$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa File: 3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa (raw, json) Hash identifier: o0MA4Q/6wtrW/vd/PwuYWYSCs71CjOvn+UdUPCJWEDs= Subject key identifier: B1:9B:3F:2A:AB:E3:BA:42:59:09:3C:CE:9A:CE:8F:3D:C5:66:7A:58 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C679BAC2A2AC03C3D0200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.60.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:67:9b:ac:2a:2a:c0:3c:3d:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e8b24b01-36d2-41a1-8e29-f282fa6b0b86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:03:ef:73:bf:7a:9e:80:12:a4:13:7d:f8:60: 8e:a0:da:9e:71:9b:1d:84:1f:08:75:f9:a4:d4:ba: f7:3f:e3:c0:ae:fb:ae:c3:23:f9:34:bc:4e:36:6b: 36:60:40:ae:f7:b8:af:27:71:a1:bf:05:3e:46:44: 76:a5:b2:5a:2e:81:62:f7:8b:2c:a2:c8:e8:1b:c2: b7:64:70:48:9a:e6:12:c7:c5:79:95:d4:ac:9a:1e: af:28:a9:1a:cc:55:64:aa:e9:d1:ec:13:c0:e8:88: b4:43:16:98:1a:da:09:6c:b6:7a:67:8d:b6:43:0a: 99:91:bf:5a:5d:d7:ff:9e:66:68:9f:f3:f9:50:81: bd:c4:d4:8a:92:02:52:e9:36:41:89:2e:e3:a2:2d: 4c:32:1e:c6:96:bc:d3:03:9d:a6:76:3a:a7:53:17: 4c:eb:d6:ac:79:06:fe:16:d8:a2:f1:23:c4:99:19: df:62:fa:2e:3e:4a:ad:03:c9:73:ba:71:2d:37:df: 57:75:42:88:9a:23:e9:00:55:f9:d0:47:61:3b:5c: 03:84:44:8a:11:3c:29:50:f5:db:a7:06:88:c4:6b: 50:47:e6:68:e0:a7:28:37:25:db:93:06:84:6d:ad: ee:67:fc:b2:45:a0:22:8b:63:19:a7:0d:84:32:a4: 1f:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:9B:3F:2A:AB:E3:BA:42:59:09:3C:CE:9A:CE:8F:3D:C5:66:7A:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3aed9e7a-24b1-33b5-8673-9c84b8cfa12a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:66:4e:6b:aa:24:09:25:b6:33:82:81:51:1f:8f:85:c7:a4: 0a:3b:78:81:68:80:e0:9d:cc:68:36:e6:95:99:68:eb:3c:91: e7:7a:16:09:0e:fa:4e:5b:ad:b2:58:13:de:fb:83:cf:aa:c3: 04:97:f9:8a:00:22:1b:2d:ff:5d:5a:31:a2:22:fe:8e:ff:9c: 78:d5:d1:11:ed:c3:ec:88:bd:7e:e1:8a:e5:dd:99:92:92:fe: c1:f5:01:8e:65:b6:ec:35:1f:32:87:9e:27:72:e6:fd:02:f7: 4c:2b:fa:7c:cb:a7:a8:ad:4c:e1:f8:7f:68:93:83:ce:e7:eb: 0b:a1:a4:2b:f1:c4:01:f2:2c:bc:be:55:ac:0b:ee:72:d8:e7: ad:14:ad:da:8e:4f:48:22:dc:19:25:65:55:8f:cb:b5:88:17: 35:8f:38:7b:73:09:82:04:cf:06:20:4d:6e:62:70:c9:1c:5b: 64:13:4b:95:8b:e5:2a:2b:42:0b:d0:29:0a:28:60:d0:db:6d: 66:1e:e6:6a:d9:22:3f:df:11:06:1a:e9:85:51:ef:aa:29:d4: 60:0f:f4:8c:8e:6c:d0:33:61:58:6f:27:ac:04:15:a6:6f:be: 7e:88:a6:e7:52:35:b2:38:46:68:6d:b4:46:55:09:d4:36:3f: fd:87:5b:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGebrCoqwDw9AgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZThiMjRiMDEtMzZkMi00MWExLThlMjktZjI4MmZhNmIwYjg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqAPvc796noASpBN9+GCOoNqecZsdhB8Idfmk 1Lr3P+PArvuuwyP5NLxONms2YECu97ivJ3GhvwU+RkR2pbJaLoFi94ssosjoG8K3 ZHBImuYSx8V5ldSsmh6vKKkazFVkqunR7BPA6Ii0QxaYGtoJbLZ6Z422QwqZkb9a Xdf/nmZon/P5UIG9xNSKkgJS6TZBiS7joi1MMh7GlrzTA52mdjqnUxdM69aseQb+ Ftii8SPEmRnfYvouPkqtA8lzunEtN99XdUKImiPpAFX50EdhO1wDhESKETwpUPXb pwaIxGtQR+Zo4KcoNyXbkwaEba3uZ/yyRaAii2MZpw2EMqQf9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLGbPyqr47pCWQk8zprOjz3FZnpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2FlZDllN2EtMjRiMS0z M2I1LTg2NzMtOWM4NGI4Y2ZhMTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDygMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG1mTmuqJAkltjOCgVEfj4XHpAo7eIFogOCdzGg25pWZaOs8ked6FgkO +k5brbJYE977g8+qwwSX+YoAIhst/11aMaIi/o7/nHjV0RHtw+yIvX7hiuXdmZKS /sH1AY5ltuw1HzKHnidy5v0C90wr+nzLp6itTOH4f2iTg87n6wuhpCvxxAHyLLy+ VawL7nLY560UrdqOT0gi3BklZVWPy7WIFzWPOHtzCYIEzwYgTW5icMkcW2QTS5WL 5SorQgvQKQooYNDbbWYe5mrZIj/fEQYa6YVR76op1GAP9IyObNAzYVhvJ6wEFaZv vn6IpudSNbI4RmhttEZVCdQ2P/2HW9U= -----END CERTIFICATE-----Generated at Thu Oct 9 01:10:10 2025 by rpki-client