$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa File: dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa (raw, json) Hash identifier: GHJo02Z3HOgWKbQmOj2SA+GjwMwrrH6g/YR/rorb+Q0= Subject key identifier: AD:99:FF:B5:FA:6E:EE:49:EE:99:2A:14:90:7B:31:75:57:FB:6D:EA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C488373ADF0CC13178380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.55.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:48:83:73:ad:f0:cc:13:17:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=09764cf6-a9cc-4ced-ae1e-0284079f02be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:30:4b:98:43:75:66:6a:e3:77:b7:b7:36:3a: d2:e0:b2:1f:cf:5f:36:93:6f:22:ca:17:5c:8f:80: 0f:f6:b7:7f:8f:42:7b:84:00:a1:a3:db:00:0a:d6: fd:28:d6:cb:e5:b5:ba:02:f7:f9:cf:ce:c3:65:ce: e6:33:da:f7:7e:d5:34:aa:d1:5c:a1:f1:37:49:c2: 98:34:0b:c3:f6:11:11:13:bb:39:a0:fe:dd:fe:e3: e1:a2:34:97:77:73:ce:30:b4:97:1b:39:68:03:81: 11:56:34:4b:21:07:2c:1a:b6:76:ac:f3:e7:aa:e5: b3:df:81:29:2d:22:f9:ca:17:ba:ae:55:44:6f:4b: b2:c5:1d:88:58:ef:57:ee:6f:48:95:58:ae:42:fe: a6:19:a5:28:37:85:f1:8b:1c:8b:18:b3:47:75:01: 2b:52:83:aa:81:ae:92:e2:a7:6a:1b:51:77:46:31: d9:f2:53:60:4e:00:04:0c:7e:fd:25:a7:6d:f6:0f: c5:6e:9e:0d:16:d4:77:d4:09:95:7f:87:5b:96:93: f2:28:28:ac:55:2f:b8:35:9b:12:98:ba:c8:c9:54: 2e:67:9c:f9:f9:f7:34:36:e4:a7:3e:1d:c4:17:72: 01:ef:ec:a7:ac:b7:98:13:a5:f3:26:59:91:d8:d0: fd:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:99:FF:B5:FA:6E:EE:49:EE:99:2A:14:90:7B:31:75:57:FB:6D:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.55.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:f9:10:50:be:92:ed:91:6d:24:49:ec:a8:20:12:69:98:79: be:0b:88:ba:a4:f0:fe:24:19:2e:25:fb:21:69:9c:21:1b:9d: fd:f7:e4:f9:82:2f:48:1b:ac:dd:51:fc:8e:22:7b:a9:53:92: ce:77:5e:31:56:77:ed:d2:f8:59:4c:fc:de:31:14:9c:d2:f7: 77:70:5a:f3:4a:c3:a1:fd:5d:bb:73:c8:49:d7:90:8b:f1:14: 73:94:69:c1:25:86:12:12:67:1a:d3:3b:93:fa:7d:52:65:0e: a0:af:59:3b:c1:a0:cf:b5:af:43:1f:19:d4:66:90:96:b9:ac: bc:9c:a1:20:0f:cb:17:76:00:1c:f7:f5:75:f1:c3:d9:3e:75: d1:18:78:57:0f:79:60:c1:2c:81:af:5f:91:38:49:08:e6:3e: ed:f1:0c:4c:d6:77:ba:b5:14:0a:4c:39:57:ca:78:0b:59:3d: e2:9b:3c:bc:de:08:d3:c5:a1:6b:d3:a5:23:1e:05:fb:2f:e1: b4:86:54:a9:bf:f9:a5:29:b0:67:af:54:85:03:fc:ce:54:e0: b0:a9:0f:0d:4e:e8:6b:ee:93:b4:24:fd:51:37:da:95:b1:c1: dc:b9:2b:ad:c8:24:8f:3d:94:d6:9b:28:7b:6e:f5:1a:c7:e9: ab:e9:da:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEiDc63wzBMXg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MDk3NjRjZjYtYTljYy00Y2VkLWFlMWUtMDI4NDA3OWYwMmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjBLmEN1Zmrjd7e3NjrS4LIfz182k28iyhdc j4AP9rd/j0J7hACho9sACtb9KNbL5bW6Avf5z87DZc7mM9r3ftU0qtFcofE3ScKY NAvD9hERE7s5oP7d/uPhojSXd3POMLSXGzloA4ERVjRLIQcsGrZ2rPPnquWz34Ep LSL5yhe6rlVEb0uyxR2IWO9X7m9IlViuQv6mGaUoN4XxixyLGLNHdQErUoOqga6S 4qdqG1F3RjHZ8lNgTgAEDH79Jadt9g/Fbp4NFtR31AmVf4dblpPyKCisVS+4NZsS mLrIyVQuZ5z5+fc0NuSnPh3EF3IB7+ynrLeYE6XzJlmR2ND9/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK2Z/7X6bu5J7pkqFJB7MXVX+23qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGM4ZTk5YTctN2VjNy0z OGJiLWE1MzktYjM4M2I2MmJmM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIj5EFC+ku2RbSRJ7KggEmmYeb4LiLqk8P4kGS4l+yFpnCEbnf335PmC L0gbrN1R/I4ie6lTks53XjFWd+3S+FlM/N4xFJzS93dwWvNKw6H9XbtzyEnXkIvx FHOUacElhhISZxrTO5P6fVJlDqCvWTvBoM+1r0MfGdRmkJa5rLycoSAPyxd2ABz3 9XXxw9k+ddEYeFcPeWDBLIGvX5E4SQjmPu3xDEzWd7q1FApMOVfKeAtZPeKbPLze CNPFoWvTpSMeBfsv4bSGVKm/+aUpsGevVIUD/M5U4LCpDw1O6Gvuk7Qk/VE32pWx wdy5K63IJI89lNabKHtu9RrH6avp2nM= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:39 2025 by rpki-client