$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ba9295bb-02df-3efc-8b4a-b86039a6f8ce.roa File: ba9295bb-02df-3efc-8b4a-b86039a6f8ce.roa (raw, json) Hash identifier: EKdyJa9yN6rIRm7JSgBCUqwbVTqIBg4AJkSaXxY2Z30= Subject key identifier: 31:15:51:1B:A3:FE:2F:6B:B1:43:72:10:92:7F:A8:E1:90:EC:15:68 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4F03B5B3D1B3D0461080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ba9295bb-02df-3efc-8b4a-b86039a6f8ce.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.55.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4f:03:b5:b3:d1:b3:d0:46:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=854b444a-6950-4c3b-ad34-3608a5af9d65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:5a:1c:b5:8c:18:fa:eb:8e:d5:58:35:62:62: 6c:e1:b8:2a:ae:67:e5:3e:26:14:8f:a2:2b:33:c3: c1:af:c5:4a:ed:0e:ce:33:86:21:51:b0:30:51:dd: a6:85:92:41:96:92:b0:4b:0f:3d:6a:7f:e4:ca:8c: 43:f3:c2:27:9e:5a:e6:58:e6:8c:3f:4d:e2:d3:6a: c8:8b:33:aa:b0:dc:ad:cb:45:d5:ce:48:17:10:7f: fa:ee:59:c0:b2:ff:8e:66:bd:3a:ef:59:50:4a:32: ff:1e:b0:b6:a2:3b:2d:dc:e4:22:f1:26:c3:e3:7b: 8f:85:90:38:5c:35:7b:8f:7f:ac:d6:05:b1:34:a8: c8:4e:8d:df:b1:e6:5b:2b:e7:6a:74:7b:04:5e:57: cc:77:79:d2:3b:10:e1:d8:0d:db:2d:3b:9f:91:74: 1a:d6:0a:37:24:fb:9d:85:53:0f:95:98:2b:a0:31: b2:ed:b3:0d:e5:99:8f:23:33:88:5f:ab:48:d3:0b: 5f:fe:55:d9:6c:45:e5:1f:d4:3f:42:1a:91:21:63: 6a:33:16:5e:3e:f3:37:08:ae:7b:fd:c1:bc:5f:13: f2:82:ff:6d:3d:93:87:0c:6a:03:09:19:59:ce:fa: 40:c2:a9:7d:d7:ae:ea:81:4e:13:a6:b7:b8:34:b2: 55:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:15:51:1B:A3:FE:2F:6B:B1:43:72:10:92:7F:A8:E1:90:EC:15:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ba9295bb-02df-3efc-8b4a-b86039a6f8ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.55.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:0a:34:e5:01:d4:6d:74:01:0a:4a:7c:6f:48:09:17:02:63: ef:10:57:3c:57:a1:9d:d2:92:4f:37:22:af:66:e1:83:8a:ee: 16:e2:fe:c5:d6:5e:6f:29:bb:38:a6:cc:05:85:e6:b9:21:8a: 3c:d7:94:2c:49:26:df:09:eb:32:99:08:dd:4a:25:1d:7c:14: 1d:20:7b:98:06:b9:9f:cd:57:72:68:34:ed:34:8d:24:ce:86: 3e:13:9f:b2:df:31:3b:dd:a4:7f:f9:32:3b:eb:1f:00:7f:49: 42:79:18:ad:5d:37:d0:8c:75:2f:a2:a4:d6:d0:52:8b:55:7a: 8c:d2:82:71:2d:0b:ff:b5:95:bd:c6:b8:58:f6:42:be:58:6b: 3f:4c:72:19:15:1c:3f:9a:82:8e:d9:7e:d2:24:7b:c7:87:eb: a8:e6:24:73:ce:b5:6d:2c:1f:a7:be:8b:10:2b:9c:ef:0d:b8: ce:18:d3:96:8c:82:c2:4e:2d:f9:de:52:fa:a9:78:09:85:9c: 7e:0d:d1:03:dd:3d:c2:4e:fc:5c:4d:c5:3d:89:fb:98:86:e1: df:d2:2c:bd:af:89:7c:e7:07:31:d8:24:75:39:06:e9:fe:21: f0:7f:d9:b7:f9:37:9d:68:78:45:86:03:a3:ae:02:fe:6d:27: d1:27:28:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTE8DtbPRs9BGEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ODU0YjQ0NGEtNjk1MC00YzNiLWFkMzQtMzYwOGE1YWY5ZDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVoctYwY+uuO1Vg1YmJs4bgqrmflPiYUj6Ir M8PBr8VK7Q7OM4YhUbAwUd2mhZJBlpKwSw89an/kyoxD88InnlrmWOaMP03i02rI izOqsNyty0XVzkgXEH/67lnAsv+OZr0671lQSjL/HrC2ojst3OQi8SbD43uPhZA4 XDV7j3+s1gWxNKjITo3fseZbK+dqdHsEXlfMd3nSOxDh2A3bLTufkXQa1go3JPud hVMPlZgroDGy7bMN5ZmPIzOIX6tI0wtf/lXZbEXlH9Q/QhqRIWNqMxZePvM3CK57 /cG8XxPygv9tPZOHDGoDCRlZzvpAwql9167qgU4Tpre4NLJVfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDEVURuj/i9rsUNyEJJ/qOGQ7BVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmE5Mjk1YmItMDJkZi0z ZWZjLThiNGEtYjg2MDM5YTZmOGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDfwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEQKNOUB1G10AQpKfG9ICRcCY+8QVzxXoZ3Skk83Iq9m4YOK7hbi/sXW Xm8puzimzAWF5rkhijzXlCxJJt8J6zKZCN1KJR18FB0ge5gGuZ/NV3JoNO00jSTO hj4Tn7LfMTvdpH/5MjvrHwB/SUJ5GK1dN9CMdS+ipNbQUotVeozSgnEtC/+1lb3G uFj2Qr5Yaz9MchkVHD+ago7ZftIke8eH66jmJHPOtW0sH6e+ixArnO8NuM4Y05aM gsJOLfneUvqpeAmFnH4N0QPdPcJO/FxNxT2J+5iG4d/SLL2viXznBzHYJHU5Bun+ IfB/2bf5N51oeEWGA6OuAv5tJ9EnKAw= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:46 2025 by rpki-client