$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/836c83c2-0382-3f5c-86ae-622de11d33cd.roa File: 836c83c2-0382-3f5c-86ae-622de11d33cd.roa (raw, json) Hash identifier: HqY+ER1iSTtJeMurBR7SPkaQ5IE9xiDSG5pAZXrIu8g= Subject key identifier: 70:8D:01:F8:76:4C:9C:66:11:64:CE:44:D5:C2:DE:76:4D:90:F4:00 Certificate issuer: /CN=e76368c6-7013-4f98-819f-c6329c83d1c8 Certificate serial: 010D0C9F4328584B1167408E6A7ADD5DC2A1D0C0 Authority key identifier: 54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/836c83c2-0382-3f5c-86ae-622de11d33cd.roa Signing time: Wed 03 Sep 2025 04:04:29 +0000 ROA not before: Wed 03 Sep 2025 04:04:29 +0000 ROA not after: Tue 02 Dec 2025 05:04:29 +0000 asID: 16509 IP address blocks: 205.201.128.0/20 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:11:67:40:8e:6a:7a:dd:5d:c2:a1:d0:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e76368c6-7013-4f98-819f-c6329c83d1c8 Validity Not Before: Sep 3 04:04:29 2025 GMT Not After : Dec 2 05:04:29 2025 GMT Subject: CN=1516f709-a231-4e2b-b63b-4a88ead1879e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:a6:0c:7a:8a:a5:cd:88:06:d5:16:b9:31:c4: 9c:15:e6:f0:1a:84:4e:e5:dd:4d:ad:dd:cb:0c:74: dc:9a:5f:ca:2e:99:e7:4d:8e:fa:fe:b2:e8:39:c4: 0f:f3:6a:b5:c6:c4:b8:d4:3f:74:9d:69:3c:51:3a: 8e:22:db:fc:bb:81:88:0f:69:72:51:1d:dc:62:d0: 0d:83:6a:62:e2:99:56:d9:2d:a4:1a:66:8e:84:55: 40:50:2f:84:7e:23:c9:03:dc:07:8f:ac:8a:cd:ab: a7:78:52:63:04:c3:9c:c5:39:bc:e2:98:a2:3d:fc: d6:a1:84:4b:96:aa:d3:a5:58:bb:86:4e:63:c9:2a: 75:b1:e8:56:7c:33:87:12:af:16:79:be:77:b2:ac: be:cc:64:7b:b7:9f:29:d3:35:a5:8a:f7:91:54:fb: d5:1f:03:4c:63:1e:dd:5a:04:2f:07:96:9c:db:28: 44:11:b4:01:d3:59:1c:56:2f:a0:ab:c6:36:13:b2: 00:ec:7c:18:3e:a7:bb:96:2a:93:e9:a6:76:b7:3b: c3:56:7b:20:81:06:6a:88:e7:a3:85:f2:df:60:01: c7:8a:98:ea:13:ee:72:15:71:b2:25:34:98:95:f7: d1:be:10:2f:28:4b:58:7b:05:59:84:ce:25:33:39: 38:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:8D:01:F8:76:4C:9C:66:11:64:CE:44:D5:C2:DE:76:4D:90:F4:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/836c83c2-0382-3f5c-86ae-622de11d33cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8/e76368c6-7013-4f98-819f-c6329c83d1c8.crl X509v3 Authority Key Identifier: keyid:54:D3:BB:D3:22:94:EC:01:29:86:F8:67:56:E4:78:C1:EE:17:1F:3E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/e76368c6-7013-4f98-819f-c6329c83d1c8.cer sbgp-ipAddrBlock: critical IPv4: 205.201.