$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/731afc36-1a44-321a-8d91-ff1a74f1daba.roa File: 731afc36-1a44-321a-8d91-ff1a74f1daba.roa (raw, json) Hash identifier: V3t+IbUEDICEPU+nyDt3Rt/Hxv8TCTHzg+eyG/dfjLo= Subject key identifier: 76:B4:C2:84:5F:98:D4:58:D7:7E:86:F0:91:85:33:AD:77:82:EF:09 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B408198D815862A8749391F60 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/731afc36-1a44-321a-8d91-ff1a74f1daba.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.29.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:98:d8:15:86:2a:87:49:39:1f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=0b5d7ec8-720e-4f3b-8647-7a50a2085696 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:01:3d:fc:89:f5:5d:2c:f3:a3:c1:d0:7d:7a: 00:ca:d9:ab:89:d4:4f:0b:2f:77:07:ac:0d:f0:29: 3e:1d:51:18:02:74:b6:4b:18:1d:4a:66:17:b9:f2: e7:90:db:14:5c:45:b3:06:4f:c6:4d:79:e8:56:0b: a7:1a:b8:5b:e7:fd:ca:17:4b:8c:7c:07:64:6f:4e: 5e:b9:9c:28:da:b3:b3:4a:20:5e:5d:5c:39:99:24: 81:62:57:a0:d4:2b:e0:cf:27:ff:42:5e:f0:e4:33: c5:05:b3:a5:5a:5c:b1:54:ef:91:ef:b8:d6:e0:5e: bd:a6:52:82:e2:bf:d9:92:76:17:c2:0c:58:ad:87: b6:b6:c5:57:96:79:d4:42:2f:c9:d2:6a:78:3e:85: ef:0e:70:d5:cd:29:ea:42:c6:73:2f:cb:7f:21:b3: c3:ce:13:e7:c4:0f:67:e6:4c:25:f5:2e:82:25:e4: 95:2d:e1:c1:e0:a2:b7:ea:dc:a0:dc:44:50:5b:36: 7d:0e:ed:74:63:a3:67:3c:6b:2c:fa:a9:9b:a2:8c: ac:cc:ba:b7:2d:1d:31:8b:15:ea:c7:44:01:f3:75: 88:84:a3:d0:22:36:44:4a:fb:f3:28:65:ca:d8:14: f8:60:4a:7f:21:74:fb:5e:dd:2c:85:f0:ff:f3:e0: 9a:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:B4:C2:84:5F:98:D4:58:D7:7E:86:F0:91:85:33:AD:77:82:EF:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/731afc36-1a44-321a-8d91-ff1a74f1daba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0e:fa:dc:99:5e:bf:55:94:26:5a:4f:57:26:17:f1:97:78:b2: 19:3b:aa:d8:da:89:28:04:d2:43:f5:00:0d:77:e2:e3:91:f4: 5a:39:9c:14:4c:15:35:2a:ef:78:a3:a6:f7:67:28:87:45:63: 94:77:34:61:2f:b9:69:bb:87:c9:72:f8:5d:95:43:04:2e:bf: 13:f9:47:1e:75:e1:08:6f:47:bd:ee:e2:07:d8:9c:b5:7b:e8: 51:fb:42:7c:46:23:51:91:95:e0:2d:1b:c0:da:cf:04:e4:e9: 8b:70:26:6b:51:cc:89:53:85:31:a7:dd:8b:9b:c7:36:e0:2d: 89:97:a4:78:bf:40:48:42:55:86:6b:90:a4:e6:59:f5:e9:e7: 75:5b:47:7f:c1:db:4d:eb:b2:08:32:c3:42:94:ba:b5:a1:6a: 1e:0b:f5:59:ba:fb:86:80:e4:ae:68:17:87:a4:91:35:96:7c: ff:50:3a:6f:29:e6:6e:54:40:d5:1d:44:28:e1:42:41:9d:e0: fd:57:e6:db:2e:bc:98:0b:46:68:1d:7c:3a:22:e0:0e:cf:11: 82:1f:20:cc:44:c2:ca:c5:2d:21:7e:49:b4:7f:85:55:8a:f5: 4d:0f:e3:4a:a0:9f:58:ab:e8:93:d0:c3:18:52:f9:cb:20:41: 1e:f6:ba:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgZjYFYYqh0k5H2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MGI1ZDdlYzgtNzIwZS00ZjNiLTg2NDctN2E1MGEyMDg1Njk2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwE9/In1XSzzo8HQfXoAytmridRPCy93B6wN 8Ck+HVEYAnS2SxgdSmYXufLnkNsUXEWzBk/GTXnoVgunGrhb5/3KF0uMfAdkb05e uZwo2rOzSiBeXVw5mSSBYleg1Cvgzyf/Ql7w5DPFBbOlWlyxVO+R77jW4F69plKC 4r/ZknYXwgxYrYe2tsVXlnnUQi/J0mp4PoXvDnDVzSnqQsZzL8t/IbPDzhPnxA9n 5kwl9S6CJeSVLeHB4KK36tyg3ERQWzZ9Du10Y6NnPGss+qmbooyszLq3LR0xixXq x0QB83WIhKPQIjZESvvzKGXK2BT4YEp/IXT7Xt0shfD/8+CakQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHa0woRfmNRY136G8JGFM613gu8JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNzMxYWZjMzYtMWE0NC0z MjFhLThkOTEtZmYxYTc0ZjFkYWJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA763Jlev1WUJlpPVyYX8Zd4shk7qtjaiSgE0kP1AA134uOR9Fo5nBRM FTUq73ijpvdnKIdFY5R3NGEvuWm7h8ly+F2VQwQuvxP5Rx514QhvR73u4gfYnLV7 6FH7QnxGI1GRleAtG8DazwTk6YtwJmtRzIlThTGn3YubxzbgLYmXpHi/QEhCVYZr kKTmWfXp53VbR3/B203rsggyw0KUurWhah4L9Vm6+4aA5K5oF4ekkTWWfP9QOm8p 5m5UQNUdRCjhQkGd4P1X5tsuvJgLRmgdfDoi4A7PEYIfIMxEwsrFLSF+SbR/hVWK 9U0P40qgn1ir6JPQwxhS+csgQR72uvs= -----END CERTIFICATE-----Generated at Tue Oct 21 16:19:31 2025 by rpki-client