$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa File: 930baebb-b528-3d6d-9e48-2ff8e4312599.roa (raw, json) Hash identifier: Fw0H4qlC2F4DSJKB/yZ/SBTkeahepFo+dTNf1t89KrU= Subject key identifier: 29:AB:18:B0:C1:4E:1D:09:EA:EE:17:30:F5:6F:61:5E:77:60:09:4B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B74274AF17889A8B81916D100 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa Signing time: Wed 08 Oct 2025 13:00:37 +0000 ROA not before: Wed 08 Oct 2025 13:00:37 +0000 ROA not after: Tue 06 Jan 2026 14:00:37 +0000 asID: 16591 IP address blocks: 136.60.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:74:27:4a:f1:78:89:a8:b8:19:16:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Oct 8 13:00:37 2025 GMT Not After : Jan 6 14:00:37 2026 GMT Subject: CN=394f3bac-0835-484f-a606-0d5ebc362943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:f4:2c:21:2b:a2:94:72:c2:9c:a2:fd:90:1c: 35:14:e0:85:1a:54:50:6d:f9:91:7b:d6:38:a4:8c: 52:96:eb:2e:fb:4b:fd:62:1c:67:51:d1:f9:8d:72: 31:b8:af:3e:e1:8c:51:7f:70:35:cd:3c:be:cf:69: 9a:fc:60:15:c8:62:22:37:fc:5a:7d:0a:4f:37:84: a6:f2:c6:6e:56:a3:90:f5:bb:4d:d1:6f:46:16:7a: 00:a5:23:d3:13:8f:ed:e3:2b:45:32:fa:22:f0:b8: 4d:4b:42:ce:d2:a3:18:08:46:7b:ff:e2:62:a5:f0: 85:e5:75:3e:cc:93:aa:b6:ef:da:d9:97:29:3a:84: 73:d6:14:4e:ed:f3:db:1c:a2:67:d0:b9:0f:b6:91: 32:56:95:7e:94:1c:39:59:17:13:cb:16:88:e8:f7: 9d:9b:46:96:3a:d1:f1:23:24:de:cc:82:29:86:67: e7:3c:36:22:ac:c4:df:8c:bf:bf:52:48:27:d1:71: bd:3b:d6:d6:72:72:41:f4:12:b0:ea:fc:66:db:a2: c3:9d:e4:fa:b0:0b:68:78:70:07:c7:6b:09:26:93: 93:73:5a:28:e9:d7:94:8a:4c:95:9a:0a:82:16:b9: 47:16:c1:55:82:14:70:4e:b8:cd:a5:29:f6:a1:4d: c7:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AB:18:B0:C1:4E:1D:09:EA:EE:17:30:F5:6F:61:5E:77:60:09:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:0f:c9:23:56:c3:74:96:ac:c1:6b:c4:f5:a9:07:fe:95:e0: c2:6c:ae:4a:58:7f:d8:f6:3e:7b:16:9b:c0:33:24:2d:5a:b8: 8e:fe:c5:f0:3b:11:18:66:5f:70:36:10:19:b6:84:16:b6:fd: 15:35:0c:a0:72:4e:b0:1c:7e:d3:c1:f5:aa:3b:09:87:94:c8: 93:97:8b:74:3d:e0:ee:5e:a4:bc:83:8d:97:a2:b1:45:ab:ed: f1:91:32:32:bd:d0:ba:c7:7d:95:7e:ea:1c:9b:f9:c9:6d:43: 05:43:84:af:31:1f:e7:44:d7:ff:15:27:a0:36:a3:b7:d8:cb: d9:c9:3d:c4:6c:ab:1d:07:02:94:8a:e2:46:83:24:91:b5:3f: f0:fe:7c:63:4c:2e:2c:73:66:e2:da:41:d3:60:64:7f:17:09: 47:cf:66:28:fe:24:63:0c:f7:fd:1f:a7:f7:97:1c:cf:ae:33: f0:d4:6e:ee:e4:d4:d0:6c:df:57:66:a7:5f:ed:f3:b7:a0:77: 0e:d6:0f:7c:72:77:82:ba:a4:d1:7b:5d:a4:a9:9c:1b:71:b5: 33:02:3f:31:f5:1a:5e:5c:d2:b4:af:5d:8f:09:27:64:26:76: 3f:31:ca:a1:8b:1c:61:c9:fc:50:17:02:fc:4f:e3:bd:6a:3b: 8b:c2:82:bd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt0J0rxeImouBkW0QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MTAwODEzMDAzN1oXDTI2MDEwNjE0MDAzN1owLzEtMCsGA1UEAxMk Mzk0ZjNiYWMtMDgzNS00ODRmLWE2MDYtMGQ1ZWJjMzYyOTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwPQsISuilHLCnKL9kBw1FOCFGlRQbfmRe9Y4 pIxSlusu+0v9YhxnUdH5jXIxuK8+4YxRf3A1zTy+z2ma/GAVyGIiN/xafQpPN4Sm 8sZuVqOQ9btN0W9GFnoApSPTE4/t4ytFMvoi8LhNS0LO0qMYCEZ7/+JipfCF5XU+ zJOqtu/a2ZcpOoRz1hRO7fPbHKJn0LkPtpEyVpV+lBw5WRcTyxaI6Pedm0aWOtHx IyTezIIphmfnPDYirMTfjL+/Ukgn0XG9O9bWcnJB9BKw6vxm26LDneT6sAtoeHAH x2sJJpOTc1oo6deUikyVmgqCFrlHFsFVghRwTrjNpSn2oU3HwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmrGLDBTh0J6u4XMPVvYV53YAlLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTMwYmFlYmItYjUyOC0z ZDZkLTllNDgtMmZmOGU0MzEyNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFQPySNWw3SWrMFrxPWpB/6V4MJsrkpYf9j2PnsWm8AzJC1auI7+xfA7 ERhmX3A2EBm2hBa2/RU1DKByTrAcftPB9ao7CYeUyJOXi3Q94O5epLyDjZeisUWr 7fGRMjK90LrHfZV+6hyb+cltQwVDhK8xH+dE1/8VJ6A2o7fYy9nJPcRsqx0HApSK 4kaDJJG1P/D+fGNMLixzZuLaQdNgZH8XCUfPZij+JGMM9/0fp/eXHM+uM/DUbu7k 1NBs31dmp1/t87egdw7WD3xyd4K6pNF7XaSpnBtxtTMCPzH1Gl5c0rSvXY8JJ2Qm dj8xyqGLHGHJ/FAXAvxP471qO4vCgr0= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:12 2025 by rpki-client