$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa File: f040b20c-a806-35b2-ae4a-b52c865f43c4.roa (raw, json) Hash identifier: VP2zGE79Zm0TJ59FoAvGvc2bvo5RuiLht8oLaSfvqwk= Subject key identifier: B8:2F:6B:98:D6:F2:CF:EA:C4:66:F4:8F:32:91:01:00:74:73:70:DD Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5DB667BD14B1DE79A480 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.49.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5d:b6:67:bd:14:b1:de:79:a4:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c979c3d1-6e71-4ca6-9a2c-6609e0aa48df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:d2:2b:eb:17:b8:9a:60:1d:7f:f5:ba:55:6d: f7:17:36:63:25:b4:d8:16:f6:66:74:67:2e:8d:a2: b2:8e:eb:01:03:d9:1f:ed:2b:1f:6f:49:c6:3f:32: 23:f4:a2:ac:41:ca:eb:cd:3c:0b:94:9f:1c:05:9f: b1:fe:34:55:6f:40:ce:05:27:fc:f0:5d:da:22:3e: 9e:71:85:44:fb:f3:d0:4d:62:f9:4b:51:92:c6:ad: 69:f6:71:95:e9:5b:2d:44:08:61:76:5d:e5:85:48: 19:b2:2a:e1:ae:0b:ca:96:7a:37:e4:f0:f6:f0:49: 63:fe:50:cd:50:45:45:11:55:ac:6b:7f:2f:98:3d: e1:5c:fb:20:0f:f0:c0:13:aa:ca:fd:5b:87:ed:d3: 20:99:d2:f4:18:20:ff:4c:19:ae:e5:94:5b:21:28: 38:cd:d0:98:bc:78:a3:ea:17:2a:e3:9f:d2:c7:be: 68:8d:22:d2:a3:57:ba:db:56:76:3f:0a:4f:78:a7: 5e:c6:8c:80:0d:48:27:ff:33:b6:d2:6d:6a:c6:33: 0c:5e:43:8a:17:c3:47:f6:07:21:7f:90:45:a9:f1: 70:59:27:8f:4c:df:88:0b:07:34:c6:6b:04:a5:91: 2f:99:91:1b:f8:67:e2:b1:06:1f:b5:78:42:1d:fe: df:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2F:6B:98:D6:F2:CF:EA:C4:66:F4:8F:32:91:01:00:74:73:70:DD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:9c:a0:65:f9:30:21:d8:88:c7:36:b6:4b:3f:f6:03:be:71: 03:19:5a:e8:f4:e8:c1:46:99:45:af:20:81:b3:fe:9a:ae:66: ec:69:ab:dd:f5:e0:4e:f0:8b:9d:5c:4d:6c:1b:2d:09:32:3c: 3e:b4:f4:32:c0:f1:72:b1:d9:b1:ca:4e:17:51:cf:ea:98:1c: e6:b8:ff:b7:63:88:18:97:c9:46:2d:7a:08:7a:bc:66:6e:b5: 34:8f:8e:45:ff:55:38:00:01:8a:3e:55:0a:bd:19:a9:46:38: a4:b2:b6:77:3c:64:02:13:e8:e2:f7:f5:30:0a:52:5f:d2:c7: bb:7d:b0:63:4c:f7:7f:86:6d:43:08:bf:e7:a5:d3:7f:7a:0c: c5:07:79:0f:4f:c7:2a:e8:36:74:01:fd:ed:51:69:99:bb:fb: ef:b7:b8:1f:4b:10:91:c7:a4:c6:29:fe:42:43:a4:df:79:81: 0e:2e:7b:14:c1:14:44:5e:0d:6c:26:cf:63:45:b7:64:fd:14: e3:f6:b8:c8:d7:b5:74:d6:1c:d2:90:b1:9b:bf:40:17:2a:fe: c6:b6:29:f0:9f:0a:52:0b:7c:79:10:8f:b9:3e:b9:86:34:ca: 66:79:94:14:45:74:6e:30:e8:08:e1:33:ce:44:03:70:03:06: 7b:cb:5f:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF22Z70Usd55pIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Yzk3OWMzZDEtNmU3MS00Y2E2LTlhMmMtNjYwOWUwYWE0OGRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh9Ir6xe4mmAdf/W6VW33FzZjJbTYFvZmdGcu jaKyjusBA9kf7Ssfb0nGPzIj9KKsQcrrzTwLlJ8cBZ+x/jRVb0DOBSf88F3aIj6e cYVE+/PQTWL5S1GSxq1p9nGV6VstRAhhdl3lhUgZsirhrgvKlno35PD28Elj/lDN UEVFEVWsa38vmD3hXPsgD/DAE6rK/VuH7dMgmdL0GCD/TBmu5ZRbISg4zdCYvHij 6hcq45/Sx75ojSLSo1e621Z2PwpPeKdexoyADUgn/zO20m1qxjMMXkOKF8NH9gch f5BFqfFwWSePTN+ICwc0xmsEpZEvmZEb+GfisQYftXhCHf7f8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLgva5jW8s/qxGb0jzKRAQB0c3DdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjA0MGIyMGMtYTgwNi0z NWIyLWFlNGEtYjUyYzg2NWY0M2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACicoGX5MCHYiMc2tks/9gO+cQMZWuj06MFGmUWvIIGz/pquZuxpq931 4E7wi51cTWwbLQkyPD609DLA8XKx2bHKThdRz+qYHOa4/7djiBiXyUYtegh6vGZu tTSPjkX/VTgAAYo+VQq9GalGOKSytnc8ZAIT6OL39TAKUl/Sx7t9sGNM93+GbUMI v+el0396DMUHeQ9PxyroNnQB/e1RaZm7+++3uB9LEJHHpMYp/kJDpN95gQ4uexTB FEReDWwmz2NFt2T9FOP2uMjXtXTWHNKQsZu/QBcq/sa2KfCfClILfHkQj7k+uYY0 ymZ5lBRFdG4w6AjhM85EA3ADBnvLXzA= -----END CERTIFICATE-----Generated at Thu Oct 9 01:10:09 2025 by rpki-client