$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa File: 1e781fae-e632-3ad2-897b-adff15914591.roa (raw, json) Hash identifier: t/36E7pTDl+w6CLZTJsDa0G8JIiD/54NaFoVnAEz3jA= Subject key identifier: F2:5D:9C:87:A1:E4:BA:CF:D8:5D:88:E4:A4:B8:88:BC:36:2E:06:23 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9E13970293231C266280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.57.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9e:13:97:02:93:23:1c:26:62:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=23b2db59-94bb-4f3a-a212-64f241f18995 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:69:c4:90:8f:14:62:c4:1c:d1:2c:7d:b5:1e: 12:3c:40:46:c6:c6:47:fc:28:79:ba:3f:d9:51:b5: e0:84:d1:24:b5:4b:19:fa:1e:0c:c9:26:67:1b:cf: a8:84:f8:79:c9:5c:26:1a:ae:3b:22:9f:8e:3a:7f: 95:a4:f0:76:8d:b8:43:cb:a6:06:31:db:05:7d:4d: b8:86:33:b7:28:7f:a3:51:db:e5:cb:01:b3:01:fe: 91:cf:06:63:c3:3c:7d:ce:58:48:15:2e:07:61:c9: d2:60:d1:be:1a:c1:5a:ef:1a:eb:a1:f4:43:9d:a6: d4:72:f4:bc:1b:fd:dd:d9:3d:ba:84:c7:fa:f8:50: 59:ea:6e:c9:08:b6:bb:4f:e6:fb:3c:e1:22:75:f9: 64:5f:53:38:e0:40:e6:cc:33:31:ab:fb:31:a1:62: da:3a:19:26:17:d2:a5:1f:e6:05:64:b9:1e:44:88: 60:19:4a:dd:12:87:ae:49:e9:5b:ac:30:ba:0e:fe: cd:f9:ef:87:7a:9f:c8:79:6b:0a:40:d5:56:46:98: f4:ca:cf:6a:f6:1f:9e:44:40:25:f9:21:e1:17:e7: e7:5a:ca:ba:56:20:86:98:d0:7b:20:65:3e:3b:d3: 64:77:d0:96:86:50:97:c9:7b:ab:26:cf:15:73:65: 0a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:5D:9C:87:A1:E4:BA:CF:D8:5D:88:E4:A4:B8:88:BC:36:2E:06:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:1d:b8:6f:47:3d:1e:5b:25:f2:42:e8:33:5b:e7:29:f7:15: 0e:e1:96:99:63:74:96:5e:7f:3a:24:63:f9:1a:6c:c5:e6:09: 16:af:41:4c:5a:d3:6c:a1:4e:1f:12:3e:88:12:9f:a9:21:52: 99:ad:05:6b:6c:66:b3:ac:d8:f2:1c:df:31:73:8f:b6:a1:9d: 4f:94:60:04:30:70:5c:89:92:2a:40:b1:84:a0:4e:05:01:18: 23:de:d2:6d:c6:42:0f:07:5f:33:c7:db:20:c2:d5:77:2e:17: 08:fe:33:1b:d8:a3:72:e0:b9:e8:44:55:e7:e9:60:42:fd:34: 1f:18:79:38:15:92:e9:5b:79:27:12:4f:16:00:20:48:92:e5: da:7d:22:25:09:86:f8:5f:25:bc:d8:d8:e7:81:1a:71:1a:8b: 4e:8a:ec:43:c0:48:ed:d1:9e:9b:dd:61:15:90:cc:df:6c:4e: 68:7e:75:c6:a8:43:e8:b7:65:a3:52:d2:e4:6d:61:22:d5:51: b9:20:83:de:53:0d:db:7c:82:89:a3:ae:9f:14:23:c6:1d:76: 66:ec:1b:6f:8c:a2:e0:82:e3:5d:bc:78:09:12:ea:0d:d9:71: 84:42:39:0d:bf:c6:8d:b4:b4:ed:6f:ec:81:f2:6a:f4:91:fd: 44:63:95:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJ4TlwKTIxwmYoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MjNiMmRiNTktOTRiYi00ZjNhLWEyMTItNjRmMjQxZjE4OTk1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGnEkI8UYsQc0Sx9tR4SPEBGxsZH/Ch5uj/Z UbXghNEktUsZ+h4MySZnG8+ohPh5yVwmGq47Ip+OOn+VpPB2jbhDy6YGMdsFfU24 hjO3KH+jUdvlywGzAf6RzwZjwzx9zlhIFS4HYcnSYNG+GsFa7xrrofRDnabUcvS8 G/3d2T26hMf6+FBZ6m7JCLa7T+b7POEidflkX1M44EDmzDMxq/sxoWLaOhkmF9Kl H+YFZLkeRIhgGUrdEoeuSelbrDC6Dv7N+e+Hep/IeWsKQNVWRpj0ys9q9h+eREAl +SHhF+fnWsq6ViCGmNB7IGU+O9Nkd9CWhlCXyXurJs8Vc2UKxwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPJdnIeh5LrP2F2I5KS4iLw2LgYjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWU3ODFmYWUtZTYzMi0z YWQyLTg5N2ItYWRmZjE1OTE0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHwduG9HPR5bJfJC6DNb5yn3FQ7hlpljdJZefzokY/kabMXmCRavQUxa 02yhTh8SPogSn6khUpmtBWtsZrOs2PIc3zFzj7ahnU+UYAQwcFyJkipAsYSgTgUB GCPe0m3GQg8HXzPH2yDC1XcuFwj+MxvYo3LguehEVefpYEL9NB8YeTgVkulbeScS TxYAIEiS5dp9IiUJhvhfJbzY2OeBGnEai06K7EPASO3RnpvdYRWQzN9sTmh+dcao Q+i3ZaNS0uRtYSLVUbkgg95TDdt8gomjrp8UI8YddmbsG2+MouCC4128eAkS6g3Z cYRCOQ2/xo20tO1v7IHyavSR/URjles= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:01 2025 by rpki-client