$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa File: b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa (raw, json) Hash identifier: mFXHcbp4q5TEKWIoxtbOIj4kVj9xO5duS+0cb7QH0IU= Subject key identifier: 3E:9F:2D:AB:8E:96:DD:BD:C6:13:BE:62:E0:31:2B:15:81:BF:2B:1D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C516479F8BAB6C28F0D00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:51:64:79:f8:ba:b6:c2:8f:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3fbc1212-8493-469b-a53f-fcd52fbd3fec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:b7:92:d1:39:87:39:8e:be:d6:ea:2f:aa:de: 1d:04:94:6e:db:a1:d2:4a:9f:9a:4f:7b:7a:ce:c0: 22:d8:b1:23:94:7c:67:85:cd:59:96:99:ef:ca:da: 34:f2:6b:e3:5b:99:a8:05:73:21:80:41:1a:73:0e: 33:38:e5:19:2d:18:b3:46:e2:af:38:fa:cc:7d:41: c9:74:41:90:0f:5c:2c:3a:00:9d:1d:4b:58:41:c7: ad:ea:53:12:4f:dc:3e:da:1b:31:a0:2b:5a:0d:47: 31:2b:21:2f:2f:48:2f:e2:21:bd:62:85:6d:62:b3: 2f:65:54:5e:3e:58:53:6c:63:0f:83:cf:db:08:03: 18:f0:0e:af:ab:38:16:d9:9a:29:2e:5d:b2:33:1e: 12:a7:e3:6d:1c:fb:67:78:c3:05:93:0d:96:6f:f1: da:ec:ef:ee:f2:92:97:4f:a1:08:b0:a9:40:1d:bd: e5:e9:c8:7b:33:91:8f:dc:6b:62:35:c0:d4:c2:76: 28:03:ad:66:ee:cd:8b:bc:41:78:ae:50:ad:5c:58: da:82:4c:eb:67:51:b1:63:02:a5:03:1e:8a:03:17: 78:55:1d:57:3d:40:70:55:25:e3:60:86:63:38:19: f9:b8:cb:b2:61:80:39:94:76:62:a1:48:2c:d1:f4: e6:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:9F:2D:AB:8E:96:DD:BD:C6:13:BE:62:E0:31:2B:15:81:BF:2B:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:10:b4:b0:1e:5e:ea:1a:01:24:ba:e3:fa:59:d3:17:d8:54: 27:a7:17:bf:de:b7:3a:de:fd:c8:bd:bd:b1:29:a9:41:19:d2: 44:96:aa:a9:47:e2:b2:af:ae:44:3c:4d:e0:00:ec:e2:0d:93: 99:96:99:99:ba:c7:40:0a:26:b4:be:52:0f:70:4b:10:97:7d: 26:00:de:db:01:4c:c5:a5:38:b5:5a:16:e3:f1:f4:cb:d5:29: e6:5c:23:b0:ba:0c:0d:72:64:65:5c:ed:47:84:bc:87:86:50: 14:0b:d9:86:c4:e0:9b:4c:07:ad:d0:e3:bf:e6:31:8d:2f:0f: 0c:a4:c7:7a:fe:9d:0f:48:b0:cd:ec:38:2d:ab:ad:5f:35:69: db:33:c6:e1:46:53:39:6d:41:c8:60:0d:37:38:f6:a9:69:dc: 92:14:82:07:d4:6f:ed:22:b6:8d:4c:21:8b:e8:2f:87:8c:ae: 36:7d:d5:c7:80:df:78:1d:64:41:04:b1:77:7b:18:23:5e:e3: 8f:34:91:22:e7:f9:65:62:31:b5:46:11:e9:6c:86:81:71:5a: bc:92:a9:37:73:ae:2e:0f:44:4f:7e:da:c7:53:8e:68:1f:d3: f6:4b:85:0c:62:6b:ce:7d:a5:89:1d:ee:97:42:5a:ad:ef:4a: a7:a2:54:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFFkefi6tsKPDQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2ZiYzEyMTItODQ5My00NjliLWE1M2YtZmNkNTJmYmQzZmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLeS0TmHOY6+1uovqt4dBJRu26HSSp+aT3t6 zsAi2LEjlHxnhc1Zlpnvyto08mvjW5moBXMhgEEacw4zOOUZLRizRuKvOPrMfUHJ dEGQD1wsOgCdHUtYQcet6lMST9w+2hsxoCtaDUcxKyEvL0gv4iG9YoVtYrMvZVRe PlhTbGMPg8/bCAMY8A6vqzgW2ZopLl2yMx4Sp+NtHPtneMMFkw2Wb/Ha7O/u8pKX T6EIsKlAHb3l6ch7M5GP3GtiNcDUwnYoA61m7s2LvEF4rlCtXFjagkzrZ1GxYwKl Ax6KAxd4VR1XPUBwVSXjYIZjOBn5uMuyYYA5lHZioUgs0fTm4QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD6fLauOlt29xhO+YuAxKxWBvysdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc0OGNjNGMtYjc1Ni0z YTU4LWE1ZWYtMmEyMDViYTA0N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUQtLAeXuoaASS64/pZ0xfYVCenF7/etzre/ci9vbEpqUEZ0kSWqqlH 4rKvrkQ8TeAA7OINk5mWmZm6x0AKJrS+Ug9wSxCXfSYA3tsBTMWlOLVaFuPx9MvV KeZcI7C6DA1yZGVc7UeEvIeGUBQL2YbE4JtMB63Q47/mMY0vDwykx3r+nQ9IsM3s OC2rrV81adszxuFGUzltQchgDTc49qlp3JIUggfUb+0ito1MIYvoL4eMrjZ91ceA 33gdZEEEsXd7GCNe4480kSLn+WViMbVGEelshoFxWrySqTdzri4PRE9+2sdTjmgf 0/ZLhQxia859pYkd7pdCWq3vSqeiVJw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:59 2025 by rpki-client