$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa File: b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa (raw, json) Hash identifier: nPTUL+Sxw0lRq1l2zvvseg71INwvdP8p3fdoYw3xric= Subject key identifier: B1:BF:83:27:7C:70:32:78:EB:36:C9:AE:7E:52:B1:86:47:38:28:18 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CADEA81255F5F261F6600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:ad:ea:81:25:5f:5f:26:1f:66:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a87323c6-eabc-42c1-818a-8441c2ff5dbd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:01:34:7b:af:50:fe:b3:78:f0:63:88:43:74: 7d:1c:8c:d0:90:53:3c:a7:ad:74:9b:cf:ee:57:a7: 6b:f8:47:89:05:66:52:dc:e3:a8:99:a6:67:f8:b7: 8d:b6:a9:31:9b:80:4f:4a:f4:87:6b:b4:21:71:ef: bf:64:ec:ad:5f:69:57:ca:a3:47:e7:63:70:74:f2: 30:15:f2:8e:f3:69:62:48:ef:ab:db:42:a7:22:44: 72:a0:1b:32:e5:b4:98:11:24:ea:99:30:f8:84:74: a8:99:88:9e:a1:e4:86:3b:a4:e3:4c:e8:82:fd:38: dd:f1:cd:dd:54:ec:0a:8f:1a:03:1c:28:19:c9:c5: 68:66:9f:0b:9e:3f:de:36:63:03:9b:ea:06:90:84: 1a:2b:98:80:8f:81:5f:3f:a2:74:fa:52:40:56:c4: f6:3e:bd:bc:10:43:05:38:0b:53:f9:94:fc:48:08: c4:04:bf:35:3d:81:22:7e:46:1a:23:bc:e7:99:23: eb:0a:bd:ad:97:fa:74:ab:2f:d7:2b:be:2e:15:04: 3c:fc:71:6d:84:41:5b:5f:65:d9:d7:38:26:e5:f7: 68:5d:5a:6a:4e:19:1c:ea:2f:9e:11:7f:b8:18:82: d5:01:3e:e8:2d:a8:39:5f:ac:ce:87:d3:00:55:6c: 68:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:BF:83:27:7C:70:32:78:EB:36:C9:AE:7E:52:B1:86:47:38:28:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:6f:2b:65:90:62:b5:15:70:87:6c:fa:27:68:e7:aa:65:6e: e0:9f:70:57:e0:5c:94:d1:a0:98:02:16:52:01:8a:c2:a6:4e: 7a:a0:c5:b3:2c:56:26:df:b4:16:4c:79:cf:66:46:f3:8b:0d: c2:53:a3:fd:84:a8:8a:31:78:5f:72:3b:28:21:2a:ae:cb:44: d7:81:fc:2c:e1:21:d1:cb:19:f6:95:f1:d2:3c:08:99:bf:97: ae:cf:7d:d8:58:a0:f7:0e:70:c9:71:35:1d:b1:0e:60:34:97: 82:3b:db:05:76:b9:dd:e6:28:62:30:7b:20:77:cf:92:e7:e7: b1:f1:ed:61:47:a9:65:70:3c:ea:95:5a:9c:20:57:f8:84:86: 78:f7:2f:77:45:17:50:c3:09:39:04:22:72:e8:85:ae:3d:6e: f5:f2:6d:71:0f:cb:d9:6b:dd:d2:ca:b9:98:b7:37:43:f7:4d: fc:63:b8:2f:3b:7e:ed:15:b8:19:db:34:e8:c8:9e:1a:8a:26: 52:75:41:32:be:f8:0c:87:f8:b0:23:e6:9c:dc:64:cb:98:4c: 65:db:1e:dd:52:3c:4b:87:e8:9e:b6:f1:25:b4:df:35:d5:5b: e1:6c:4b:43:3a:e3:d2:56:d6:ac:65:1b:91:22:e7:b3:7d:2a: 4e:99:6f:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTK3qgSVfXyYfZgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTg3MzIzYzYtZWFiYy00MmMxLTgxOGEtODQ0MWMyZmY1ZGJkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoAE0e69Q/rN48GOIQ3R9HIzQkFM8p610m8/u V6dr+EeJBWZS3OOomaZn+LeNtqkxm4BPSvSHa7Qhce+/ZOytX2lXyqNH52NwdPIw FfKO82liSO+r20KnIkRyoBsy5bSYESTqmTD4hHSomYieoeSGO6TjTOiC/Tjd8c3d VOwKjxoDHCgZycVoZp8Lnj/eNmMDm+oGkIQaK5iAj4FfP6J0+lJAVsT2Pr28EEMF OAtT+ZT8SAjEBL81PYEifkYaI7znmSPrCr2tl/p0qy/XK74uFQQ8/HFthEFbX2XZ 1zgm5fdoXVpqThkc6i+eEX+4GILVAT7oLag5X6zOh9MAVWxozQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLG/gyd8cDJ46zbJrn5SsYZHOCgYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc2NzQ1N2MtZmEzYy0z ZGI3LTliZWItMWU3YmQzYzYyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdvK2WQYrUVcIds+ido56plbuCfcFfgXJTRoJgCFlIBisKmTnqgxbMs VibftBZMec9mRvOLDcJTo/2EqIoxeF9yOyghKq7LRNeB/CzhIdHLGfaV8dI8CJm/ l67PfdhYoPcOcMlxNR2xDmA0l4I72wV2ud3mKGIweyB3z5Ln57Hx7WFHqWVwPOqV WpwgV/iEhnj3L3dFF1DDCTkEInLoha49bvXybXEPy9lr3dLKuZi3N0P3TfxjuC87 fu0VuBnbNOjInhqKJlJ1QTK++AyH+LAj5pzcZMuYTGXbHt1SPEuH6J628SW03zXV W+FsS0M649JW1qxlG5Ei57N9Kk6Zb2E= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:11 2025 by rpki-client