$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a66d65c6-38dc-319d-89de-c18ae77dc637.roa File: a66d65c6-38dc-319d-89de-c18ae77dc637.roa (raw, json) Hash identifier: Kwp2Qs8cFXuX7r5ntUzAk+/kEtP7n6JDCmGwBzqU6Is= Subject key identifier: 40:85:47:C3:0C:B6:B0:C5:FB:73:FA:6B:DC:44:A3:40:21:28:1C:5C Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584B1A4EE5EDAC12D04F4C1D5600 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a66d65c6-38dc-319d-89de-c18ae77dc637.roa Signing time: Sat 06 Sep 2025 08:37:41 +0000 ROA not before: Sat 06 Sep 2025 08:37:41 +0000 ROA not after: Fri 05 Dec 2025 09:37:41 +0000 asID: 396982 IP address blocks: 136.109.128.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 21 Sep 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:1a:4e:e5:ed:ac:12:d0:4f:4c:1d:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 6 08:37:41 2025 GMT Not After : Dec 5 09:37:41 2025 GMT Subject: CN=a1ee8b75-1cd7-4ee2-8593-a3fa1fb4f27c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a8:f3:ca:00:0f:60:03:1d:a7:69:62:91:c7: e5:39:97:d1:f6:0c:29:7b:49:77:4d:60:e6:08:af: c8:40:eb:fa:d6:cf:f1:03:4a:27:13:56:e7:1d:13: 09:81:fa:ff:f6:1b:20:b3:94:e2:f8:41:a6:a9:f6: 58:1b:cd:47:b8:f3:70:e0:69:52:06:4c:55:18:11: d8:82:69:d2:b2:99:a8:dc:f0:8a:94:d3:c4:cf:2d: fe:77:9f:2a:15:ea:70:86:a8:2e:38:db:b3:8e:e8: 93:a1:1f:53:36:b3:94:22:73:25:5b:6c:01:4d:a1: 8e:08:e5:4c:ae:dc:d3:b1:e1:d3:bd:3e:76:68:89: bb:b7:76:c8:3d:b6:22:a5:33:e6:08:ea:ca:63:49: ad:7b:bf:53:6d:03:91:34:26:31:5f:36:28:46:58: 10:f1:91:ee:0b:42:ee:21:16:90:2b:dd:3a:54:9c: 64:93:e8:7e:11:c9:31:55:f3:31:9b:21:a0:11:e0: 4d:9e:7c:a2:b5:86:0b:b0:8c:30:18:1c:8e:4b:c3: f2:f0:11:dd:a2:4c:72:e0:77:32:7b:9e:ee:48:cb: a3:f3:77:7f:d3:64:1f:f4:7e:85:d1:11:f3:ef:87: 06:73:f2:02:e0:9f:29:03:6f:6e:63:27:01:83:22: 92:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:85:47:C3:0C:B6:B0:C5:FB:73:FA:6B:DC:44:A3:40:21:28:1C:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/a66d65c6-38dc-319d-89de-c18ae77dc637.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.109.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:f3:24:1b:1d:47:73:31:b8:15:2d:dd:89:dd:d0:af:69:d6: b7:23:6f:1a:d4:11:79:77:9a:18:d2:91:81:04:0a:33:8d:50: 76:bf:28:e7:de:fc:cc:d9:69:63:33:62:f1:a5:e2:d6:68:65: 79:91:59:f9:5d:95:87:8a:b5:90:7e:0e:c5:05:4e:51:04:ec: 36:a1:0d:b7:7e:7a:e1:0d:e8:05:8d:a3:05:13:d3:62:26:57: 7e:d8:54:d4:fb:62:2d:18:c4:58:4a:b2:51:16:28:58:03:e3: 33:b0:ec:44:12:aa:14:47:ea:bc:13:c4:f9:6b:6f:ad:44:53: eb:e1:5e:46:b8:8a:22:99:75:90:cd:95:bd:3c:42:af:3c:80: d5:64:49:02:52:3a:7d:15:11:c4:3d:94:e5:81:73:6a:df:da: f2:a7:44:da:a4:62:45:e3:a2:26:84:13:dc:1f:6c:f9:ce:b0: da:86:b7:4a:2a:81:8e:e5:08:6a:59:55:85:64:79:8a:0f:5f: 05:b2:1d:99:84:8b:79:4e:2c:a0:3a:b1:30:03:0d:03:f3:ed: 44:39:f4:b6:dc:49:d2:72:03:70:77:12:51:be:b8:79:94:e5: d6:5d:2c:d9:6c:05:4e:1e:92:70:57:bd:aa:84:6d:75:98:4f: 38:64:23:4d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsaTuXtrBLQT0wdVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDkwNjA4Mzc0MVoXDTI1MTIwNTA5Mzc0MVowLzEtMCsGA1UEAxMk YTFlZThiNzUtMWNkNy00ZWUyLTg1OTMtYTNmYTFmYjRmMjdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxajzygAPYAMdp2likcflOZfR9gwpe0l3TWDm CK/IQOv61s/xA0onE1bnHRMJgfr/9hsgs5Ti+EGmqfZYG81HuPNw4GlSBkxVGBHY gmnSspmo3PCKlNPEzy3+d58qFepwhqguONuzjuiToR9TNrOUInMlW2wBTaGOCOVM rtzTseHTvT52aIm7t3bIPbYipTPmCOrKY0mte79TbQORNCYxXzYoRlgQ8ZHuC0Lu IRaQK906VJxkk+h+EckxVfMxmyGgEeBNnnyitYYLsIwwGByOS8Py8BHdokxy4Hcy e57uSMuj83d/02Qf9H6F0RHz74cGc/IC4J8pA29uYycBgyKSvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECFR8MMtrDF+3P6a9xEo0AhKBxcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYTY2ZDY1YzYtMzhkYy0z MTlkLTg5ZGUtYzE4YWU3N2RjNjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiG2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzzJBsdR3MxuBUt3Ynd0K9p1rcjbxrUEXl3mhjSkYEECjONUHa/KOfe /MzZaWMzYvGl4tZoZXmRWfldlYeKtZB+DsUFTlEE7DahDbd+euEN6AWNowUT02Im V37YVNT7Yi0YxFhKslEWKFgD4zOw7EQSqhRH6rwTxPlrb61EU+vhXka4iiKZdZDN lb08Qq88gNVkSQJSOn0VEcQ9lOWBc2rf2vKnRNqkYkXjoiaEE9wfbPnOsNqGt0oq gY7lCGpZVYVkeYoPXwWyHZmEi3lOLKA6sTADDQPz7UQ59LbcSdJyA3B3ElG+uHmU 5dZdLNlsBU4eknBXvaqEbXWYTzhkI00= -----END CERTIFICATE-----Generated at Fri Sep 19 07:26:59 2025 by rpki-client