$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa File: d2f12902-fe70-389d-ab44-0722a47d21f8.roa (raw, json) Hash identifier: gaQfP0MZ6frHDPF4pUN5B6spNkaYVk90NxGzj80b6e0= Subject key identifier: 98:C6:AF:DE:27:A3:27:1A:80:C2:D4:5B:C8:BA:D8:24:0A:44:2B:00 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4E78572CCDA8CE02A128 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4e:78:57:2c:cd:a8:ce:02:a1:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3eaeec0f-cf3d-467d-82b9-329e33ea7bec Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:9a:63:eb:a1:37:76:16:ef:cc:d6:42:4d:3a: bd:88:b8:ba:e9:79:9e:f6:76:ed:a5:54:a3:cc:ed: ca:b9:f4:ad:63:4f:8d:2d:9d:59:67:89:a5:9d:01: b2:c9:66:7c:6a:10:4e:c5:54:be:96:ad:bc:82:17: aa:d8:cd:45:c1:c9:cc:32:de:bd:d0:80:bb:c5:14: 4c:65:2c:a1:8b:54:38:bb:7c:d5:32:61:d1:df:fb: 54:ba:7d:95:9e:ed:67:e9:54:29:a9:25:86:6c:b5: 62:a7:d6:0d:e3:68:b5:f6:d6:67:2c:65:86:fd:28: 0d:65:fd:65:85:f3:36:7e:07:1b:ef:f9:9e:fa:88: e8:a6:f6:2f:57:af:c8:ad:0e:20:ee:e9:1b:df:53: 75:cb:b6:86:1b:b9:50:37:fc:57:c5:1c:b3:37:f7: 27:e9:6d:25:e1:0f:42:92:d4:0f:0f:98:3d:12:1a: fc:24:ec:65:ac:5c:86:dc:8e:69:e6:3f:01:8b:c6: a8:e1:f7:d8:d7:76:a1:87:6e:56:a9:aa:9d:b0:e9: c1:51:6c:65:01:47:d2:44:54:ee:65:d8:95:3f:99: fb:0c:e1:cf:0c:fa:2f:10:62:d8:60:50:8b:ef:4a: 81:99:6c:33:5b:86:9e:47:83:71:67:78:74:30:c2: 3e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:C6:AF:DE:27:A3:27:1A:80:C2:D4:5B:C8:BA:D8:24:0A:44:2B:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:17:5d:8d:12:f2:c7:45:b5:65:6f:c6:2b:52:07:88:6c:85: 44:34:5c:72:af:6b:b4:f0:b6:90:f3:7a:54:6a:b9:8a:d4:2b: d5:c5:fe:21:e8:6d:be:aa:19:7d:c2:6e:49:2f:98:da:5d:39: ab:a6:b6:34:03:e6:f0:7d:c0:ba:3f:17:36:43:f9:4e:e0:d1: 4d:60:60:ba:20:9d:5f:d9:6f:d8:4c:53:9b:ac:82:00:52:03: 7d:22:a9:2f:7f:87:1f:2b:15:a3:d2:1e:97:04:2b:0d:09:ac: 03:cf:d9:7f:7d:82:81:6e:8d:74:be:71:01:26:c0:c9:89:51: 8e:19:08:f1:fe:0c:7d:1d:06:bf:24:ad:31:38:1c:19:63:38: 0f:b2:b0:f5:ba:77:c7:8a:80:d9:86:76:75:55:b6:e2:0d:b5: d7:e1:38:71:eb:31:8f:9a:de:de:58:84:77:45:78:82:a9:53: 2a:96:d2:3a:7e:d9:b2:61:47:d1:3f:b2:46:44:41:5f:04:3e: 00:b9:36:f6:49:92:c0:d1:aa:64:5a:c2:81:14:b6:d3:de:df: 01:93:c7:f6:0a:0e:08:99:d7:ea:92:c6:bd:e2:15:21:e7:da: de:88:80:cb:ca:d0:b8:55:bb:ec:b9:35:e0:80:bf:2b:07:35: 25:29:1c:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTE54VyzNqM4CoSgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2VhZWVjMGYtY2YzZC00NjdkLTgyYjktMzI5ZTMzZWE3YmVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Zpj66E3dhbvzNZCTTq9iLi66Xme9nbtpVSj zO3KufStY0+NLZ1ZZ4mlnQGyyWZ8ahBOxVS+lq28gheq2M1FwcnMMt690IC7xRRM ZSyhi1Q4u3zVMmHR3/tUun2Vnu1n6VQpqSWGbLVip9YN42i19tZnLGWG/SgNZf1l hfM2fgcb7/me+ojopvYvV6/IrQ4g7ukb31N1y7aGG7lQN/xXxRyzN/cn6W0l4Q9C ktQPD5g9Ehr8JOxlrFyG3I5p5j8Bi8ao4ffY13ahh25WqaqdsOnBUWxlAUfSRFTu ZdiVP5n7DOHPDPovEGLYYFCL70qBmWwzW4aeR4NxZ3h0MMI+CwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJjGr94noycagMLUW8i62CQKRCsAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDJmMTI5MDItZmU3MC0z ODlkLWFiNDQtMDcyMmE0N2QyMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHsXXY0S8sdFtWVvxitSB4hshUQ0XHKva7TwtpDzelRquYrUK9XF/iHo bb6qGX3CbkkvmNpdOaumtjQD5vB9wLo/FzZD+U7g0U1gYLognV/Zb9hMU5usggBS A30iqS9/hx8rFaPSHpcEKw0JrAPP2X99goFujXS+cQEmwMmJUY4ZCPH+DH0dBr8k rTE4HBljOA+ysPW6d8eKgNmGdnVVtuINtdfhOHHrMY+a3t5YhHdFeIKpUyqW0jp+ 2bJhR9E/skZEQV8EPgC5NvZJksDRqmRawoEUttPe3wGTx/YKDgiZ1+qSxr3iFSHn 2t6IgMvK0LhVu+y5NeCAvysHNSUpHFY= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:41 2025 by rpki-client