$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa File: fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa (raw, json) Hash identifier: VhbHivxlyEmHHB0gc3xvMU8aRfdl2nVeufcWxegKm6c= Subject key identifier: 25:AF:2F:22:AB:27:B1:3A:3D:4F:2B:0A:9E:40:BC:1F:FB:36:72:81 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C620ECD9E7531E9596B00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:62:0e:cd:9e:75:31:e9:59:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=40f34ad6-59a4-4032-82fd-c72ac5564d44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:b9:45:c4:84:ae:4e:ad:7b:93:dd:d1:67:36: 4e:59:5e:f3:4c:65:79:b2:f7:ad:c6:4b:ef:66:de: 90:0e:e4:66:d1:ab:74:83:0a:84:21:fd:82:ec:b2: 43:cb:45:08:1d:3a:9d:7d:d3:d6:de:54:be:7f:04: 71:4a:a6:80:7d:fa:64:97:bc:70:f3:88:5a:95:16: 0e:06:38:a0:e3:b9:4e:a1:4b:93:d4:c9:70:49:2e: 20:b9:52:41:21:e9:fd:2e:45:33:9e:42:aa:d6:73: 63:86:9a:f7:61:98:59:94:3a:3c:84:d2:3d:94:e6: 15:1c:0f:2e:0b:fd:01:bb:65:ce:3f:8c:ad:81:fb: 91:52:8b:36:f0:d1:ae:ec:c8:5a:bf:06:8e:52:ef: e8:8c:fb:86:a5:b6:dd:79:c7:7f:38:1e:da:dd:b9: 79:d3:54:06:ce:51:77:47:4c:bc:c8:2e:ff:09:79: bb:f9:6c:a5:46:14:35:a9:a3:24:54:e8:5a:1d:b9: f4:94:ce:30:03:46:a4:2a:98:71:98:02:f9:3f:70: 95:8a:f8:93:2a:20:7d:54:b5:95:90:c5:71:f4:b5: 3a:6a:b2:7c:f7:95:e9:3a:15:d4:f4:74:81:3e:6f: 73:18:05:8d:6c:33:f0:5c:85:fb:b4:34:70:60:27: 03:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AF:2F:22:AB:27:B1:3A:3D:4F:2B:0A:9E:40:BC:1F:FB:36:72:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fc2dcc6b-eba2-3f26-b649-f1dfaedebd27.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:06:a8:bc:f1:56:1a:78:f0:29:2c:51:7d:0d:fd:27:8b:34: 7b:1d:36:2f:74:1a:1a:65:f6:78:3b:a6:55:66:40:e4:27:b5: 41:0a:28:04:4e:e3:04:20:6a:06:68:ae:f4:53:49:90:e4:86: 56:c8:c2:c7:20:3a:a3:5f:38:92:18:cd:1d:5f:8a:db:a0:e6: 39:3b:60:ae:04:25:02:6d:3a:8e:1c:37:aa:c0:66:cf:ef:62: db:20:47:89:c8:42:fb:9a:e2:8c:fd:51:f1:7a:08:7f:4d:b1: 66:c9:95:d7:15:00:4e:b3:6c:93:ae:16:27:24:3a:00:26:4c: de:c3:35:c2:2e:c3:cb:bf:f9:32:eb:bc:0f:8b:1b:70:f6:24: 4e:44:7c:83:eb:68:b8:ff:bb:1d:57:6e:f4:4e:03:10:44:e8: 88:6c:1b:9d:38:c1:5b:f0:94:92:e6:9f:d8:ec:a2:0c:3e:b3: 41:ed:32:54:e0:65:3d:cc:f6:f1:f4:cc:84:20:4e:93:97:63: 36:13:44:34:e4:8f:1b:fe:3c:28:bb:b7:6c:e0:34:e2:24:42: 97:3a:56:ac:a9:1b:da:84:b3:b6:5e:80:03:bc:26:2f:04:3d: 02:9c:72:f8:ae:63:11:61:d0:cb:24:c4:92:a7:54:08:a6:66: 96:a9:61:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGIOzZ51MelZawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NDBmMzRhZDYtNTlhNC00MDMyLTgyZmQtYzcyYWM1NTY0ZDQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5blFxISuTq17k93RZzZOWV7zTGV5svetxkvv Zt6QDuRm0at0gwqEIf2C7LJDy0UIHTqdfdPW3lS+fwRxSqaAffpkl7xw84halRYO Bjig47lOoUuT1MlwSS4guVJBIen9LkUznkKq1nNjhpr3YZhZlDo8hNI9lOYVHA8u C/0Bu2XOP4ytgfuRUos28NGu7MhavwaOUu/ojPuGpbbdecd/OB7a3bl501QGzlF3 R0y8yC7/CXm7+WylRhQ1qaMkVOhaHbn0lM4wA0akKphxmAL5P3CViviTKiB9VLWV kMVx9LU6arJ895XpOhXU9HSBPm9zGAWNbDPwXIX7tDRwYCcDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCWvLyKrJ7E6PU8rCp5AvB/7NnKBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmMyZGNjNmItZWJhMi0z ZjI2LWI2NDktZjFkZmFlZGViZDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoGqLzxVhp48CksUX0N/SeLNHsdNi90Ghpl9ng7plVmQOQntUEKKARO 4wQgagZorvRTSZDkhlbIwscgOqNfOJIYzR1fitug5jk7YK4EJQJtOo4cN6rAZs/v YtsgR4nIQvua4oz9UfF6CH9NsWbJldcVAE6zbJOuFickOgAmTN7DNcIuw8u/+TLr vA+LG3D2JE5EfIPraLj/ux1XbvROAxBE6IhsG504wVvwlJLmn9jsogw+s0HtMlTg ZT3M9vH0zIQgTpOXYzYTRDTkjxv+PCi7t2zgNOIkQpc6VqypG9qEs7ZegAO8Ji8E PQKccviuYxFh0MskxJKnVAimZpapYe4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:50 2025 by rpki-client