$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: E8Kz74p/XnGheKyG+viC0kw8ay8sfn5urdA2TjIEbpk= Subject key identifier: 2F:C8:71:44:A5:9E:0E:7B:0B:C1:3B:1B:71:3F:A1:2E:92:43:FB:29 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA38A34758AD506C25880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a3:8a:34:75:8a:d5:06:c2:58:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e09465f6-50aa-4539-adaf-6d074f018a9e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:d2:2a:06:49:7f:6f:04:16:2c:dd:69:4e:81: 8e:9d:e8:3c:e9:a7:94:dd:39:69:c6:e4:63:3a:5e: e3:c7:6b:50:92:84:9c:7d:68:37:2c:25:a3:95:49: 85:c4:5d:95:c0:79:64:12:bb:25:e7:1d:d1:76:f4: 15:d9:eb:ca:a2:a4:44:8f:09:82:a7:15:c5:c7:96: 12:09:3a:80:ec:4c:6a:e1:4a:95:5e:73:e1:1a:ac: ce:f8:19:e6:3f:1b:fe:10:a8:16:98:44:bd:ac:47: 43:3f:ad:80:66:7f:a6:50:1d:fe:cc:c2:9a:47:65: ea:86:64:b3:5a:12:12:8d:ae:2f:30:d1:df:62:97: 42:d6:1e:e6:12:d5:e3:0e:5b:ae:d6:ed:af:29:a7: 36:5c:03:66:92:60:64:19:07:3c:3d:3a:04:56:18: e4:9a:4e:e1:13:b4:c0:63:f1:b9:b3:55:9b:35:04: 59:e7:14:15:49:ce:1d:32:d2:1e:f4:6c:88:0e:63: a6:d0:71:97:f4:72:e5:5f:ff:db:56:ae:f3:5f:03: 31:48:cc:31:52:b4:4a:ec:0a:44:c8:64:5e:c5:3a: 41:a0:4f:61:1e:6c:e5:24:51:25:0f:d0:bc:7f:35: 00:f3:2e:19:cd:41:9f:d1:88:aa:06:66:34:92:d7: 19:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:C8:71:44:A5:9E:0E:7B:0B:C1:3B:1B:71:3F:A1:2E:92:43:FB:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:52:ad:eb:4d:90:4c:9e:5a:d3:3e:57:75:b4:06:a1:4b:be: 85:52:c7:a1:04:89:3c:d1:7a:fc:ee:4b:aa:51:9b:3d:2b:cb: 15:36:29:a4:09:20:27:1b:ab:75:63:ce:84:e5:a4:e6:78:43: cd:94:fe:77:99:0c:43:41:93:c8:4f:73:5e:67:a2:74:95:83: ce:d3:63:63:9e:cf:c9:f7:30:0d:aa:9f:ef:3f:d0:15:a5:20: 34:28:1d:5d:c9:52:52:e4:99:4d:28:63:24:32:4f:8a:b1:b9: ae:4f:54:81:9c:42:3b:cf:ca:29:66:59:53:46:f7:1d:7b:52: 03:b7:e1:d2:18:f4:1b:d6:b7:39:32:af:3b:14:13:91:7a:9d: 3f:69:ec:7b:50:da:85:6d:6f:0d:87:7e:44:dc:26:b0:40:34: c5:d1:24:0e:ae:4a:42:1e:3c:24:d4:e3:fe:62:0f:cb:85:e4: 87:3a:8c:d9:4a:23:fa:f0:df:9a:31:a8:59:29:46:a2:e6:33: 4d:c1:70:f1:2f:aa:05:87:f2:f3:be:3e:16:e0:a7:b5:4d:61: a1:79:a2:ba:10:51:12:46:b0:bc:32:3a:2f:33:05:92:d8:10: d8:67:13:cf:c9:65:94:36:f8:6e:e1:53:36:56:b3:a4:85:21: ab:14:fb:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKOKNHWK1QbCWIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTA5NDY1ZjYtNTBhYS00NTM5LWFkYWYtNmQwNzRmMDE4YTllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9IqBkl/bwQWLN1pToGOneg86aeU3TlpxuRj Ol7jx2tQkoScfWg3LCWjlUmFxF2VwHlkErsl5x3RdvQV2evKoqREjwmCpxXFx5YS CTqA7Exq4UqVXnPhGqzO+BnmPxv+EKgWmES9rEdDP62AZn+mUB3+zMKaR2XqhmSz WhISja4vMNHfYpdC1h7mEtXjDluu1u2vKac2XANmkmBkGQc8PToEVhjkmk7hE7TA Y/G5s1WbNQRZ5xQVSc4dMtIe9GyIDmOm0HGX9HLlX//bVq7zXwMxSMwxUrRK7ApE yGRexTpBoE9hHmzlJFElD9C8fzUA8y4ZzUGf0YiqBmY0ktcZPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC/IcUSlng57C8E7G3E/oS6SQ/spMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFBSretNkEyeWtM+V3W0BqFLvoVSx6EEiTzRevzuS6pRmz0ryxU2KaQJ ICcbq3VjzoTlpOZ4Q82U/neZDENBk8hPc15nonSVg87TY2Oez8n3MA2qn+8/0BWl IDQoHV3JUlLkmU0oYyQyT4qxua5PVIGcQjvPyilmWVNG9x17UgO34dIY9BvWtzky rzsUE5F6nT9p7HtQ2oVtbw2HfkTcJrBANMXRJA6uSkIePCTU4/5iD8uF5Ic6jNlK I/rw35oxqFkpRqLmM03BcPEvqgWH8vO+Phbgp7VNYaF5oroQURJGsLwyOi8zBZLY ENhnE8/JZZQ2+G7hUzZWs6SFIasU+8g= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:50 2025 by rpki-client