$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa File: 62c08158-0e7c-3b09-b973-f35c8fe33560.roa (raw, json) Hash identifier: M8OcA2apaRESPKJN893bQZIrfTuDHgoQ+fLsBJKnXsY= Subject key identifier: 4E:BB:31:51:B0:96:13:76:86:7C:A1:F5:6C:0B:C9:10:7D:47:E0:5E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9F8BC58927E62FAACCC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.32.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9f:8b:c5:89:27:e6:2f:aa:cc:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=953c3b26-9c8c-453d-bdbb-f3ef406d9a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a0:e7:a3:db:a6:8a:9e:ca:13:07:60:55:47: 37:0c:2e:a6:e1:e5:05:37:a2:30:7d:e7:fc:55:b4: 06:85:f3:db:dd:92:34:67:df:0b:63:7e:12:7b:3a: c7:10:ec:0b:d9:96:22:d9:5c:10:af:e0:45:68:89: bf:d9:c4:d3:0b:c1:33:c1:6d:89:40:2c:95:25:57: 78:ae:a3:26:70:02:e0:bb:bf:47:fa:65:0a:7e:74: f4:bb:29:aa:12:bf:42:99:cd:1a:78:50:c7:c4:dc: cc:fd:58:b2:f4:04:36:b5:e9:bb:b8:ae:0a:71:42: 1d:12:35:a4:50:89:52:fb:c7:85:07:74:f8:42:9f: cd:34:87:ed:eb:be:2e:7f:56:d5:ee:c2:81:66:13: 68:4b:94:9d:2a:cd:f9:16:c3:6c:7c:98:e2:98:1f: 4c:a0:d0:9b:c9:99:14:eb:f9:0d:c5:d4:8c:79:b4: d8:81:0c:78:89:2f:3d:57:14:b8:55:7d:47:aa:4f: 56:82:f4:fc:ed:48:18:31:b6:c1:6a:8d:d5:2e:35: fc:68:ec:20:d6:55:cb:e4:05:97:d8:d3:9f:80:48: 72:9e:1a:50:4d:86:1b:9a:9a:5a:8f:03:ee:6e:eb: 90:b5:20:91:94:2e:35:62:b7:fa:7f:e0:04:81:32: 22:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:BB:31:51:B0:96:13:76:86:7C:A1:F5:6C:0B:C9:10:7D:47:E0:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:bf:2c:fc:7a:7f:93:e7:6c:fc:71:3c:f6:b0:1d:e1:4c:f2: 24:3b:a8:d8:04:41:24:ee:c3:99:58:1c:07:98:39:66:cb:4f: ba:d6:23:8a:a0:ed:90:2c:36:a6:94:fe:85:a5:42:26:14:2d: 35:13:8b:c3:62:0c:f6:02:a3:19:08:e4:80:f3:91:64:7a:61: c1:b1:aa:96:88:f8:77:5c:48:2e:f0:71:9d:40:7a:51:1c:cc: c2:5f:c8:03:91:7e:7d:7d:81:9f:b8:35:b4:9a:74:42:e8:94: 96:49:d0:94:72:b4:21:97:f9:b6:5d:75:e5:a7:30:c4:a6:99: 52:29:32:2a:0a:3e:08:b0:aa:9f:6c:3e:05:25:5c:df:0a:65: 4b:36:82:aa:4e:05:ab:b8:3a:a3:76:8d:19:f5:d8:74:66:44: dd:23:f4:b6:7e:14:2d:ff:19:14:5e:9d:9f:d4:2c:9b:73:65: 0e:9d:34:ad:b1:d4:0f:18:fd:e0:33:36:b4:2b:95:02:cf:17: 01:d6:fc:c2:21:84:ae:d2:de:22:3a:23:4c:2f:26:37:b0:d4: 51:de:86:61:72:a0:5f:27:3c:6a:73:7d:b5:e9:34:6b:8d:60: c2:8c:52:0a:f2:3f:7e:bf:d5:57:40:8c:62:a6:b2:b6:3e:24: 85:07:17:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJ+LxYkn5i+qzMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk OTUzYzNiMjYtOWM4Yy00NTNkLWJkYmItZjNlZjQwNmQ5YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6Dno9umip7KEwdgVUc3DC6m4eUFN6Iwfef8 VbQGhfPb3ZI0Z98LY34SezrHEOwL2ZYi2VwQr+BFaIm/2cTTC8EzwW2JQCyVJVd4 rqMmcALgu79H+mUKfnT0uymqEr9Cmc0aeFDHxNzM/Viy9AQ2tem7uK4KcUIdEjWk UIlS+8eFB3T4Qp/NNIft674uf1bV7sKBZhNoS5SdKs35FsNsfJjimB9MoNCbyZkU 6/kNxdSMebTYgQx4iS89VxS4VX1Hqk9WgvT87UgYMbbBao3VLjX8aOwg1lXL5AWX 2NOfgEhynhpQTYYbmppajwPubuuQtSCRlC41Yrf6f+AEgTIipwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE67MVGwlhN2hnyh9WwLyRB9R+BeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjJjMDgxNTgtMGU3Yy0z YjA5LWI5NzMtZjM1YzhmZTMzNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGi/LPx6f5PnbPxxPPawHeFM8iQ7qNgEQSTuw5lYHAeYOWbLT7rWI4qg 7ZAsNqaU/oWlQiYULTUTi8NiDPYCoxkI5IDzkWR6YcGxqpaI+HdcSC7wcZ1AelEc zMJfyAORfn19gZ+4NbSadELolJZJ0JRytCGX+bZddeWnMMSmmVIpMioKPgiwqp9s PgUlXN8KZUs2gqpOBau4OqN2jRn12HRmRN0j9LZ+FC3/GRRenZ/ULJtzZQ6dNK2x 1A8Y/eAzNrQrlQLPFwHW/MIhhK7S3iI6I0wvJjew1FHehmFyoF8nPGpzfbXpNGuN YMKMUgryP36/1VdAjGKmsrY+JIUHFzM= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:52 2025 by rpki-client