$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/145a2fb6-b806-3c2e-a916-f7603ded707e.roa File: 145a2fb6-b806-3c2e-a916-f7603ded707e.roa (raw, json) Hash identifier: m+GRkrefoCkaAjiKCE4wX9k2pIbm+1edC6DdDXLNIZk= Subject key identifier: 3D:D4:0E:AF:48:B5:55:5C:31:C5:D0:8D:30:43:FF:E0:2A:27:39:4A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA8F4DEEEAB28924B65A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/145a2fb6-b806-3c2e-a916-f7603ded707e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a8:f4:de:ee:ab:28:92:4b:65:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=37dabc80-a897-4a0e-8708-2585edcfef98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:89:be:2f:f6:2e:f7:8c:90:4e:9b:aa:04:cf: 42:f4:7d:d1:47:b5:e8:8a:26:5f:af:10:d1:58:5f: 0d:0c:73:e7:f6:b1:fd:b2:11:19:99:52:84:65:8d: 8a:00:5f:a0:3e:20:c0:a3:2d:76:52:44:09:ea:34: 96:a1:65:ab:89:08:b3:d7:47:81:a8:4f:08:96:fb: 28:5d:5d:e8:14:13:77:9d:06:a3:52:f5:db:1d:3b: 46:e3:97:7c:3a:87:ab:68:7f:a3:b8:0a:3c:98:b3: d9:0c:da:dd:3b:94:64:cb:bd:67:2c:3e:51:f5:e0: b4:74:75:51:00:19:37:07:d4:53:9e:9b:ee:2b:f4: ef:8a:b5:ba:fc:1a:4b:96:c8:5d:76:87:09:c4:93: 69:39:9d:28:07:0d:79:47:7b:34:6b:b1:ca:5e:0f: 03:5b:4f:9a:63:e4:c3:3b:d7:00:ce:79:94:b3:12: af:b0:80:28:c3:ca:0e:91:bf:8d:3b:6a:22:37:3b: 85:e7:ce:17:07:1d:6c:c8:d9:15:1c:d8:05:27:b5: a9:cf:59:00:97:fb:d9:92:8f:a8:a7:c5:5e:ff:0b: 52:b4:6e:4c:55:9a:71:b5:d8:16:a5:6a:6e:9c:32: cb:aa:2d:2c:ac:39:a5:38:c1:c3:69:bf:c0:cc:a5: ca:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D4:0E:AF:48:B5:55:5C:31:C5:D0:8D:30:43:FF:E0:2A:27:39:4A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/145a2fb6-b806-3c2e-a916-f7603ded707e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:9e:ec:46:90:f1:35:e3:7c:32:49:52:68:43:02:ef:3b:b4: 60:dd:65:69:64:71:95:63:d4:6b:a0:4f:28:b8:a9:fd:44:29: fb:bb:e7:52:3e:92:97:71:5d:ae:5e:11:53:eb:24:af:c7:d0: 06:9d:96:c2:88:a3:53:d8:ee:23:f5:25:0e:d4:0d:7f:2c:b8: 87:50:2e:06:fc:3a:fc:94:3b:f5:5b:fb:f2:1d:66:76:ec:79: 0f:d4:55:51:24:aa:58:a0:2f:6b:77:d2:3c:8c:67:d3:57:9e: dc:8d:33:c9:ce:e6:42:5a:d2:f4:65:29:a2:c0:89:f5:e7:91: cd:2e:d3:94:6b:fd:2c:08:5b:7e:72:48:4c:f6:96:26:b1:8e: 6c:b9:8b:e9:b7:44:7e:65:8b:15:a7:e6:a5:5e:77:67:a5:ab: e5:e8:24:e9:04:b7:e8:9c:91:b3:4d:06:d2:c0:da:a2:91:eb: b5:5e:b7:d8:f1:30:b4:72:3c:3f:bb:41:b7:fa:0b:a0:ed:a3: b3:59:c9:8c:1f:54:62:76:ac:3c:2f:7f:b8:58:01:40:21:a1: 4a:76:fc:ab:f2:2e:47:2f:9a:70:93:5f:a7:a4:c6:d1:f6:e1: a6:64:1f:7c:82:62:da:55:1b:45:d2:7d:48:b9:61:0c:fc:73: 73:c7:74:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKj03u6rKJJLZaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MzdkYWJjODAtYTg5Ny00YTBlLTg3MDgtMjU4NWVkY2ZlZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIm+L/Yu94yQTpuqBM9C9H3RR7XoiiZfrxDR WF8NDHPn9rH9shEZmVKEZY2KAF+gPiDAoy12UkQJ6jSWoWWriQiz10eBqE8Ilvso XV3oFBN3nQajUvXbHTtG45d8OoeraH+juAo8mLPZDNrdO5Rky71nLD5R9eC0dHVR ABk3B9RTnpvuK/TvirW6/BpLlshddocJxJNpOZ0oBw15R3s0a7HKXg8DW0+aY+TD O9cAznmUsxKvsIAow8oOkb+NO2oiNzuF584XBx1syNkVHNgFJ7Wpz1kAl/vZko+o p8Ve/wtStG5MVZpxtdgWpWpunDLLqi0srDmlOMHDab/AzKXKzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD3UDq9ItVVcMcXQjTBD/+AqJzlKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTQ1YTJmYjYtYjgwNi0z YzJlLWE5MTYtZjc2MDNkZWQ3MDdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABOe7EaQ8TXjfDJJUmhDAu87tGDdZWlkcZVj1GugTyi4qf1EKfu751I+ kpdxXa5eEVPrJK/H0AadlsKIo1PY7iP1JQ7UDX8suIdQLgb8OvyUO/Vb+/IdZnbs eQ/UVVEkqligL2t30jyMZ9NXntyNM8nO5kJa0vRlKaLAifXnkc0u05Rr/SwIW35y SEz2liaxjmy5i+m3RH5lixWn5qVed2elq+XoJOkEt+ickbNNBtLA2qKR67Vet9jx MLRyPD+7Qbf6C6Dto7NZyYwfVGJ2rDwvf7hYAUAhoUp2/KvyLkcvmnCTX6ekxtH2 4aZkH3yCYtpVG0XSfUi5YQz8c3PHdAo= -----END CERTIFICATE-----Generated at Wed Oct 8 23:11:48 2025 by rpki-client