$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/e5c768b6-840b-3eb7-8365-e45292e1ad69.roa File: e5c768b6-840b-3eb7-8365-e45292e1ad69.roa (raw, json) Hash identifier: A+C5T9pasSq01SNsUseEer6kEpoAvOrlxon0bFnokEc= Subject key identifier: 68:F0:61:C4:B3:17:80:23:C4:ED:0E:84:D0:E3:8E:EC:4F:4A:48:93 Certificate issuer: /CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Certificate serial: 010D0C9F4328584B4FDC767C24DE1957178EC380 Authority key identifier: 2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/e5c768b6-840b-3eb7-8365-e45292e1ad69.roa Signing time: Thu 25 Sep 2025 13:00:41 +0000 ROA not before: Thu 25 Sep 2025 13:00:41 +0000 ROA not after: Wed 24 Dec 2025 14:00:41 +0000 asID: 31898 IP address blocks: 135.136.128.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4f:dc:76:7c:24:de:19:57:17:8e:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c25f4d8e-220d-4b21-a8f8-57ed91ba86e4 Validity Not Before: Sep 25 13:00:41 2025 GMT Not After : Dec 24 14:00:41 2025 GMT Subject: CN=aef1131f-ea1a-4cdc-ab06-35b2a9e448aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:35:e5:c9:78:7d:7a:26:47:d0:65:44:04:a2: 05:24:37:7f:50:05:80:23:7e:9a:16:eb:ed:8b:90: 7f:73:2b:03:84:91:e4:64:91:b1:66:52:64:7f:a4: 4e:93:f0:a9:51:ad:56:2c:b5:03:62:f3:d5:53:64: 33:9c:e8:fa:86:ea:13:e4:67:c8:5d:48:e4:c6:84: 26:d6:97:19:e6:39:b9:1f:07:33:ce:20:be:bc:81: 69:4b:d6:bd:f1:3e:ef:43:df:86:f9:99:c8:f8:50: 88:14:d8:16:b0:7e:16:a4:84:5c:a1:df:ef:ac:b7: e7:ad:d0:88:4b:fc:b6:41:30:0d:d6:c7:78:9e:89: 1f:82:26:40:33:12:94:ac:93:e5:4d:de:1c:c9:4e: 6c:ee:8a:1c:b3:c6:5a:3f:20:64:62:e3:41:9a:ff: e1:4c:d3:94:c7:12:fb:f4:0a:fa:c5:46:70:01:2d: fd:aa:f3:67:8b:6e:98:c2:be:cf:0f:8a:fb:3f:6e: c4:2e:ad:b2:9d:1e:0a:18:6e:b1:05:bd:ac:1b:e5: 8a:77:2d:7b:70:a5:8c:10:46:fa:de:dd:82:53:d7: 4a:4d:d7:0f:ec:1b:03:02:53:7a:9a:d1:aa:5e:6b: 8e:21:93:e0:a1:1e:7d:bf:bc:b7:1a:8d:2c:93:1b: 64:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:F0:61:C4:B3:17:80:23:C4:ED:0E:84:D0:E3:8E:EC:4F:4A:48:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/e5c768b6-840b-3eb7-8365-e45292e1ad69.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.crl X509v3 Authority Key Identifier: keyid:2C:C0:07:1C:5C:33:67:A4:13:81:79:3E:96:B7:15:D9:B3:7B:2E:53 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c25f4d8e-220d-4b21-a8f8-57ed91ba86e4.cer sbgp-ipAddrBlock: critical IPv4: 135.136.128.