$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa File: be468998-0ccd-30b7-9166-469ae59ced7d.roa (raw, json) Hash identifier: 1CEqQqKSUiUDvOsgJRNm32ytHmGJRQCqSWYNxriuARY= Subject key identifier: CA:AC:FA:90:85:7A:9B:DA:EF:48:CF:45:00:04:AD:DB:1C:6D:E3:22 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C6774198E1EC0FCD6FB80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:67:74:19:8e:1e:c0:fc:d6:fb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=dd1be918-d32f-43ff-acb1-b743efeb1e2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:30:d6:fc:76:a2:39:e6:d5:a9:bf:d4:71:66: 96:6a:e5:b0:3a:a7:75:74:f8:f2:fc:5e:28:28:36: e0:4c:3e:1b:b9:26:0a:29:88:6b:04:3b:f8:8b:c3: 8c:fe:48:82:d2:b7:41:4a:05:46:8b:06:23:bb:94: b4:1f:d6:fb:2b:64:d5:77:ea:a2:56:8b:b8:4d:ab: ac:6e:97:9e:83:60:5b:06:e5:2e:81:31:d8:19:a4: c0:2e:b7:b1:7c:7d:83:49:2b:17:9f:2c:39:7c:37: ff:05:53:bb:8c:77:00:56:47:0c:a6:2f:a3:82:b5: d6:f3:7d:50:5d:f4:9c:a1:f5:c5:88:84:2b:d5:9b: 1e:ac:2f:1c:09:54:95:e3:73:24:15:9a:9e:d2:20: 54:25:55:1f:e1:81:22:bc:00:93:08:a6:6c:9e:7d: 81:5c:8c:43:67:9d:3f:54:a4:7d:ed:6b:dc:43:9d: c9:53:3e:51:b8:53:35:4f:bc:ed:98:72:8c:3e:68: 5f:cb:2f:53:90:00:8f:5a:03:e4:8e:30:ed:66:97: 23:97:a1:16:89:31:f9:8a:19:be:55:68:c7:c5:29: 84:ae:b3:05:73:d2:61:87:f5:b5:b6:0d:9c:66:12: ca:1f:a4:1c:08:79:55:b6:53:2e:43:fd:41:8a:f6: 03:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:AC:FA:90:85:7A:9B:DA:EF:48:CF:45:00:04:AD:DB:1C:6D:E3:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/be468998-0ccd-30b7-9166-469ae59ced7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:ec:6c:5d:78:08:72:b9:91:7d:b5:0c:53:0a:1b:9d:93:df: 12:25:84:a5:c3:7e:5e:79:fd:07:0d:50:f2:10:42:f0:a6:7f: 05:d6:87:38:de:8a:00:79:60:b5:e1:78:db:b4:51:bc:82:1c: c8:4c:ce:00:d2:d5:f1:32:22:0e:e9:39:55:65:39:93:41:42: 39:c9:1e:94:a9:77:89:85:40:72:ee:f3:99:09:01:8b:e0:5f: 56:ce:6c:34:69:08:30:cd:9e:0e:0c:53:4d:31:53:eb:37:07: 0d:46:63:1a:10:75:44:14:fe:71:92:f9:7e:11:cb:76:2a:a7: 5f:c2:1e:9a:82:d7:8e:15:9d:f4:97:5f:6d:df:d7:7a:3a:f3: 7b:2b:50:8d:9c:1a:00:5b:06:36:a7:ed:6e:19:61:00:a7:4f: ab:d1:9e:f9:7d:04:25:a5:af:27:c5:d7:a2:32:a0:9b:09:9b: 0d:29:ec:34:2b:52:67:ca:3c:bf:02:fa:c2:da:5b:67:14:40: 8a:13:84:25:82:86:61:a5:ba:ef:4b:28:cd:13:49:59:fc:9b: 8b:64:d0:e0:3e:39:e4:cc:06:42:7d:f8:17:08:36:2f:0e:87: cc:24:73:9b:ae:e1:d8:65:94:43:7a:5f:0b:58:3c:c4:37:62: e4:63:de:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGd0GY4ewPzW+4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGQxYmU5MTgtZDMyZi00M2ZmLWFjYjEtYjc0M2VmZWIxZTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjDW/HaiOebVqb/UcWaWauWwOqd1dPjy/F4o KDbgTD4buSYKKYhrBDv4i8OM/kiC0rdBSgVGiwYju5S0H9b7K2TVd+qiVou4Taus bpeeg2BbBuUugTHYGaTALrexfH2DSSsXnyw5fDf/BVO7jHcAVkcMpi+jgrXW831Q XfScofXFiIQr1ZserC8cCVSV43MkFZqe0iBUJVUf4YEivACTCKZsnn2BXIxDZ50/ VKR97WvcQ53JUz5RuFM1T7ztmHKMPmhfyy9TkACPWgPkjjDtZpcjl6EWiTH5ihm+ VWjHxSmErrMFc9Jhh/W1tg2cZhLKH6QcCHlVtlMuQ/1BivYDpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMqs+pCFepva70jPRQAErdscbeMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmU0Njg5OTgtMGNjZC0z MGI3LTkxNjYtNDY5YWU1OWNlZDdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC3sbF14CHK5kX21DFMKG52T3xIlhKXDfl55/QcNUPIQQvCmfwXWhzje igB5YLXheNu0UbyCHMhMzgDS1fEyIg7pOVVlOZNBQjnJHpSpd4mFQHLu85kJAYvg X1bObDRpCDDNng4MU00xU+s3Bw1GYxoQdUQU/nGS+X4Ry3Yqp1/CHpqC144VnfSX X23f13o683srUI2cGgBbBjan7W4ZYQCnT6vRnvl9BCWlryfF16IyoJsJmw0p7DQr UmfKPL8C+sLaW2cUQIoThCWChmGluu9LKM0TSVn8m4tk0OA+OeTMBkJ9+BcINi8O h8wkc5uu4dhllEN6XwtYPMQ3YuRj3uc= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:03 2025 by rpki-client