$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b6a9d2f0-cd72-34a9-bdff-09e303e737be.roa File: b6a9d2f0-cd72-34a9-bdff-09e303e737be.roa (raw, json) Hash identifier: 4np0buHCX1p/Eo9I0tEd1nrSJwBhWirh7vxxyIIeTac= Subject key identifier: F8:A4:5E:F8:A3:FB:A1:E2:52:65:06:BE:22:65:7F:1F:81:A3:29:BF Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA54ED8407BBB021A8E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b6a9d2f0-cd72-34a9-bdff-09e303e737be.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a5:4e:d8:40:7b:bb:02:1a:8e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=31f4592c-e99a-4082-a16d-90a790149876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:de:72:45:a8:7a:0d:10:cd:ad:94:fd:fb:4e: ba:01:ac:b4:6a:bf:95:bc:c4:f1:6c:ce:e6:8e:d4: cc:39:fa:6a:54:65:d9:9f:c2:ca:0f:e8:e1:19:ae: 0a:d9:fd:b3:5b:8a:cf:f8:e3:2d:0c:2a:a2:62:68: 58:19:ba:2e:ef:8d:40:d1:1c:72:d5:38:4b:b4:a5: 30:48:66:4b:eb:be:15:74:d3:11:65:dc:de:f2:b2: 13:a1:b6:46:86:d2:e1:31:3f:12:7c:d9:82:cf:f8: 5b:06:54:cc:6b:01:6e:be:83:bc:ea:58:13:25:9a: 69:69:c7:1e:dc:dd:cb:bd:23:d9:c3:36:7f:ed:fc: e0:48:c7:61:2c:7e:11:05:87:8f:11:4a:e3:ea:78: 67:36:b8:b3:96:6e:36:bf:7e:4d:94:25:df:80:ae: dc:39:df:42:47:33:5c:89:0b:7e:c6:59:4d:6c:2c: c7:a8:7e:38:0a:cf:d6:3e:2b:92:30:da:2d:80:96: b1:d6:b8:c6:7f:30:a1:c0:24:dd:90:c4:50:a4:6d: 1c:f7:0b:5b:4d:e6:5c:09:27:8b:6c:ab:ed:bd:22: 03:e7:5a:67:26:69:7a:70:e2:20:b6:98:38:41:57: aa:a9:9d:27:fc:9b:f3:5c:ce:a0:ab:12:c9:88:f3: 73:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:A4:5E:F8:A3:FB:A1:E2:52:65:06:BE:22:65:7F:1F:81:A3:29:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b6a9d2f0-cd72-34a9-bdff-09e303e737be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:6a:e3:1e:75:9d:eb:37:ad:d1:05:cd:1c:0e:ac:a9:df:52: f9:cf:7c:3c:27:7d:7b:f6:92:89:3d:a7:a4:bd:43:b8:0b:94: 67:b1:7a:11:40:20:8b:22:32:39:10:18:00:2e:74:ee:e0:cf: 47:85:21:71:1b:52:56:6c:2c:89:78:2f:02:26:3d:2f:b9:b2: 8a:ce:79:f7:81:3f:b8:c4:e3:71:bb:1f:8d:46:06:41:0a:42: f7:ea:5c:f5:bc:35:66:75:d1:f4:08:d6:a7:dc:db:8b:b0:20: 80:cd:11:36:88:0a:f9:08:48:df:68:94:74:06:b6:86:5b:b3: 44:fb:70:f4:7a:18:13:68:b9:7f:fd:e2:cf:69:8c:42:b9:e9: b2:d9:19:0b:00:78:8e:04:10:c3:4f:e4:90:1c:4e:71:b9:c7: c6:6a:af:56:72:4d:ad:27:13:a4:0b:40:e2:89:76:d3:b7:8e: 30:d0:06:dc:5b:bd:bf:b8:63:eb:55:b8:65:bb:16:f9:e7:f0: 2b:cb:84:c3:85:c5:53:1d:e8:42:4d:ee:b2:e9:9a:4a:1d:3f: 48:38:cb:e7:79:ff:67:f9:5c:7d:6a:36:f6:1d:5c:3b:6d:11: 53:c9:2a:23:52:b9:db:1b:97:db:b9:bd:6d:26:97:4a:1a:6b: 53:e4:52:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKVO2EB7uwIajgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MzFmNDU5MmMtZTk5YS00MDgyLWExNmQtOTBhNzkwMTQ5ODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyd5yRah6DRDNrZT9+066Aay0ar+VvMTxbM7m jtTMOfpqVGXZn8LKD+jhGa4K2f2zW4rP+OMtDCqiYmhYGbou741A0Rxy1ThLtKUw SGZL674VdNMRZdze8rITobZGhtLhMT8SfNmCz/hbBlTMawFuvoO86lgTJZppacce 3N3LvSPZwzZ/7fzgSMdhLH4RBYePEUrj6nhnNrizlm42v35NlCXfgK7cOd9CRzNc iQt+xllNbCzHqH44Cs/WPiuSMNotgJax1rjGfzChwCTdkMRQpG0c9wtbTeZcCSeL bKvtvSID51pnJml6cOIgtpg4QVeqqZ0n/JvzXM6gqxLJiPNz5QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPikXvij+6HiUmUGviJlfx+Boym/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjZhOWQyZjAtY2Q3Mi0z NGE5LWJkZmYtMDllMzAzZTczN2JlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABZq4x51nes3rdEFzRwOrKnfUvnPfDwnfXv2kok9p6S9Q7gLlGexehFA IIsiMjkQGAAudO7gz0eFIXEbUlZsLIl4LwImPS+5sorOefeBP7jE43G7H41GBkEK QvfqXPW8NWZ10fQI1qfc24uwIIDNETaICvkISN9olHQGtoZbs0T7cPR6GBNouX/9 4s9pjEK56bLZGQsAeI4EEMNP5JAcTnG5x8Zqr1ZyTa0nE6QLQOKJdtO3jjDQBtxb vb+4Y+tVuGW7Fvnn8CvLhMOFxVMd6EJN7rLpmkodP0g4y+d5/2f5XH1qNvYdXDtt EVPJKiNSudsbl9u5vW0ml0oaa1PkUsE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:59 2025 by rpki-client