$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa File: bbf034e3-220c-355c-83ad-7b03291b912c.roa (raw, json) Hash identifier: suZGUsMpaaZ2DRbq0u9TaCyrxGyISrIwzcAzCnt3GLs= Subject key identifier: AB:0C:13:1D:8D:60:94:A1:A7:C9:A7:36:A1:46:BF:21:EB:DA:D2:8A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C658BAAAB948E186BFD80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.36.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:65:8b:aa:ab:94:8e:18:6b:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=976a9c5a-cd76-426a-860f-bcceeebf303d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:8e:b5:5a:27:78:35:84:16:51:8f:11:7f:10: 78:d2:98:97:57:78:54:a0:e1:9a:54:4b:69:30:2b: f5:82:b6:46:db:c5:ba:10:42:ba:c2:4c:a0:54:fd: 0b:10:f3:73:21:fa:5f:1c:bd:7c:d4:9c:2e:d5:58: 12:c9:b4:cb:cf:e3:48:b8:32:3e:72:36:a8:dc:27: 1d:10:20:ee:e6:65:05:31:9e:8f:f7:87:0f:2c:4f: bb:6f:43:85:85:71:5f:39:14:27:b5:cb:69:36:bc: 55:82:81:08:ad:c2:76:68:00:cf:85:dd:79:cc:b9: 8e:aa:76:ef:29:27:a0:0e:19:84:c4:e3:7f:59:b5: fa:a6:22:a3:db:bf:65:40:85:1a:a9:13:f2:1e:7d: 2a:24:07:43:e5:cd:54:be:97:09:55:6c:63:45:2c: 2a:a9:0f:a1:d2:b2:88:cf:9f:e1:14:e4:08:fc:42: c7:f2:fc:6e:a5:bd:3a:37:4f:67:b2:a0:46:e4:68: 05:a1:60:50:a8:3e:9d:15:9c:29:cf:9f:73:eb:ea: ca:19:11:44:e7:0d:0d:24:11:cf:76:5d:c0:ba:5e: 25:c7:c4:ab:70:59:ad:45:2f:64:34:89:07:63:a8: 89:85:67:e6:c8:69:b1:3c:f0:b6:2c:a5:a1:43:38: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0C:13:1D:8D:60:94:A1:A7:C9:A7:36:A1:46:BF:21:EB:DA:D2:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:47:e3:d5:b9:f5:d4:36:4d:14:8c:ea:bf:73:52:45:1b:95: a1:bc:12:a6:a5:a4:35:25:78:ba:ae:db:db:24:05:17:88:0a: 34:c2:f1:1a:ca:3f:ec:3f:23:ff:bf:61:fa:99:e1:68:d2:db: 55:f0:63:4f:24:28:8a:ff:e4:15:73:9d:88:de:c7:10:29:20: 1c:de:e8:c9:87:8a:a3:d2:3d:f3:4a:ca:92:64:ed:0e:e6:f5: cf:ca:be:39:27:99:eb:78:b4:0d:95:2c:a8:6a:f8:c4:59:74: 92:2d:1c:8f:0e:bf:c2:15:ad:9e:53:e8:d4:4d:18:05:7f:d5: fc:78:3c:8d:be:4a:bd:ed:e9:20:12:9f:bf:0f:f0:ca:a6:82: 94:74:ad:58:59:a0:85:65:6f:0c:20:e6:3c:7b:8d:40:66:e9: 91:76:c2:42:13:f7:a7:93:f2:30:6b:07:05:71:96:f0:55:3f: d5:4b:a6:27:d1:f6:e3:61:05:91:95:52:a0:45:9b:ed:15:49: e0:a6:24:49:9e:a6:a4:18:64:92:d0:e0:e0:ab:24:70:df:58: 9a:29:1b:ac:6e:58:ed:ce:bb:82:5f:3c:6f:10:c9:f8:d8:79: 0c:cf:d8:46:cb:f6:aa:30:84:23:3a:94:ec:63:91:f0:51:73: 0a:61:ae:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGWLqquUjhhr/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk OTc2YTljNWEtY2Q3Ni00MjZhLTg2MGYtYmNjZWVlYmYzMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAio61Wid4NYQWUY8RfxB40piXV3hUoOGaVEtp MCv1grZG28W6EEK6wkygVP0LEPNzIfpfHL181Jwu1VgSybTLz+NIuDI+cjao3Ccd ECDu5mUFMZ6P94cPLE+7b0OFhXFfORQntctpNrxVgoEIrcJ2aADPhd15zLmOqnbv KSegDhmExON/WbX6piKj279lQIUaqRPyHn0qJAdD5c1UvpcJVWxjRSwqqQ+h0rKI z5/hFOQI/ELH8vxupb06N09nsqBG5GgFoWBQqD6dFZwpz59z6+rKGRFE5w0NJBHP dl3Aul4lx8SrcFmtRS9kNIkHY6iJhWfmyGmxPPC2LKWhQzjtVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsMEx2NYJShp8mnNqFGvyHr2tKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmJmMDM0ZTMtMjIwYy0z NTVjLTgzYWQtN2IwMzI5MWI5MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFhH49W59dQ2TRSM6r9zUkUblaG8EqalpDUleLqu29skBReICjTC8RrK P+w/I/+/YfqZ4WjS21XwY08kKIr/5BVznYjexxApIBze6MmHiqPSPfNKypJk7Q7m 9c/Kvjknmet4tA2VLKhq+MRZdJItHI8Ov8IVrZ5T6NRNGAV/1fx4PI2+Sr3t6SAS n78P8MqmgpR0rVhZoIVlbwwg5jx7jUBm6ZF2wkIT96eT8jBrBwVxlvBVP9VLpifR 9uNhBZGVUqBFm+0VSeCmJEmepqQYZJLQ4OCrJHDfWJopG6xuWO3Ou4JfPG8QyfjY eQzP2EbL9qowhCM6lOxjkfBRcwphrss= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:44 2025 by rpki-client