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:d9:57:b6:46:30:32:98:9a:70:d7:f4:01:fd:ea:5e:3d:8d: de:f8:ad:0c:2c:21:fd:ae:b5:ba:63:9d:af:9d:91:6a:99:c7: 1d:cd:02:89:89:ea:b3:9b:16:25:d5:92:a7:0c:02:ef:66:b3: 02:47:07:cd:e3:f3:a9:84:2a:f8:6d:16:cd:52:25:ad:e8:f4: ba:e4:2e:1a:65:87:80:76:b9:fa:87:f1:85:ab:80:06:b1:b0: 68:79:ca:f8:80:bb:43:46:59:e8:61:9d:ad:8a:a8:2b:c9:e3: 49:d8:b0:59:52:de:26:35:95:38:6a:74:13:12:28:3f:8e:7a: 30:33:90:3c:7f:21:a9:8b:19:27:2c:b6:c2:9a:1f:8e:76:13: 92:1e:fb:4a:a9:d5:12:87:fa:f9:30:77:81:5a:ca:b3:6a:87: 7f:5f:7b:a0:24:80:96:ee:a0:c2:5d:9f:2e:13:5b:52:e8:95: c6:2b:4d:1d:a9:10:20:f7:1f:63:0c:12:e4:f1:a6:2f:bd:34: 55:8f:82:0d:39:b6:8b:cf:80:82:10:bb:e2:6a:a1:a1:28:b7: 20:b2:7c:65:50:10:1b:b9:eb:29:0c:0f:0a:56:99:55:23:06: 61:87:47:0a:1a:2a:54:a1:72:65:9c:47:46:46:89:17:06:d8: f5:e4:3c:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsRZ0COanrdXcKh0MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTc2MzY4YzYtNzAxMy00Zjk4LTgxOWYtYzYzMjljODNk MWM4MB4XDTI1MDkwMzA0MDQyOVoXDTI1MTIwMjA1MDQyOVowLzEtMCsGA1UEAxMk MTUxNmY3MDktYTIzMS00ZTJiLWI2M2ItNGE4OGVhZDE4NzllMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu6YMeoqlzYgG1Ra5McScFebwGoRO5d1Nrd3L DHTcml/KLpnnTY76/rLoOcQP82q1xsS41D90nWk8UTqOItv8u4GID2lyUR3cYtAN g2pi4plW2S2kGmaOhFVAUC+EfiPJA9wHj6yKzauneFJjBMOcxTm84piiPfzWoYRL lqrTpVi7hk5jySp1sehWfDOHEq8Web53sqy+zGR7t58p0zWliveRVPvVHwNMYx7d WgQvB5ac2yhEEbQB01kcVi+gq8Y2E7IA7HwYPqe7liqT6aZ2tzvDVnsggQZqiOej hfLfYAHHipjqE+5yFXGyJTSYlffRvhAvKEtYewVZhM4lMzk4zwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHCNAfh2TJxmEWTORNXC3nZNkPQAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9lNzYz NjhjNi03MDEzLTRmOTgtODE5Zi1jNjMyOWM4M2QxYzgvODM2YzgzYzItMDM4Mi0z ZjVjLTg2YWUtNjIyZGUxMWQzM2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZTc2MzY4YzYtNzAxMy00Zjk4LTgx OWYtYzYzMjljODNkMWM4L2U3NjM2OGM2LTcwMTMtNGY5OC04MTlmLWM2MzI5Yzgz ZDFjOC5jcmwwHwYDVR0jBBgwFoAUVNO70yKU7AEphvhnVuR4we4XHz4wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2 NS04MzA4LWRmMjU5N2UzNDNmOC9lNzYzNjhjNi03MDEzLTRmOTgtODE5Zi1jNjMy OWM4M2QxYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEzcmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnZV7ZGMDKYmnDX9AH96l49jd74rQwsIf2utbpjna+dkWqZxx3NAomJ 6rObFiXVkqcMAu9mswJHB83j86mEKvhtFs1SJa3o9LrkLhplh4B2ufqH8YWrgAax sGh5yviAu0NGWehhna2KqCvJ40nYsFlS3iY1lThqdBMSKD+OejAzkDx/IamLGScs tsKaH452E5Ie+0qp1RKH+vkwd4FayrNqh39fe6AkgJbuoMJdny4TW1LolcYrTR2p ECD3H2MMEuTxpi+9NFWPgg05tovPgIIQu+JqoaEotyCyfGVQEBu56ykMDwpWmVUj BmGHRwoaKlShcmWcR0ZGiRcG2PXkPCc= -----END CERTIFICATE-----Generated at Mon Oct 20 09:59:42 2025 by rpki-client