$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa File: a6bed749-eb09-31b9-8a54-181cd3e43899.roa (raw, json) Hash identifier: NqJNlPsVHUno56kZj12kzLjAqEdHCZgW7DERkbeaCkY= Subject key identifier: F2:55:D4:AA:21:9A:E1:08:F6:56:BF:E5:AC:42:9C:26:14:2B:33:D9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C51DF88CDEC18DB591400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.60.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:51:df:88:cd:ec:18:db:59:14:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=bb0fe8b7-78dc-41c0-9747-b7b82deea429 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:56:4d:8f:24:fd:77:29:e7:75:3f:e4:0e:6b: bc:6d:49:e6:59:0d:94:58:98:dc:60:77:65:cb:98: ab:b2:0c:9d:79:35:61:50:85:0d:f7:04:50:4b:c4: cf:40:fb:8a:91:42:93:e9:32:88:2b:6f:86:da:93: 22:e9:07:85:7c:c0:32:bc:32:a6:4e:1e:d8:82:97: 3a:6b:06:24:ba:d3:50:ac:8c:76:8a:be:0c:0d:26: b2:b0:60:94:05:78:3e:89:d8:20:cc:ee:11:e6:0b: 55:d0:2a:f3:8f:6a:48:71:86:8b:29:1f:36:83:a9: a6:fd:10:e8:77:2d:41:b7:68:8a:fe:62:a1:9f:97: cb:48:28:a8:14:b7:f9:4b:22:c4:b8:4d:35:f6:5b: 46:a0:3b:27:4c:1b:aa:57:74:ba:38:a0:5f:78:d4: 65:6d:68:68:5c:fa:82:b6:70:84:16:2c:e5:c4:75: a2:f0:cf:12:15:b4:d0:14:50:fb:1e:ca:dd:46:8f: 3e:64:bb:c3:da:7b:a1:71:ae:7d:76:06:31:4b:b8: 3f:d8:ca:03:a3:85:97:52:84:d6:c4:64:d7:40:68: dd:86:fe:a6:59:63:30:18:75:23:f5:29:d9:a6:67: 8a:e0:6a:c3:24:5f:20:25:bc:5f:14:e6:58:09:79: f3:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:55:D4:AA:21:9A:E1:08:F6:56:BF:E5:AC:42:9C:26:14:2B:33:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a6bed749-eb09-31b9-8a54-181cd3e43899.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:9e:1e:0a:dd:fd:a0:7d:8f:7d:84:ec:e1:1e:a0:2a:da:80: a6:f5:82:99:d4:37:20:c2:7f:f0:19:10:be:92:00:7e:86:ae: 0f:1f:cf:c4:89:ce:ca:55:12:67:ad:e4:e4:a0:e4:b7:e0:d4: 2c:f3:d1:1b:5c:f1:12:42:72:a6:40:a0:b9:65:8a:df:84:9f: 22:cc:70:9d:d1:76:8e:5d:8d:9c:98:9d:de:da:6e:17:b9:7f: 66:f9:9c:f4:c7:d9:c3:b9:e5:5c:1d:9d:dd:aa:c3:71:21:fe: 51:db:50:a4:36:4b:5e:a4:b3:28:8d:8f:1e:f4:f6:0e:09:e7: c5:1d:e8:54:16:77:e8:cc:1c:d5:67:32:7b:d1:b4:bd:37:b7: 60:a3:5b:f3:95:1a:60:ec:b3:64:df:b8:bb:cb:5c:9d:ff:36: 6b:49:9c:c4:2b:8c:9d:2d:f6:52:80:1f:53:31:1e:f1:4b:ed: f7:9c:0a:95:f0:8f:0e:7d:b5:32:0e:69:5f:94:b5:a6:80:e8: 55:3a:21:4f:6f:cd:c0:b7:76:93:8e:01:2e:00:2e:04:67:bb: c1:d6:b1:d0:38:74:86:f1:2e:c6:5b:55:43:53:c2:54:36:6d: 36:4f:13:42:88:2b:c8:00:17:d0:56:a4:d7:31:bd:41:38:af: f1:b3:9c:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFHfiM3sGNtZFAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmIwZmU4YjctNzhkYy00MWMwLTk3NDctYjdiODJkZWVhNDI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlVZNjyT9dynndT/kDmu8bUnmWQ2UWJjcYHdl y5irsgydeTVhUIUN9wRQS8TPQPuKkUKT6TKIK2+G2pMi6QeFfMAyvDKmTh7Ygpc6 awYkutNQrIx2ir4MDSaysGCUBXg+idggzO4R5gtV0Crzj2pIcYaLKR82g6mm/RDo dy1Bt2iK/mKhn5fLSCioFLf5SyLEuE019ltGoDsnTBuqV3S6OKBfeNRlbWhoXPqC tnCEFizlxHWi8M8SFbTQFFD7HsrdRo8+ZLvD2nuhca59dgYxS7g/2MoDo4WXUoTW xGTXQGjdhv6mWWMwGHUj9SnZpmeK4GrDJF8gJbxfFOZYCXnz/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJV1KohmuEI9la/5axCnCYUKzPZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTZiZWQ3NDktZWIwOS0z MWI5LThhNTQtMTgxY2QzZTQzODk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDyAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAqeHgrd/aB9j32E7OEeoCragKb1gpnUNyDCf/AZEL6SAH6Grg8fz8SJ zspVEmet5OSg5Lfg1Czz0Rtc8RJCcqZAoLllit+EnyLMcJ3Rdo5djZyYnd7abhe5 f2b5nPTH2cO55Vwdnd2qw3Eh/lHbUKQ2S16ksyiNjx709g4J58Ud6FQWd+jMHNVn MnvRtL03t2CjW/OVGmDss2TfuLvLXJ3/NmtJnMQrjJ0t9lKAH1MxHvFL7fecCpXw jw59tTIOaV+UtaaA6FU6IU9vzcC3dpOOAS4ALgRnu8HWsdA4dIbxLsZbVUNTwlQ2 bTZPE0KIK8gAF9BWpNcxvUE4r/GznLs= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:13 2025 by rpki-client