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:0d:7b:03:61:f8:3a:50:68:d6:9f:39:89:b0:ac:01:88:d3: 36:9d:99:77:9c:76:82:93:10:67:49:33:a2:cd:5a:12:c2:40: 2f:73:91:22:22:89:57:d5:cf:a2:c6:29:c0:ba:ff:47:c5:5e: ff:ca:de:5c:9d:d9:de:b5:93:a1:cf:3c:7e:7f:85:4e:72:c3: 28:56:3a:91:7f:78:cd:ab:2c:84:0a:a7:22:30:cc:3f:e1:db: 57:94:93:7c:66:16:bd:a9:7a:b2:a9:d4:ee:00:05:86:2e:b5: e6:44:0b:1c:ac:40:d4:e7:d5:b0:2b:99:8b:00:12:c9:7c:24: 55:4e:0e:b9:bb:a1:75:06:e7:20:5d:45:fa:8d:a2:87:19:ea: a9:fa:d3:4a:ab:16:9e:02:d0:e1:75:e1:da:2d:24:34:4f:ae: 65:95:46:7f:c7:98:cd:e6:a7:2e:f3:d4:31:8d:b5:72:43:e3: 37:bc:6c:b3:52:f5:5d:7d:87:21:52:d1:b1:19:3b:15:50:92: 20:6f:9f:1c:6a:d7:ba:c8:1c:fc:8a:2d:e0:5e:82:73:2b:79: e7:07:d2:3c:29:41:43:33:60:60:6c:d1:99:51:08:c5:af:f8: 03:34:df:33:a2:96:87:94:4e:07:94:70:5c:fe:68:dc:ad:ce: 89:5c:46:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtP3HZ8JN4ZVxeOw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzI1ZjRkOGUtMjIwZC00YjIxLWE4ZjgtNTdlZDkxYmE4 NmU0MB4XDTI1MDkyNTEzMDA0MVoXDTI1MTIyNDE0MDA0MVowLzEtMCsGA1UEAxMk YWVmMTEzMWYtZWExYS00Y2RjLWFiMDYtMzViMmE5ZTQ0OGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTXlyXh9eiZH0GVEBKIFJDd/UAWAI36aFuvt i5B/cysDhJHkZJGxZlJkf6ROk/CpUa1WLLUDYvPVU2QznOj6huoT5GfIXUjkxoQm 1pcZ5jm5HwczziC+vIFpS9a98T7vQ9+G+ZnI+FCIFNgWsH4WpIRcod/vrLfnrdCI S/y2QTAN1sd4nokfgiZAMxKUrJPlTd4cyU5s7oocs8ZaPyBkYuNBmv/hTNOUxxL7 9Ar6xUZwAS39qvNni26Ywr7PD4r7P27ELq2ynR4KGG6xBb2sG+WKdy17cKWMEEb6 3t2CU9dKTdcP7BsDAlN6mtGqXmuOIZPgoR59v7y3Go0skxtkDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGjwYcSzF4AjxO0OhNDjjuxPSkiTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVm NGQ4ZS0yMjBkLTRiMjEtYThmOC01N2VkOTFiYTg2ZTQvZTVjNzY4YjYtODQwYi0z ZWI3LTgzNjUtZTQ1MjkyZTFhZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzI1ZjRkOGUtMjIwZC00YjIxLWE4 ZjgtNTdlZDkxYmE4NmU0L2MyNWY0ZDhlLTIyMGQtNGIyMS1hOGY4LTU3ZWQ5MWJh ODZlNC5jcmwwHwYDVR0jBBgwFoAULMAHHFwzZ6QTgXk+lrcV2bN7LlMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMjVmNGQ4ZS0yMjBkLTRiMjEtYThmOC01N2Vk OTFiYTg2ZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAh4iAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwNewNh+DpQaNafOYmwrAGI0zadmXecdoKTEGdJM6LNWhLCQC9zkSIi iVfVz6LGKcC6/0fFXv/K3lyd2d61k6HPPH5/hU5ywyhWOpF/eM2rLIQKpyIwzD/h 21eUk3xmFr2perKp1O4ABYYuteZECxysQNTn1bArmYsAEsl8JFVODrm7oXUG5yBd RfqNoocZ6qn600qrFp4C0OF14dotJDRPrmWVRn/HmM3mpy7z1DGNtXJD4ze8bLNS 9V19hyFS0bEZOxVQkiBvnxxq17rIHPyKLeBegnMreecH0jwpQUMzYGBs0ZlRCMWv +AM03zOiloeUTgeUcFz+aNytzolcRn4= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:39 2025 by rpki-client