$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa File: f4032855-3999-3acc-a472-e0f6cd12161b.roa (raw, json) Hash identifier: 1LL2NcYS2z/DXAGHx48bvcd8RilfRrfG8UZO2U8pnTg= Subject key identifier: 58:2A:80:A4:55:A5:A7:78:E7:B7:74:A9:91:F0:C4:08:06:6C:3E:3D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584AEF8BCD2890047D0F99AA6F00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 16591 IP address blocks: 136.53.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:cd:28:90:04:7d:0f:99:aa:6f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=445cae86-8a5f-4ac4-89a0-3ff9c7a6d750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:35:30:5d:df:64:ae:c8:ef:95:a6:bf:6d:d8: 16:e6:31:42:12:a7:aa:47:e0:20:86:c3:be:63:d8: 95:1e:2b:be:9b:34:65:62:c9:79:d6:40:1c:46:96: fe:9e:fa:60:28:54:51:a7:b0:5d:e1:19:f9:a6:86: 17:86:8d:d8:72:81:84:f8:33:d8:7a:10:49:d1:69: 91:06:a0:87:d2:95:cb:4a:31:8c:56:72:b5:3a:43: 92:76:e8:f3:03:2b:23:9a:ee:74:9b:2c:6e:7a:b7: ce:23:f6:ec:8d:f8:82:49:ed:27:b1:d4:08:57:af: aa:d7:17:8a:ca:4c:24:d9:f9:22:4f:cb:ca:f9:61: 55:28:50:97:da:20:21:39:8a:1f:75:f0:d6:5a:1d: ca:ed:7a:a8:27:71:13:11:66:f3:a7:39:35:ba:a1: 43:af:2d:fc:42:50:36:98:89:77:d1:74:32:64:2e: 49:9b:4d:88:d6:d8:e0:40:6e:54:ff:80:12:f2:ff: e2:1f:11:37:2e:db:c3:4a:7c:c6:d5:8c:e9:a8:65: 28:2b:4a:61:8d:70:ae:1a:b4:32:a8:4e:7f:9b:a6: fa:e7:12:51:ae:50:03:d2:c0:8a:5a:2b:d3:b7:41: 54:11:f9:bb:62:3e:27:ef:69:8e:5b:12:70:95:11: 83:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:2A:80:A4:55:A5:A7:78:E7:B7:74:A9:91:F0:C4:08:06:6C:3E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f4032855-3999-3acc-a472-e0f6cd12161b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:50:97:a3:42:ff:ba:2d:b0:64:30:a5:0e:9d:64:88:1e:24: 03:30:96:cd:16:a5:96:12:38:56:47:ba:dd:4e:08:25:84:dc: de:4b:13:2e:86:01:5b:62:f5:0e:bf:45:a8:56:f0:0d:5a:a9: d1:9f:09:0b:98:3c:5b:b0:b6:26:59:cc:76:eb:b3:61:a0:05: 15:bb:cc:32:fc:4a:d4:cb:a2:a6:dc:6b:6d:75:e3:72:18:cd: e8:be:9a:06:d6:c3:ea:f2:54:e6:9c:db:f0:49:b2:24:59:15: e9:10:aa:9e:c5:7d:3e:22:aa:19:7e:e5:82:d5:6f:a0:b7:bf: 55:f1:ea:b6:42:66:28:81:e7:5b:ee:3e:3e:22:95:db:eb:c6: 45:5c:4f:70:83:e4:18:ee:a3:11:b7:89:05:88:aa:df:21:21: 88:32:ed:55:46:f9:0e:23:59:e0:a9:e7:14:5c:30:82:22:44: 94:46:88:3a:8c:07:3e:cc:c1:ba:ce:ac:22:66:16:37:05:86: e0:4b:d6:de:1c:3f:90:92:22:63:38:6f:45:e1:9d:55:99:59: b8:01:cf:ee:f6:90:28:38:61:70:ec:0e:47:7c:6f:fc:98:32: 8e:d9:03:00:7a:e2:49:b2:ad:fb:e1:67:b9:be:2e:a8:9f:34: cc:d5:e4:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi80okAR9D5mqbwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NDQ1Y2FlODYtOGE1Zi00YWM0LTg5YTAtM2ZmOWM3YTZkNzUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDUwXd9krsjvlaa/bdgW5jFCEqeqR+AghsO+ Y9iVHiu+mzRlYsl51kAcRpb+nvpgKFRRp7Bd4Rn5poYXho3YcoGE+DPYehBJ0WmR BqCH0pXLSjGMVnK1OkOSdujzAysjmu50myxuerfOI/bsjfiCSe0nsdQIV6+q1xeK ykwk2fkiT8vK+WFVKFCX2iAhOYofdfDWWh3K7XqoJ3ETEWbzpzk1uqFDry38QlA2 mIl30XQyZC5Jm02I1tjgQG5U/4AS8v/iHxE3LtvDSnzG1YzpqGUoK0phjXCuGrQy qE5/m6b65xJRrlAD0sCKWivTt0FUEfm7Yj4n72mOWxJwlRGD0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFgqgKRVpad457d0qZHwxAgGbD49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjQwMzI4NTUtMzk5OS0z YWNjLWE0NzItZTBmNmNkMTIxNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDXAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACRQl6NC/7otsGQwpQ6dZIgeJAMwls0WpZYSOFZHut1OCCWE3N5LEy6G AVti9Q6/RahW8A1aqdGfCQuYPFuwtiZZzHbrs2GgBRW7zDL8StTLoqbca21143IY zei+mgbWw+ryVOac2/BJsiRZFekQqp7FfT4iqhl+5YLVb6C3v1Xx6rZCZiiB51vu Pj4ildvrxkVcT3CD5BjuoxG3iQWIqt8hIYgy7VVG+Q4jWeCp5xRcMIIiRJRGiDqM Bz7MwbrOrCJmFjcFhuBL1t4cP5CSImM4b0XhnVWZWbgBz+72kCg4YXDsDkd8b/yY Mo7ZAwB64kmyrfvhZ7m+LqifNMzV5BU= -----END CERTIFICATE-----Generated at Sun Aug 24 05:20:31 2025 by rpki-client