$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa File: a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa (raw, json) Hash identifier: 6ZBkpZzro8beRy0BD6cv0y7pXyOXu+JkXmEU16FYDvM= Subject key identifier: 78:28:81:B2:B8:F1:FA:7C:53:56:95:35:B9:44:AA:58:6F:A7:A3:01 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B4081CBEB8EABCC921F7189E0 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:cb:eb:8e:ab:cc:92:1f:71:89:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=228d54fa-6f42-4a2d-85d6-e08f7ff2a6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:12:d0:2f:c3:e6:f0:c1:5e:a7:7d:48:74:4b: 29:3e:88:ba:0b:e7:30:e9:88:50:77:05:54:05:70: e5:5c:30:ce:56:66:9d:c5:77:55:cb:0c:a4:e0:63: 65:ee:32:77:fe:20:9c:b6:87:42:f8:77:4a:99:ee: a4:8b:71:9f:52:b1:55:81:2f:f3:8b:69:0f:09:5f: 00:8d:15:2b:ae:f8:5c:e0:dc:24:8e:78:d4:63:4b: 05:a1:40:f6:fc:54:61:92:af:2a:bb:b7:30:31:9f: 03:99:d7:39:c3:f7:6a:51:95:a4:4a:44:0c:46:69: b2:c1:b0:c1:7a:39:a6:1e:b7:21:49:72:23:36:de: 58:31:41:62:cf:1a:6d:74:1a:59:b9:d8:cc:a8:72: fd:8b:8a:12:c2:e1:01:10:82:8a:a0:cf:40:c0:66: e3:55:35:36:22:bd:f0:8e:2c:bb:d2:76:db:80:98: bf:42:8f:31:04:f6:88:a1:40:c7:23:97:20:f7:84: 37:bf:4d:a2:32:cf:48:5e:d9:ad:92:77:a8:53:d8: 2e:40:d2:e9:94:10:88:40:92:f9:c7:9b:2d:a0:cb: ca:65:9e:6e:75:47:cf:c1:75:08:9f:ae:1b:b5:b8: c5:98:f1:15:0e:57:fa:be:46:de:fc:0a:68:71:f4: 2c:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:28:81:B2:B8:F1:FA:7C:53:56:95:35:B9:44:AA:58:6F:A7:A3:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:11:44:70:b6:9e:a1:a2:5b:74:d2:e8:5f:9d:ab:0d:84:e0: ef:c6:a7:62:75:5c:77:6e:ca:96:ce:9e:08:f4:bc:e4:07:5c: da:2b:b6:93:f7:ad:b4:3e:55:b8:39:5b:95:57:0b:21:72:32: 9f:43:7d:8b:55:9d:16:d4:ab:8a:a2:3e:9f:d6:ba:90:f4:d9: a4:57:5c:4b:42:91:53:6c:33:c2:fb:f8:3d:1c:5e:5f:4f:9f: 60:0c:77:70:34:29:a7:ce:4e:ee:18:85:d4:fb:8e:5c:ce:2e: bc:f2:61:8a:13:62:c9:96:80:0b:67:69:7d:c1:2c:5e:dd:43: 61:b1:83:2b:e3:27:41:b8:47:91:cf:1f:ff:a2:fb:18:18:2b: 0c:c7:a3:b2:75:c3:d4:6f:2c:d7:61:e7:61:cb:ae:e5:29:ea: 5e:0d:35:1b:7c:e6:9c:8d:4c:ef:07:c9:7b:7e:9f:cb:c7:83: df:ff:0a:95:33:2e:20:cc:84:60:bb:83:2d:5d:b0:ba:38:48: a9:4f:f3:58:38:e1:a1:e1:6d:17:af:e4:1e:14:51:e5:23:f4: 31:4d:31:de:bd:6a:84:1e:43:bd:d4:ce:06:c0:c7:f6:d5:98: 47:e8:20:12:3a:9d:d2:f9:1a:a7:e8:cc:95:7f:b7:d2:1d:fa: 31:4e:38:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgcvrjqvMkh9xieAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk MjI4ZDU0ZmEtNmY0Mi00YTJkLTg1ZDYtZTA4ZjdmZjJhNmRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRLQL8Pm8MFep31IdEspPoi6C+cw6YhQdwVU BXDlXDDOVmadxXdVywyk4GNl7jJ3/iCctodC+HdKme6ki3GfUrFVgS/zi2kPCV8A jRUrrvhc4NwkjnjUY0sFoUD2/FRhkq8qu7cwMZ8Dmdc5w/dqUZWkSkQMRmmywbDB ejmmHrchSXIjNt5YMUFizxptdBpZudjMqHL9i4oSwuEBEIKKoM9AwGbjVTU2Ir3w jiy70nbbgJi/Qo8xBPaIoUDHI5cg94Q3v02iMs9IXtmtkneoU9guQNLplBCIQJL5 x5stoMvKZZ5udUfPwXUIn64btbjFmPEVDlf6vkbe/ApocfQsKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHgogbK48fp8U1aVNblEqlhvp6MBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTA4YjViMGYtMWUyNy0z YzllLTg4MjAtZWM3YjY0OWU1NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEERRHC2nqGiW3TS6F+dqw2E4O/Gp2J1XHduypbOngj0vOQHXNortpP3 rbQ+Vbg5W5VXCyFyMp9DfYtVnRbUq4qiPp/WupD02aRXXEtCkVNsM8L7+D0cXl9P n2AMd3A0KafOTu4YhdT7jlzOLrzyYYoTYsmWgAtnaX3BLF7dQ2GxgyvjJ0G4R5HP H/+i+xgYKwzHo7J1w9RvLNdh52HLruUp6l4NNRt85pyNTO8HyXt+n8vHg9//CpUz LiDMhGC7gy1dsLo4SKlP81g44aHhbRev5B4UUeUj9DFNMd69aoQeQ73UzgbAx/bV mEfoIBI6ndL5GqfozJV/t9Id+jFOOCU= -----END CERTIFICATE-----Generated at Tue Oct 21 16:20:30 2025 by rpki-client