$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json) Hash identifier: ZeH1aHlQvprxJY/9S7q74/zigL3Pa6qUhuXB3hGQcik= Subject key identifier: 10:D5:B5:71:F2:17:9A:3E:AE:02:FD:C4:9E:B5:51:C7:DA:52:77:AB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C643B87489CA93B701E40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:64:3b:87:48:9c:a9:3b:70:1e:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3f0a965b-52f0-400f-97d1-c7577e0aae8c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:25:e9:9d:75:88:d1:3f:4c:bd:2d:e8:23:72: a2:12:ba:a4:42:5c:be:44:aa:64:db:43:80:05:a2: e6:32:9a:ce:0d:ad:82:b4:e0:8e:be:10:ef:3a:1e: 1b:d4:50:74:5f:d5:8f:7d:dc:5f:87:4d:00:85:19: 06:80:af:2b:f2:5a:9d:03:e0:73:84:83:b9:4e:9c: e0:45:76:a9:c8:ca:53:e8:bd:62:a7:f7:43:e2:fa: f0:75:56:de:9c:44:e3:41:80:94:a4:e3:0d:ff:6f: 92:47:7b:96:97:2a:12:cd:b0:8b:47:e1:27:b6:89: a7:0b:3f:f7:d2:eb:ab:b1:f2:d3:58:f2:12:e1:bc: 33:20:a9:a6:4b:34:2c:5e:e4:2f:f4:07:9d:14:80: db:37:7a:f6:39:03:7f:d8:ad:18:e9:b2:2f:f6:23: 59:11:34:94:2e:03:41:24:8f:93:06:8d:c9:d1:ce: 70:50:32:d4:ae:f3:c4:b7:91:85:7c:cc:34:f0:84: 4e:f7:8b:28:9d:06:84:4f:1b:42:bb:c8:52:4c:5e: 61:0e:c4:e5:6b:dc:d5:95:b0:8a:76:77:96:8b:77: 42:a3:01:a2:b5:20:3f:a3:20:17:7e:d3:f8:9b:c0: 06:6e:63:26:33:0d:38:5c:79:cc:a6:61:3f:4c:47: 9a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:D5:B5:71:F2:17:9A:3E:AE:02:FD:C4:9E:B5:51:C7:DA:52:77:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:f9:07:28:a1:1e:bd:ae:04:52:88:f0:f7:39:23:ff:92:e0: f2:76:e0:33:dd:68:12:b7:fb:9f:cd:a9:84:e6:d8:cb:39:af: 79:97:57:3a:9c:f2:76:73:31:34:22:de:99:fb:c7:58:94:0d: d4:08:2e:e6:f8:a7:84:7c:0b:cf:69:a4:7a:4d:95:e6:d2:da: 11:bb:07:2c:b8:da:bb:d3:89:c6:81:92:83:2c:2f:e5:e9:02: 3d:30:a4:55:1c:90:15:19:3b:d3:7a:0f:0a:4f:fe:7a:91:44: 52:23:67:45:51:30:fd:0a:e0:58:f5:e6:be:86:0a:8c:e7:f0: 90:ab:48:71:62:8b:d0:df:fd:7a:7b:48:d6:86:72:cc:2f:ec: 0b:d2:79:68:7c:a7:89:91:53:06:a1:79:ca:6b:9b:29:cf:9a: 52:b6:e5:cb:aa:0d:a0:3f:c6:df:08:b2:18:6a:2e:23:cb:72: 20:bb:45:c3:56:95:d8:ab:31:75:db:54:6f:e0:60:53:9c:78: 77:ba:6e:63:d6:f6:9e:43:d5:9c:52:b2:c6:a1:8c:39:b4:ed: bb:1b:74:33:f1:e3:73:8c:a3:c1:ea:4a:6c:63:3c:73:dd:bd: 00:7a:6d:49:e1:6e:17:43:14:32:f2:75:34:47:96:fe:ae:0d: ac:14:2d:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGQ7h0icqTtwHkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2YwYTk2NWItNTJmMC00MDBmLTk3ZDEtYzc1NzdlMGFhZThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiSXpnXWI0T9MvS3oI3KiErqkQly+RKpk20OA BaLmMprODa2CtOCOvhDvOh4b1FB0X9WPfdxfh00AhRkGgK8r8lqdA+BzhIO5Tpzg RXapyMpT6L1ip/dD4vrwdVbenETjQYCUpOMN/2+SR3uWlyoSzbCLR+EntomnCz/3 0uursfLTWPIS4bwzIKmmSzQsXuQv9AedFIDbN3r2OQN/2K0Y6bIv9iNZETSULgNB JI+TBo3J0c5wUDLUrvPEt5GFfMw08IRO94sonQaETxtCu8hSTF5hDsTla9zVlbCK dneWi3dCowGitSA/oyAXftP4m8AGbmMmMw04XHnMpmE/TEeaUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBDVtXHyF5o+rgL9xJ61UcfaUnerMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABX5ByihHr2uBFKI8Pc5I/+S4PJ24DPdaBK3+5/NqYTm2Ms5r3mXVzqc 8nZzMTQi3pn7x1iUDdQILub4p4R8C89ppHpNlebS2hG7Byy42rvTicaBkoMsL+Xp Aj0wpFUckBUZO9N6DwpP/nqRRFIjZ0VRMP0K4Fj15r6GCozn8JCrSHFii9Df/Xp7 SNaGcswv7AvSeWh8p4mRUwahecprmynPmlK25cuqDaA/xt8IshhqLiPLciC7RcNW ldirMXXbVG/gYFOceHe6bmPW9p5D1ZxSssahjDm07bsbdDPx43OMo8HqSmxjPHPd vQB6bUnhbhdDFDLydTRHlv6uDawULWo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:35 2025 by rpki-client