$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa File: 40ff31f9-bb55-3743-9e6e-0ed497625978.roa (raw, json) Hash identifier: x28bpu+FUiRKjqHFkHeESTO5sQ8Akj1nAmbxUqtVcaY= Subject key identifier: C0:F1:78:8D:DD:81:40:6F:C8:B7:10:1F:39:FE:47:46:78:CC:4E:B0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C65E7CE2CA544241F9400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.36.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:65:e7:ce:2c:a5:44:24:1f:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=3ece8063-2d6a-49c7-b853-9e908e6a76cb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:89:84:e9:ae:3f:6c:c8:d7:b5:91:06:63: 84:25:ff:b0:c3:72:3e:02:c6:17:f8:34:eb:62:06: e4:fc:d1:b8:e1:c4:e6:1f:a5:1a:59:a2:0d:b5:18: 5a:48:3f:c0:9e:19:2a:ba:bf:42:11:1c:d6:04:06: e6:34:f5:f6:02:c6:45:34:01:6c:fc:34:3e:40:9d: 09:ee:57:54:5a:9f:78:0e:ff:20:9e:31:a4:cb:7d: e4:c3:12:99:00:70:42:b5:5f:9c:3d:6c:78:f4:31: 67:2c:c5:11:57:5c:03:86:54:00:bb:fd:c3:c5:1d: 31:50:60:b6:79:76:7d:7a:06:09:85:67:02:12:65: 32:a2:3b:b6:01:1b:8b:42:54:c2:3b:cf:d0:ea:90: e6:89:dc:1e:ba:2d:f7:e9:87:a3:f9:fd:5b:f8:23: ca:fa:5f:fc:9e:5b:4d:ef:8a:7e:da:9c:df:9d:5d: 00:8a:24:5a:39:aa:bf:7a:ca:6a:b3:d0:58:15:8f: d5:7b:19:f0:eb:15:63:79:d5:5a:f2:b5:67:a4:9b: 40:c4:3e:9f:61:02:96:5d:c3:ad:e6:9a:ea:16:78: b4:77:97:81:52:6e:51:16:b9:ec:46:c9:7a:06:46: 00:5f:f8:d8:a0:2f:14:45:42:f8:8e:4c:63:de:52: f6:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:F1:78:8D:DD:81:40:6F:C8:B7:10:1F:39:FE:47:46:78:CC:4E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/40ff31f9-bb55-3743-9e6e-0ed497625978.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:eb:f6:aa:0b:08:62:55:30:6e:c8:66:0c:80:cc:df:41:54: 60:fe:d5:d1:f8:81:26:e8:38:0c:58:b0:52:a0:52:8a:1e:ba: 19:c2:09:77:27:0c:78:db:54:e5:a0:35:8c:e5:6c:35:93:6e: 3d:73:32:b7:ba:0e:b1:da:92:17:b4:29:62:9f:ce:20:27:9d: 02:72:87:51:f0:66:f3:80:0a:c9:d7:1a:26:93:6b:33:b2:62: 1f:18:3c:2a:c6:86:80:76:8a:18:25:78:88:6e:02:bd:b2:ac: 75:e5:ca:1e:cd:ff:73:b0:ef:28:46:70:76:55:c7:21:9d:be: d2:de:02:d5:5b:3b:ac:8b:94:ea:fe:52:66:57:11:39:db:62: 56:33:0f:62:2a:10:05:b9:17:ee:f1:6f:38:61:72:ea:16:b0: 96:b8:f9:45:39:a6:89:d9:a9:25:e3:5c:d9:0a:99:78:d7:06: 1c:70:ed:c2:c8:d8:18:39:f6:41:97:68:f5:a2:00:87:84:86: 80:0f:24:06:ce:cf:ed:b7:b5:a6:e6:5a:7d:c3:d0:34:03:b6: e6:9f:f8:80:18:70:c9:ff:ad:58:da:01:ed:19:4e:0f:6a:90: 37:74:23:b6:04:a5:6d:9f:fd:31:96:fe:13:a9:b8:43:90:84: ad:6a:6c:a5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGXnziylRCQflAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk M2VjZTgwNjMtMmQ2YS00OWM3LWI4NTMtOWU5MDhlNmE3NmNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOuJhOmuP2zI17WRBmOEJf+ww3I+AsYX+DTr Ygbk/NG44cTmH6UaWaINtRhaSD/Anhkqur9CERzWBAbmNPX2AsZFNAFs/DQ+QJ0J 7ldUWp94Dv8gnjGky33kwxKZAHBCtV+cPWx49DFnLMURV1wDhlQAu/3DxR0xUGC2 eXZ9egYJhWcCEmUyoju2ARuLQlTCO8/Q6pDmidweui336Yej+f1b+CPK+l/8nltN 74p+2pzfnV0AiiRaOaq/espqs9BYFY/Vexnw6xVjedVa8rVnpJtAxD6fYQKWXcOt 5prqFni0d5eBUm5RFrnsRsl6BkYAX/jYoC8URUL4jkxj3lL26QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMDxeI3dgUBvyLcQHzn+R0Z4zE6wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDBmZjMxZjktYmI1NS0z NzQzLTllNmUtMGVkNDk3NjI1OTc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvr9qoLCGJVMG7IZgyAzN9BVGD+1dH4gSboOAxYsFKgUooeuhnCCXcn DHjbVOWgNYzlbDWTbj1zMre6DrHakhe0KWKfziAnnQJyh1HwZvOACsnXGiaTazOy Yh8YPCrGhoB2ihgleIhuAr2yrHXlyh7N/3Ow7yhGcHZVxyGdvtLeAtVbO6yLlOr+ UmZXETnbYlYzD2IqEAW5F+7xbzhhcuoWsJa4+UU5ponZqSXjXNkKmXjXBhxw7cLI 2Bg59kGXaPWiAIeEhoAPJAbOz+23tabmWn3D0DQDtuaf+IAYcMn/rVjaAe0ZTg9q kDd0I7YEpW2f/TGW/hOpuEOQhK1qbKU= -----END CERTIFICATE-----Generated at Wed Oct 8 21:17:01 2025 by rpki-client