88:8e: 07:8a:c3:61:2b:e5:dd:80:5e:8e:3f:ee:16:45:99:60:7d:59: 7d:02:e4:1a:59:73:10:ce:ad:6a:70:31:ca:d4:f5:90:36:37: 74:b4:c9:6e:34:a3:4e:d6:58:7d:b7:a5:23:f6:47:a4:f5:78: ad:54:aa:cf:5b:0d:99:c9:d2:17:29:40:af:f0:73:07:b0:6d: 34:48:34:c4:97:fd:07:48:1c:0d:3b:93:ee:4a:ff:08:c2:4e: ad:34:d1:34:e0:18:92:58:86:4c:a1:df:06:f5:e4:1b:fc:e7: 8c:94:e8:e3:7f:7c:bc:62:44:e5:22:1c:2d:39:e0:79:8b:71: a6:4d:fa:de:62:73:b1:45:11:21:d5:0f:63:7d:0f:bf:d7:d2: 99:ea:54:d3:79:91:e8:27:58:00:ce:ef:68:df:83:3e:81:e4: 9b:a4:50:f5:9b:0c:77:84:ff:a4:c2:41:26:9d:7d:1f:3c:5e: de:3b:19:33:2f:9c:8b:81:4d:ad:46:7b:41:fe:94:3d:dd:c3: 2f:bb:a4:4b:6d:e9:d1:f3:d7:9b:fe:1b:d0:72:b0:de:8e:50: b1:cd:08:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFSAQecYDQAg72AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzYyMmVhZjEtZThhMS00ZmYxLWEwNGMtZTJjZmRhMGY1OGY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhT/PUgCyVQ8qdOJho+7m86551BS7h1+Z67W5 1HN+V3wROdud1uAKBXfV0qUtBswrS+G6vGLwdCJyoL/JfXjfRT31/zTTqxENBC3b iIhQAffn0ErUMUvkxYFw7poemWfrk/3zjVqdNx7LVjtcI3l8hgoYT6c+iffyimdq hc5CQ59d+deeghXgoyS6UK68OtL4zo1gSQodHC0LObVjDvNdOOreKVhAyazGJu46 /qbbPUry2NkqAiK3vs5Nux73Be4gp3mpLjU/9d45e2ME0ER8bxujKeEit3Rsx2rj WXb1JD4AQWqB+5j9GsMFk25Zi5Je8Ml8EeS3idG89KCa8XkUYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDig4H7OPxKtFyNcnYMAQFHycs3ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADdvfcPRA3resU2EuJQvmSqkf16YwaldwY5K62t3w09QF9eIjgeKw2Er 5d2AXo4/7hZFmWB9WX0C5BpZcxDOrWpwMcrU9ZA2N3S0yW40o07WWH23pSP2R6T1 eK1Uqs9bDZnJ0hcpQK/wcwewbTRINMSX/QdIHA07k+5K/wjCTq000TTgGJJYhkyh 3wb15Bv854yU6ON/fLxiROUiHC054HmLcaZN+t5ic7FFESHVD2N9D7/X0pnqVNN5 kegnWADO72jfgz6B5JukUPWbDHeE/6TCQSadfR88Xt47GTMvnIuBTa1Ge0H+lD3d wy+7pEtt6dHz15v+G9BysN6OULHNCEc= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:33 2025 by rpki-client