$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa File: a51b75c5-1781-3044-acee-beb447fdab53.roa (raw, json) Hash identifier: 3uPv+5msg5XdrOus1Q1yAzQOAAl2efQ0PRF41Egtcsw= Subject key identifier: AD:CB:D8:40:F6:53:EF:A2:76:E7:67:2F:37:FD:88:57:7B:7D:C5:65 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C49ABFA0DFB8313E7D280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:49:ab:fa:0d:fb:83:13:e7:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=42a02d3a-7b81-4846-9552-d52373ebcc54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:59:34:0d:75:4a:e7:d0:2e:35:c8:f5:41:25: 85:98:df:41:b8:aa:26:ac:16:94:e0:6b:55:0d:30: 25:76:fd:45:73:67:17:28:61:ad:2f:52:79:af:b3: ec:3b:da:87:8d:69:1e:40:21:2d:50:91:2a:c5:b8: 22:9e:dc:ca:d4:13:63:5b:8d:78:56:ff:5b:dc:9a: cf:85:e9:21:34:5c:ce:34:2d:52:3d:35:1b:9e:97: 7a:5a:0b:5d:53:4c:d2:5e:e9:72:c2:62:20:38:65: d3:2c:d6:2b:17:e6:c4:3f:6e:74:27:27:b7:eb:a4: a4:c7:c2:8e:c2:6b:ac:cc:63:3f:f6:1a:1f:a8:6f: 9c:11:65:76:20:ee:10:9f:1c:d7:34:66:d1:e3:bd: b4:96:6a:0a:22:c2:bc:d3:db:1c:a1:1b:b5:21:1e: 55:24:e0:7b:97:0b:e7:3e:f6:fc:3a:2a:3c:6d:e4: af:ad:c5:bc:07:99:3c:74:93:4f:f0:97:db:47:0b: 7a:c0:c1:77:b7:68:f2:12:98:d7:db:9b:5c:1a:80: 06:3e:ff:f4:bc:ae:f5:de:55:be:b6:18:b5:16:ed: 56:d7:24:51:03:ee:5f:1f:57:ed:b1:b0:82:fb:f0: 8f:40:ec:71:1b:6d:2d:e7:59:16:80:c6:71:4c:01: 7c:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:CB:D8:40:F6:53:EF:A2:76:E7:67:2F:37:FD:88:57:7B:7D:C5:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a51b75c5-1781-3044-acee-beb447fdab53.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:7b:c6:35:0f:fb:39:a0:e1:85:10:9e:84:27:16:c0:44:f1: f0:83:9c:0e:67:a7:5a:55:57:17:83:76:d9:5a:4b:62:43:dd: 65:cd:4e:9b:ba:f6:8d:d3:2e:67:25:79:b5:35:9c:82:11:5a: 99:5f:42:40:5c:ec:47:11:d2:9c:c1:7a:bd:5f:28:33:9b:c3: 26:66:45:65:ee:14:b2:a7:19:20:14:54:26:97:fe:70:be:e3: 4b:2d:c2:d9:1e:6a:4a:36:93:79:f2:d1:42:94:44:08:8b:fd: 4d:8c:b7:f2:b3:89:37:42:06:50:08:33:e3:82:50:33:98:f9: 2b:14:6c:17:63:a4:a4:3d:85:06:15:5a:18:45:6e:4d:b6:18: 2b:93:3b:94:78:82:b2:64:c6:f7:4c:21:20:ac:f8:18:ca:be: fa:a9:aa:66:f5:46:05:28:28:c8:25:6f:43:45:d9:20:6f:eb: 83:ec:79:f5:eb:5c:f9:14:e7:83:84:3f:f3:84:40:fd:83:a1: 7d:15:32:2e:dd:21:59:c2:31:98:95:df:6b:71:2e:cc:93:7f: f0:39:f1:7f:d9:6b:ac:76:09:e5:2d:65:8d:d3:88:3c:db:07: d6:3b:6e:b3:8f:43:96:02:0d:e0:d2:c7:e8:1e:7f:00:49:fe: 5d:b7:79:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEmr+g37gxPn0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NDJhMDJkM2EtN2I4MS00ODQ2LTk1NTItZDUyMzczZWJjYzU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVk0DXVK59AuNcj1QSWFmN9BuKomrBaU4GtV DTAldv1Fc2cXKGGtL1J5r7PsO9qHjWkeQCEtUJEqxbgintzK1BNjW414Vv9b3JrP hekhNFzONC1SPTUbnpd6WgtdU0zSXulywmIgOGXTLNYrF+bEP250Jye366Skx8KO wmuszGM/9hofqG+cEWV2IO4QnxzXNGbR4720lmoKIsK809scoRu1IR5VJOB7lwvn Pvb8Oio8beSvrcW8B5k8dJNP8JfbRwt6wMF3t2jyEpjX25tcGoAGPv/0vK713lW+ thi1Fu1W1yRRA+5fH1ftsbCC+/CPQOxxG20t51kWgMZxTAF8vwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK3L2ED2U++idudnLzf9iFd7fcVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTUxYjc1YzUtMTc4MS0z MDQ0LWFjZWUtYmViNDQ3ZmRhYjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACN7xjUP+zmg4YUQnoQnFsBE8fCDnA5np1pVVxeDdtlaS2JD3WXNTpu6 9o3TLmclebU1nIIRWplfQkBc7EcR0pzBer1fKDObwyZmRWXuFLKnGSAUVCaX/nC+ 40stwtkeako2k3ny0UKURAiL/U2Mt/KziTdCBlAIM+OCUDOY+SsUbBdjpKQ9hQYV WhhFbk22GCuTO5R4grJkxvdMISCs+BjKvvqpqmb1RgUoKMglb0NF2SBv64PsefXr XPkU54OEP/OEQP2DoX0VMi7dIVnCMZiV32txLsyTf/A58X/Za6x2CeUtZY3TiDzb B9Y7brOPQ5YCDeDSx+gefwBJ/l23ecU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:00 2025 by rpki-client