$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa File: 90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa (raw, json) Hash identifier: pfkknz7PUdbmz73JRj05iyBQmkd8OHo3YcjKIr12fa8= Subject key identifier: D7:F5:7F:37:78:FA:E2:7B:BB:E9:99:1B:AD:25:A7:4E:99:BA:CD:98 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5F0D8F1DDE8185F6EA00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5f:0d:8f:1d:de:81:85:f6:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=ba3b607a-b877-468d-9e86-4bf27bcd6925 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:65:f1:cd:1f:e9:cf:a2:d0:8c:23:38:e0:5e: 9f:8b:51:17:01:3e:31:c8:a8:05:77:45:d7:29:ca: b4:17:50:94:55:1f:ff:ed:ef:20:31:3b:8e:24:eb: e8:51:7f:64:02:03:d9:6a:bc:65:0d:50:3b:05:bc: 20:63:ac:68:06:ab:60:e0:e7:50:ee:aa:35:9f:35: e7:31:f1:8f:26:54:59:55:0a:bd:cf:24:07:63:62: 74:3b:13:f8:1c:b8:51:aa:bc:61:67:e5:87:42:20: d3:27:67:4b:26:30:af:ae:35:ed:0d:bd:32:e4:e3: d5:60:d4:1b:f2:ec:5b:c5:4f:06:3e:02:7c:39:3a: c6:02:6f:8b:15:55:7e:9c:b3:b3:e2:80:d8:6c:bd: c4:89:a4:8b:82:5e:89:ce:99:a8:f9:11:f7:fc:07: 0a:57:c9:a5:a0:84:bc:a1:db:95:3e:1f:44:ef:6d: 47:a6:71:65:6d:87:3c:f1:9a:5e:e3:83:8e:35:c9: 76:fe:77:0d:9f:a2:ce:f0:af:ed:7d:bf:09:f6:e9: 55:31:23:11:d1:25:82:2f:59:93:b1:ca:8c:c8:c4: de:9a:d3:75:c2:24:d9:68:e0:bc:74:b1:6a:0d:9b: 97:8c:32:1a:8d:f4:99:0d:89:b1:ac:a1:68:83:b3: 1d:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:F5:7F:37:78:FA:E2:7B:BB:E9:99:1B:AD:25:A7:4E:99:BA:CD:98 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/90ab3f01-a144-38ad-9fb5-55cbc9f53fd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:df:08:d5:e8:25:9a:ce:6b:56:d3:87:07:d2:19:8f:7a:f1: e4:ed:11:f0:8c:2b:ef:6a:d4:9e:84:f7:70:c0:e3:d9:d3:cb: 70:13:de:c9:a1:42:58:9d:99:bf:77:36:ac:32:e5:6e:b3:6f: 74:64:7d:f3:e7:e7:d9:e6:a9:33:09:ea:8f:db:79:7c:0e:22: af:1c:c4:ab:6f:a7:da:50:d0:07:c5:75:e8:26:e0:61:4e:02: d1:4c:8c:31:69:b2:74:83:de:69:f9:1f:9b:40:db:c4:d2:fe: 0c:78:bd:3a:d6:5b:b5:e1:0e:ee:e8:90:fc:e2:7e:96:87:00: 8d:40:a0:04:af:a2:d3:3a:21:af:91:8c:f3:31:7b:29:13:b0: a1:0b:02:32:54:19:09:61:aa:84:9d:ef:72:06:99:6c:d9:f3: bb:12:92:fc:ce:46:d9:da:19:33:c4:3f:cf:3a:30:a1:3b:55: 25:0a:6f:d2:56:5c:80:d7:b8:9d:62:c9:8b:f6:8e:0c:77:62: 24:8c:85:9e:64:0d:26:d6:b7:89:f2:a8:90:ea:45:dc:7b:6b: 7e:a7:28:b1:76:f2:b8:67:e5:bd:72:fc:aa:d8:39:fa:3f:3d: d1:16:c8:ea:75:1b:64:92:2d:4d:06:22:4c:13:17:1e:07:52: bd:30:f3:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF8Njx3egYX26gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmEzYjYwN2EtYjg3Ny00NjhkLTllODYtNGJmMjdiY2Q2OTI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2XxzR/pz6LQjCM44F6fi1EXAT4xyKgFd0XX Kcq0F1CUVR//7e8gMTuOJOvoUX9kAgPZarxlDVA7BbwgY6xoBqtg4OdQ7qo1nzXn MfGPJlRZVQq9zyQHY2J0OxP4HLhRqrxhZ+WHQiDTJ2dLJjCvrjXtDb0y5OPVYNQb 8uxbxU8GPgJ8OTrGAm+LFVV+nLOz4oDYbL3EiaSLgl6Jzpmo+RH3/AcKV8mloIS8 oduVPh9E721HpnFlbYc88Zpe44OONcl2/ncNn6LO8K/tfb8J9ulVMSMR0SWCL1mT scqMyMTemtN1wiTZaOC8dLFqDZuXjDIajfSZDYmxrKFog7MdCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNf1fzd4+uJ7u+mZG60lp06Zus2YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTBhYjNmMDEtYTE0NC0z OGFkLTlmYjUtNTVjYmM5ZjUzZmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzfCNXoJZrOa1bThwfSGY968eTtEfCMK+9q1J6E93DA49nTy3AT3smh Qlidmb93Nqwy5W6zb3RkffPn59nmqTMJ6o/beXwOIq8cxKtvp9pQ0AfFdegm4GFO AtFMjDFpsnSD3mn5H5tA28TS/gx4vTrWW7XhDu7okPzifpaHAI1AoASvotM6Ia+R jPMxeykTsKELAjJUGQlhqoSd73IGmWzZ87sSkvzORtnaGTPEP886MKE7VSUKb9JW XIDXuJ1iyYv2jgx3YiSMhZ5kDSbWt4nyqJDqRdx7a36nKLF28rhn5b1y/KrYOfo/ PdEWyOp1G2SSLU0GIkwTFx4HUr0w854= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:11 2025 by rpki-client