$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa File: d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa (raw, json) Hash identifier: 3nzdJUf8yBat/aIv+FfJhyujtFG+NboN77Tq0kqnBxE= Subject key identifier: BF:7E:41:16:3F:99:73:5E:38:B8:BF:0B:63:02:B3:E8:F0:B7:4D:6B Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584B40819A92FC35E706C1486780 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa Signing time: Sat 20 Sep 2025 01:00:32 +0000 ROA not before: Sat 20 Sep 2025 01:00:32 +0000 ROA not after: Fri 19 Dec 2025 02:00:32 +0000 asID: 19165 IP address blocks: 136.31.192.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 Oct 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:40:81:9a:92:fc:35:e7:06:c1:48:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Sep 20 01:00:32 2025 GMT Not After : Dec 19 02:00:32 2025 GMT Subject: CN=9bf85fec-2597-464b-9de8-4b6c07c1228b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e5:31:c6:be:a5:88:b0:81:be:cf:c8:6f:2e: f1:67:be:16:63:8f:c7:e7:03:64:8c:b8:a0:6d:10: e5:d4:e5:eb:70:df:81:6d:09:f2:7b:8e:9f:c0:97: d4:01:9b:2e:29:f4:40:15:c1:f3:c2:f0:10:9b:92: 6c:8e:a6:e9:5a:55:8f:5e:97:9d:b9:44:78:fb:46: 16:93:ae:46:46:f5:68:87:e7:d0:4e:b2:52:df:d4: bd:e1:fa:8c:bd:bb:9e:dd:39:09:25:21:d4:25:8c: c5:93:93:a6:a3:de:88:9a:90:74:91:69:09:d2:86: 64:b1:03:b5:ff:ef:95:87:fe:68:2a:70:fa:14:3e: 6b:00:d6:6d:bd:d3:53:d7:87:ec:46:33:0a:6f:a8: 28:4f:b0:de:f0:bf:db:5d:34:74:33:80:81:c3:60: d3:22:a9:84:b2:0e:76:b9:f6:25:a9:c9:37:23:4e: 6e:e0:37:14:fa:0c:0c:94:f3:5c:e5:5b:bf:11:1a: 06:44:b8:89:c9:ad:41:2c:c3:ba:35:b8:a0:ae:e9: 92:cd:4b:4d:b9:7d:25:7c:99:e3:e3:d7:7d:76:90: 69:04:bd:32:c7:4c:ba:84:05:0b:eb:03:bb:50:6e: 3f:e5:d8:06:39:ec:b5:a1:da:1d:4c:3b:68:f8:95: fc:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:7E:41:16:3F:99:73:5E:38:B8:BF:0B:63:02:B3:E8:F0:B7:4D:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d5a4e555-7797-3f28-8c7a-e903f5c5991b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.31.192.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:3f:e2:25:fc:a1:44:27:ca:e7:a7:a6:c0:7c:ed:5c:8c:f8: be:81:17:1c:f0:52:d3:12:40:4c:e0:69:00:05:aa:9a:ea:fc: 98:4f:04:a1:d1:61:f0:8f:c6:da:08:bf:87:c0:6e:99:df:fb: 60:5c:47:7d:fd:9c:f1:b6:31:fd:8f:dc:ef:ea:5d:59:b1:91: 1e:56:94:78:cc:41:d0:7b:31:f7:e0:c1:d3:5b:5c:5e:39:87: fb:62:1f:99:4a:0b:fa:2b:b9:a6:4e:3f:66:18:b4:e1:57:e9: a1:7e:e4:4a:ab:ee:e9:1d:c4:73:27:65:8e:eb:05:98:77:d4: f0:67:48:56:45:3e:3b:f8:81:f0:ea:ed:df:f5:fb:50:9a:f1: af:cb:cd:0e:2a:0b:17:66:74:69:09:69:b7:0d:44:ef:df:47: 87:c8:75:2f:70:79:35:5b:84:2d:73:82:1f:eb:23:9d:9e:0f: 4f:9c:74:b5:60:9a:43:7b:8f:ea:e0:eb:3b:bd:e9:57:b7:90: 7b:0e:28:c4:29:70:b7:d4:db:8a:29:21:e2:69:07:a0:ff:1e: 4d:d6:49:3c:25:52:7a:58:00:40:b5:71:93:09:2f:a0:7e:71: f6:1c:1c:c2:f6:a1:c6:7e:a2:22:92:1a:5e:b9:f8:1c:3d:b7: c7:20:d3:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtAgZqS/DXnBsFIZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDkyMDAxMDAzMloXDTI1MTIxOTAyMDAzMlowLzEtMCsGA1UEAxMk OWJmODVmZWMtMjU5Ny00NjRiLTlkZTgtNGI2YzA3YzEyMjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmuUxxr6liLCBvs/Iby7xZ74WY4/H5wNkjLig bRDl1OXrcN+BbQnye46fwJfUAZsuKfRAFcHzwvAQm5JsjqbpWlWPXpeduUR4+0YW k65GRvVoh+fQTrJS39S94fqMvbue3TkJJSHUJYzFk5Omo96ImpB0kWkJ0oZksQO1 /++Vh/5oKnD6FD5rANZtvdNT14fsRjMKb6goT7De8L/bXTR0M4CBw2DTIqmEsg52 ufYlqck3I05u4DcU+gwMlPNc5Vu/ERoGRLiJya1BLMO6NbigrumSzUtNuX0lfJnj 49d9dpBpBL0yx0y6hAUL6wO7UG4/5dgGOey1ododTDto+JX81QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9+QRY/mXNeOLi/C2MCs+jwt01rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDVhNGU1NTUtNzc5Ny0z ZjI4LThjN2EtZTkwM2Y1YzU5OTFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB/AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHk/4iX8oUQnyuenpsB87VyM+L6BFxzwUtMSQEzgaQAFqprq/JhPBKHR YfCPxtoIv4fAbpnf+2BcR339nPG2Mf2P3O/qXVmxkR5WlHjMQdB7MffgwdNbXF45 h/tiH5lKC/oruaZOP2YYtOFX6aF+5Eqr7ukdxHMnZY7rBZh31PBnSFZFPjv4gfDq 7d/1+1Ca8a/LzQ4qCxdmdGkJabcNRO/fR4fIdS9weTVbhC1zgh/rI52eD0+cdLVg mkN7j+rg6zu96Ve3kHsOKMQpcLfU24opIeJpB6D/Hk3WSTwlUnpYAEC1cZMJL6B+ cfYcHML2ocZ+oiKSGl65+Bw9t8cg0xA= -----END CERTIFICATE-----Generated at Tue Oct 21 16:19:29 2025 by rpki-client