$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa File: 4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json) Hash identifier: 9kVCf8J3Y0mbUopYal+ZBek2tJlPPd/287xlCMdJm78= Subject key identifier: CF:56:04:71:26:14:F6:78:56:60:E6:68:C5:7E:F9:B7:F4:0E:87:20 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5E0846CC0996C3E5BD00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5e:08:46:cc:09:96:c3:e5:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=0e051407-1c2e-4a54-99cb-26f176bc9558 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:8d:84:67:20:61:47:fc:69:f9:05:47:5e:d9: b2:70:2e:3e:1b:3a:52:e5:3d:53:6c:6b:1b:15:65: be:57:99:55:48:e9:1e:e3:e1:2e:33:cb:7e:4e:30: a8:7a:bb:7b:d7:62:df:99:05:cd:99:c7:5c:e2:05: 88:7b:23:c1:3c:01:06:23:8b:1a:1b:50:80:12:45: 26:f3:cc:12:0f:64:89:45:42:ab:06:24:fb:ce:2b: 91:20:e2:7a:91:d3:30:7d:fe:8b:6b:61:78:dc:f3: c1:29:06:5d:a8:44:cd:61:be:94:f7:f3:da:ec:83: 48:3e:fe:6a:4d:a5:46:e8:14:ce:fe:71:6e:e9:e2: 1f:f1:0f:9d:e3:37:56:93:88:e2:dc:33:06:aa:bf: cd:03:09:0e:e8:00:d6:1e:3f:fc:a5:22:da:82:14: dd:5f:df:12:f0:ad:3a:c2:18:21:8e:85:b3:10:b2: 65:55:61:9c:25:36:d2:bb:be:78:41:00:3a:bd:d2: 05:5c:4c:ac:70:58:a4:b6:1f:d0:9f:e8:09:ba:40: 51:76:d1:c3:65:67:2a:0a:b7:bb:a6:2e:0b:32:c1: 1b:97:b6:60:74:5f:48:77:0e:49:26:54:0f:8e:2b: 38:8a:cb:2c:e1:39:3e:30:52:50:61:98:7b:aa:d2: 34:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:56:04:71:26:14:F6:78:56:60:E6:68:C5:7E:F9:B7:F4:0E:87:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:70:b0:7e:d0:e1:9e:0b:2c:b4:ea:cc:de:85:db:c2:d2:f6: fc:55:58:db:c5:61:33:ad:ef:b3:b5:a3:69:ef:83:d2:f0:17: c1:75:a8:3d:ad:5a:f3:dc:27:86:90:d0:6c:da:87:df:54:fc: 86:83:f4:7b:f2:ff:44:45:4a:1f:e0:0c:91:53:a2:2e:c2:9a: 9d:8c:70:d9:fc:07:9e:25:d0:8c:b1:48:38:35:73:8d:7e:1c: 8e:a2:17:30:68:b4:52:9f:46:50:55:9e:cc:b9:37:cc:e4:ba: e3:50:77:48:c4:de:31:f8:14:21:c5:2f:b3:9c:1b:4f:c9:cd: 18:0f:73:1a:d4:ac:89:42:28:28:28:95:87:3e:96:9f:a1:a5: c5:9e:00:2c:90:20:3b:51:06:71:bc:a9:20:c6:08:3f:2e:d6: 0e:2b:fe:34:37:96:24:3b:f2:0c:04:f3:51:18:7c:a1:70:99: 66:fe:22:12:d0:94:4f:bf:65:62:3f:6c:37:4a:f8:8d:b4:a2: 10:21:0e:fa:69:3b:12:25:a5:14:01:1f:4b:8e:04:9c:0a:4d: 5b:c4:6e:32:1e:a7:d4:72:31:97:36:19:a0:0b:7a:db:0b:8c: 42:31:69:40:98:9d:4c:29:a1:b6:b5:c4:5e:39:22:f2:44:79: 85:14:7f:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF4IRswJlsPlvQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MGUwNTE0MDctMWMyZS00YTU0LTk5Y2ItMjZmMTc2YmM5NTU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Y2EZyBhR/xp+QVHXtmycC4+GzpS5T1TbGsb FWW+V5lVSOke4+EuM8t+TjCoert712LfmQXNmcdc4gWIeyPBPAEGI4saG1CAEkUm 88wSD2SJRUKrBiT7ziuRIOJ6kdMwff6La2F43PPBKQZdqETNYb6U9/Pa7INIPv5q TaVG6BTO/nFu6eIf8Q+d4zdWk4ji3DMGqr/NAwkO6ADWHj/8pSLaghTdX98S8K06 whghjoWzELJlVWGcJTbSu754QQA6vdIFXEyscFikth/Qn+gJukBRdtHDZWcqCre7 pi4LMsEbl7ZgdF9Idw5JJlQPjis4isss4Tk+MFJQYZh7qtI0JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9WBHEmFPZ4VmDmaMV++bf0DocgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDkyM2ZhYjUtNDIzZC0z Mzk2LTgyNjEtOGM5ZjRhZjk2MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZwsH7Q4Z4LLLTqzN6F28LS9vxVWNvFYTOt77O1o2nvg9LwF8F1qD2t WvPcJ4aQ0Gzah99U/IaD9Hvy/0RFSh/gDJFToi7Cmp2McNn8B54l0IyxSDg1c41+ HI6iFzBotFKfRlBVnsy5N8zkuuNQd0jE3jH4FCHFL7OcG0/JzRgPcxrUrIlCKCgo lYc+lp+hpcWeACyQIDtRBnG8qSDGCD8u1g4r/jQ3liQ78gwE81EYfKFwmWb+IhLQ lE+/ZWI/bDdK+I20ohAhDvppOxIlpRQBH0uOBJwKTVvEbjIep9RyMZc2GaALetsL jEIxaUCYnUwpoba1xF45IvJEeYUUfx0= -----END CERTIFICATE-----Generated at Wed Oct 8 23:15:41 2025 by rpki-client