$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa File: e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa (raw, json) Hash identifier: wsRsOvpegXBkXra0oC/XXmwZL2rxBAfMf+qSteYru6Q= Subject key identifier: 31:A9:CD:5C:18:6E:7E:5C:41:CB:94:74:C2:D7:C4:7D:68:79:24:50 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9EFCB2FFC5EC0AAC9B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9e:fc:b2:ff:c5:ec:0a:ac:9b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=622eaf35-e7de-480a-9e4f-0a0a6040c059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d6:2b:8b:02:f5:ad:66:d5:e4:3f:16:0b:1b: a3:1f:0a:c2:c0:d3:2c:e1:59:6d:91:36:25:b5:74: 4f:f0:11:f7:f4:6f:a7:0b:c5:91:93:44:05:ee:9f: 6d:e3:2c:d3:25:3e:81:d7:7f:7e:c5:a2:1d:33:a6: 9e:81:30:57:2f:c6:d9:3c:24:10:b5:84:18:a3:4c: ec:ba:c4:19:96:bc:54:a8:a0:b6:d8:86:b4:a5:29: 38:47:b9:95:67:36:33:57:e4:5f:35:73:e3:fe:16: 3b:ac:d1:8d:7b:6c:f1:f2:8a:47:6a:49:46:3c:77: 55:a0:ed:db:0e:d9:ee:a0:57:49:ad:91:94:0e:cd: b0:e5:9d:c8:40:2b:ad:79:50:d6:6e:85:b7:ea:98: d6:d2:03:bd:7d:b3:f2:ff:a6:09:40:ad:9c:f7:fd: fc:b3:56:c2:c7:29:34:97:e5:84:61:b3:d0:77:87: f5:11:96:4c:b5:d6:03:ac:94:bd:2e:e3:81:16:90: ae:4b:4c:58:e6:f4:e5:18:36:07:d6:6d:6c:98:2c: b9:74:70:f4:46:74:33:19:55:4a:30:97:29:71:c8: 87:47:67:6c:38:b3:75:4a:96:28:f3:88:43:c4:97: 60:61:e6:66:1b:4f:4c:7b:0c:a5:18:2e:97:bf:7a: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:A9:CD:5C:18:6E:7E:5C:41:CB:94:74:C2:D7:C4:7D:68:79:24:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e66e9871-8fdd-3387-b82b-f117a5d8b42e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:03:1f:3f:f3:f5:85:60:8b:e5:71:28:59:69:c3:90:a3:2a: 30:14:4a:c1:9d:f2:57:0c:21:f2:0e:71:a6:51:bc:0a:f7:aa: 3a:59:2d:2a:bb:fd:40:a5:4a:c0:4e:a5:a6:6a:1e:81:bc:39: 46:0d:16:10:78:47:64:65:cd:f9:01:c4:6a:2a:18:93:6a:c8: 37:f4:7d:8c:e7:3f:65:ab:c4:ce:28:f6:4a:2e:39:8f:5a:e7: 57:12:e9:6e:e9:81:6e:bc:b1:52:3e:5f:8a:1d:66:41:70:6d: ed:c5:80:f3:a9:0a:68:99:47:a5:8e:3c:ac:bb:b0:32:0e:46: 40:45:20:ae:19:b6:ed:f2:71:c5:70:f4:2e:53:2b:b1:7f:ee: 83:df:b5:dc:2f:e2:f4:dd:8b:29:ab:7d:fa:42:10:48:b4:d6: a4:ec:72:9c:7c:b8:29:eb:67:51:7f:b5:ff:33:c7:bf:d5:85: 59:c1:ea:76:0a:e6:06:e8:a1:8d:e5:94:3f:ce:79:7b:48:52: 6a:e1:24:2a:9f:28:1c:a4:7f:09:7b:45:24:1d:8d:9f:1d:a6: 7b:c9:b0:5e:2f:89:71:ce:92:91:a2:87:11:c0:13:df:1d:52: 9e:9f:b2:06:91:b6:48:55:91:e9:c4:cd:56:96:41:c7:2a:e3: 77:f1:a4:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJ78sv/F7Aqsm4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjIyZWFmMzUtZTdkZS00ODBhLTllNGYtMGEwYTYwNDBjMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtYriwL1rWbV5D8WCxujHwrCwNMs4VltkTYl tXRP8BH39G+nC8WRk0QF7p9t4yzTJT6B139+xaIdM6aegTBXL8bZPCQQtYQYo0zs usQZlrxUqKC22Ia0pSk4R7mVZzYzV+RfNXPj/hY7rNGNe2zx8opHaklGPHdVoO3b DtnuoFdJrZGUDs2w5Z3IQCuteVDWboW36pjW0gO9fbPy/6YJQK2c9/38s1bCxyk0 l+WEYbPQd4f1EZZMtdYDrJS9LuOBFpCuS0xY5vTlGDYH1m1smCy5dHD0RnQzGVVK MJcpcciHR2dsOLN1SpYo84hDxJdgYeZmG09MewylGC6Xv3r1ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDGpzVwYbn5cQcuUdMLXxH1oeSRQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTY2ZTk4NzEtOGZkZC0z Mzg3LWI4MmItZjExN2E1ZDhiNDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDGAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACkDHz/z9YVgi+VxKFlpw5CjKjAUSsGd8lcMIfIOcaZRvAr3qjpZLSq7 /UClSsBOpaZqHoG8OUYNFhB4R2RlzfkBxGoqGJNqyDf0fYznP2WrxM4o9kouOY9a 51cS6W7pgW68sVI+X4odZkFwbe3FgPOpCmiZR6WOPKy7sDIORkBFIK4Ztu3yccVw 9C5TK7F/7oPftdwv4vTdiymrffpCEEi01qTscpx8uCnrZ1F/tf8zx7/VhVnB6nYK 5gbooY3llD/OeXtIUmrhJCqfKBykfwl7RSQdjZ8dpnvJsF4viXHOkpGihxHAE98d Up6fsgaRtkhVkenEzVaWQccq43fxpGE= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:42 2025 by rpki-client