$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa File: 9cd416fb-8786-3914-9147-fb72fa08441a.roa (raw, json) Hash identifier: 0BPyFlLH78ZYSRHYgcMQwS9lVn0ZcJGCHjwzHN95sgY= Subject key identifier: 09:7C:EC:95:02:B7:02:3B:44:21:C2:80:CD:46:D5:26:FE:5B:0A:81 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C6735BA10D1A0BBFDBD40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:67:35:ba:10:d1:a0:bb:fd:bd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2731d1e5-411a-438e-844a-84bde6547963 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fa:a2:ce:c3:f3:71:ac:60:de:70:f1:2b:6b: 50:d0:7c:69:5b:f0:8e:e5:ee:6b:82:34:ce:da:b0: 69:cd:fa:9f:9f:1c:5f:c9:20:a9:52:c8:dc:b9:b8: 58:5e:bc:b4:63:09:b7:22:a0:f6:58:66:18:01:f6: 6d:6d:8c:4e:f6:9f:31:3c:d8:7a:c4:a5:3f:2b:ca: 77:4e:f8:a3:89:ac:5f:5d:29:31:80:20:74:e1:be: 12:49:9e:9c:ce:34:53:6f:93:7b:0a:34:e1:78:b3: 07:f9:9a:7d:d7:80:17:8d:a8:9f:c3:a1:25:ed:cb: ce:f1:6a:cd:2c:be:57:89:dd:83:af:5c:a7:49:02: 0b:08:97:34:89:82:09:5e:78:2e:6b:ad:ef:27:ea: c9:6a:3e:ab:82:e2:d1:90:a0:40:f8:ba:71:44:88: 6c:cb:a5:af:e7:86:d2:95:9a:03:03:4f:36:e5:9f: 93:ad:b4:43:a5:16:67:d4:5f:88:4d:1a:4a:f4:2d: 41:ee:fe:85:e5:c3:e0:52:23:af:09:c4:72:2d:23: 9d:c6:03:21:95:58:5a:e4:f0:8b:d4:5c:cb:95:ab: 42:34:e4:01:fc:fd:60:d0:73:d2:c2:3d:66:53:03: 1d:ec:b0:d9:e8:bd:30:d0:bf:23:4c:e8:c0:64:62: 74:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:7C:EC:95:02:B7:02:3B:44:21:C2:80:CD:46:D5:26:FE:5B:0A:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9cd416fb-8786-3914-9147-fb72fa08441a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:59:a8:41:0c:2f:8d:f3:39:d7:1c:02:54:d2:11:87:1c:75: 54:90:ee:86:3b:7e:89:dc:0f:98:c8:da:83:8d:a8:fa:f5:09: 32:bb:80:82:65:be:66:3b:89:10:a0:04:0a:f7:a6:be:28:9a: a4:92:31:35:e5:0a:7e:73:48:df:67:a3:50:20:4a:9c:18:53: 4b:3b:d2:13:be:1a:80:8e:41:ef:0a:b2:53:ea:cb:85:32:9e: 12:10:38:95:5b:f1:fc:d8:de:75:e5:f4:bf:96:a7:76:08:95: 5d:bd:d3:60:fa:21:16:79:fe:a5:a5:5a:19:a1:2b:35:aa:a5: 04:d9:33:c1:04:5a:ce:9f:e8:27:0f:52:c4:77:de:b9:fb:50: 2e:2f:71:ef:9e:c9:15:53:51:95:a6:10:75:d2:a1:81:ce:d3: 20:0f:d4:e1:e2:b8:87:2b:9c:6d:ba:08:c1:c7:67:f3:dc:fa: 47:a5:02:da:5f:c8:1c:00:a3:d9:27:4a:04:4a:8a:db:18:72: 21:40:fd:c1:a3:59:5a:48:16:85:bb:cb:28:a6:1b:fb:f8:97: 64:47:c8:ed:38:01:44:42:82:20:f6:55:64:03:04:45:f1:cd: 30:f8:9d:9b:ed:95:ca:c7:5a:5a:3c:61:1f:0c:fe:19:18:bc: aa:2e:e3:e6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGc1uhDRoLv9vUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjczMWQxZTUtNDExYS00MzhlLTg0NGEtODRiZGU2NTQ3OTYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPqizsPzcaxg3nDxK2tQ0HxpW/CO5e5rgjTO 2rBpzfqfnxxfySCpUsjcubhYXry0Ywm3IqD2WGYYAfZtbYxO9p8xPNh6xKU/K8p3 TvijiaxfXSkxgCB04b4SSZ6czjRTb5N7CjTheLMH+Zp914AXjaifw6El7cvO8WrN LL5Xid2Dr1ynSQILCJc0iYIJXngua63vJ+rJaj6rguLRkKBA+LpxRIhsy6Wv54bS lZoDA0825Z+TrbRDpRZn1F+ITRpK9C1B7v6F5cPgUiOvCcRyLSOdxgMhlVha5PCL 1FzLlatCNOQB/P1g0HPSwj1mUwMd7LDZ6L0w0L8jTOjAZGJ0XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAl87JUCtwI7RCHCgM1G1Sb+WwqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWNkNDE2ZmItODc4Ni0z OTE0LTkxNDctZmI3MmZhMDg0NDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADlZqEEML43zOdccAlTSEYccdVSQ7oY7foncD5jI2oONqPr1CTK7gIJl vmY7iRCgBAr3pr4omqSSMTXlCn5zSN9no1AgSpwYU0s70hO+GoCOQe8KslPqy4Uy nhIQOJVb8fzY3nXl9L+Wp3YIlV2902D6IRZ5/qWlWhmhKzWqpQTZM8EEWs6f6CcP UsR33rn7UC4vce+eyRVTUZWmEHXSoYHO0yAP1OHiuIcrnG26CMHHZ/Pc+kelAtpf yBwAo9knSgRKitsYciFA/cGjWVpIFoW7yyimG/v4l2RHyO04AURCgiD2VWQDBEXx zTD4nZvtlcrHWlo8YR8M/hkYvKou4+Y= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:02 2025 by rpki-client