$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/95a5b0fd-0d6d-368e-98a5-9b98bf709929.roa File: 95a5b0fd-0d6d-368e-98a5-9b98bf709929.roa (raw, json) Hash identifier: fp0x7qEXlTuTNfG+BkQ1mp8Pa4LF3nnbPUzX/hjjgb0= Subject key identifier: 77:B5:EC:AD:CC:D9:D9:A5:08:7B:9D:A1:47:E1:59:5E:81:75:75:91 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B408199178912C552DF3AA400 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/95a5b0fd-0d6d-368e-98a5-9b98bf709929.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.29.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:99:17:89:12:c5:52:df:3a:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=5b1088ee-2d01-4d2f-b2e3-a3182c6949cc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:06:e5:57:e0:1d:24:0f:2a:07:d4:e6:d2:ff: 97:da:c9:65:8d:1e:44:08:a5:d9:ef:3d:76:8c:a3: 45:a3:ea:ed:d8:70:9a:68:70:50:81:82:80:cf:1d: 7b:88:27:63:0c:11:3a:5b:84:a4:72:fa:b4:f0:ef: 47:fd:56:03:2b:18:87:ae:d8:7b:a5:06:e4:63:13: 7e:00:4c:09:b4:05:44:1a:71:38:c1:b3:70:90:bf: 24:cc:ca:27:83:f4:eb:c2:5b:54:90:8a:36:48:29: 58:d3:cc:65:13:5d:3d:e2:5d:53:36:0b:02:4a:8e: 3a:16:8a:fe:b4:a0:97:c7:77:9a:e3:c3:c9:07:1c: 43:d7:12:aa:93:7d:e3:9e:f5:15:c0:14:71:cd:5b: 2e:f2:ab:74:5d:5d:55:98:ae:51:79:65:6a:b8:f3: 48:7f:21:22:41:f9:7f:bf:a8:fd:df:54:60:a0:34: 10:fe:ca:fe:10:a5:5d:50:e0:95:f2:d5:39:69:b6: bb:55:4b:8d:ad:18:87:68:b7:0b:34:b9:1a:9f:d2: 5f:74:4b:af:ee:41:96:d7:c2:53:85:76:e6:c1:50: 91:f8:dd:0d:81:e8:90:3d:7c:56:e9:7e:7c:0d:c9: b5:95:e1:d5:54:50:5c:f1:e1:e1:fe:69:00:a3:2d: 81:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:B5:EC:AD:CC:D9:D9:A5:08:7B:9D:A1:47:E1:59:5E:81:75:75:91 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/95a5b0fd-0d6d-368e-98a5-9b98bf709929.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:0d:e0:25:c4:c1:85:37:ea:0d:93:fd:03:e6:f3:3e:dc:c4: 0d:fb:b8:8e:b9:d8:e6:77:5a:6e:3e:5e:bd:81:b8:ae:46:fc: d1:7c:6f:39:24:48:2e:5e:b0:2f:67:a2:5f:ed:36:0f:5a:89: fa:b2:a7:47:1c:28:c6:62:85:61:2c:f1:96:4a:72:4e:87:2a: b2:18:37:bc:37:01:40:14:95:69:2e:e7:d6:c0:b6:e6:fc:dd: 14:ad:00:62:91:03:8f:2c:ca:6e:c2:c8:db:0e:54:2b:81:3e: 6a:86:3c:16:9f:7f:05:66:82:2e:b3:09:88:38:4e:5d:da:64: c8:e1:c4:10:66:ad:26:3c:69:5c:b8:b2:4e:46:d6:a5:5e:11: c5:1c:3d:2f:52:47:79:e7:6e:ce:96:05:5a:cb:45:42:c4:f9: 73:40:ef:bc:dc:68:f4:d0:99:55:ae:20:86:f5:5a:83:54:c4: a3:5d:2a:75:cf:99:85:be:17:ab:c7:e4:89:f9:c7:33:8d:b8: df:aa:65:96:44:6d:13:74:70:1a:d0:a5:06:e9:06:8b:67:e5: 7c:26:e7:15:b7:74:40:85:b1:3b:53:a4:0a:32:29:aa:e4:fd: 46:86:91:84:c8:e9:1b:85:10:b2:7a:82:71:25:0e:42:44:57: 8f:43:da:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgZkXiRLFUt86pAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk NWIxMDg4ZWUtMmQwMS00ZDJmLWIyZTMtYTMxODJjNjk0OWNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwblV+AdJA8qB9Tm0v+X2slljR5ECKXZ7z12 jKNFo+rt2HCaaHBQgYKAzx17iCdjDBE6W4Skcvq08O9H/VYDKxiHrth7pQbkYxN+ AEwJtAVEGnE4wbNwkL8kzMong/TrwltUkIo2SClY08xlE1094l1TNgsCSo46For+ tKCXx3ea48PJBxxD1xKqk33jnvUVwBRxzVsu8qt0XV1VmK5ReWVquPNIfyEiQfl/ v6j931RgoDQQ/sr+EKVdUOCV8tU5aba7VUuNrRiHaLcLNLkan9JfdEuv7kGW18JT hXbmwVCR+N0NgeiQPXxW6X58Dcm1leHVVFBc8eHh/mkAoy2BQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHe17K3M2dmlCHudoUfhWV6BdXWRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvOTVhNWIwZmQtMGQ2ZC0z NjhlLTk4YTUtOWI5OGJmNzA5OTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMN4CXEwYU36g2T/QPm8z7cxA37uI652OZ3Wm4+Xr2BuK5G/NF8bzkk SC5esC9nol/tNg9aifqyp0ccKMZihWEs8ZZKck6HKrIYN7w3AUAUlWku59bAtub8 3RStAGKRA48sym7CyNsOVCuBPmqGPBaffwVmgi6zCYg4Tl3aZMjhxBBmrSY8aVy4 sk5G1qVeEcUcPS9SR3nnbs6WBVrLRULE+XNA77zcaPTQmVWuIIb1WoNUxKNdKnXP mYW+F6vH5In5xzONuN+qZZZEbRN0cBrQpQbpBotn5Xwm5xW3dECFsTtTpAoyKark /UaGkYTI6RuFELJ6gnElDkJEV49D2lE= -----END CERTIFICATE-----Generated at Tue Oct 21 16:19:30 2025 by rpki-client