$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/928e9a16-6b75-36d4-82cb-a8ec60f81ee0.roa File: 928e9a16-6b75-36d4-82cb-a8ec60f81ee0.roa (raw, json) Hash identifier: lwi6s7fEPfDKJN5GWpgSiGCAI7KwjfIcGnAkEkre+Do= Subject key identifier: CE:9B:E9:51:D8:E7:4D:14:95:65:FB:80:C1:5E:FE:5A:B2:0F:8F:C3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA766F9F98509D44E1C80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/928e9a16-6b75-36d4-82cb-a8ec60f81ee0.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.60.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a7:66:f9:f9:85:09:d4:4e:1c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=2f7b2734-784d-43d5-9348-336302bafcaf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:4f:34:24:83:74:54:18:1f:5e:5c:e3:32:69: fd:1b:cb:c5:52:5c:dd:e3:87:2d:88:27:75:5d:d5: 91:aa:a9:81:ae:83:a0:76:09:ef:1e:4b:d6:23:a4: 25:90:66:d5:22:6c:6a:f7:ab:e7:76:a8:04:66:2c: 88:8c:04:1b:9a:80:a0:23:1d:be:a3:e3:84:39:9a: fa:0c:0f:9e:62:33:60:9a:1c:8a:b5:3a:2a:4c:06: 0f:ce:90:e8:3f:d9:c5:25:05:bd:16:93:47:60:05: 9b:0a:62:29:88:b8:21:61:7b:77:73:e2:8e:c3:1a: 33:b7:e7:5a:51:dc:e2:83:9b:b3:12:16:7b:33:ca: 97:03:ee:8a:89:f2:0a:05:be:a6:02:73:94:34:9f: c2:86:24:16:5e:98:0d:89:24:e0:ef:15:3a:95:42: 9a:d5:18:93:b2:4d:6f:8c:5d:6c:72:0a:ee:db:f5: d3:40:bc:ba:05:4f:57:9f:6c:ed:f4:be:c7:eb:93: d7:8b:83:10:e0:ed:52:11:c2:16:9d:e6:a9:82:88: 7a:fa:e7:cb:17:ca:39:8c:e7:59:59:f5:06:bd:fc: b1:a6:77:98:e4:b9:5a:40:2a:3e:b1:0a:d8:42:a5: 4c:fb:ba:fb:a1:30:13:5a:65:ed:80:09:1d:d6:ab: 0a:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CE:9B:E9:51:D8:E7:4D:14:95:65:FB:80:C1:5E:FE:5A:B2:0F:8F:C3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/928e9a16-6b75-36d4-82cb-a8ec60f81ee0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:7e:d7:48:86:3c:06:94:7f:6a:6a:0d:9e:80:d7:59:55:94: a2:a0:4a:c3:29:88:62:5d:54:27:56:5a:c6:64:3c:37:33:db: 7a:c1:b6:ef:31:27:43:bf:4b:49:42:36:a7:6f:96:c5:22:6a: 69:f0:35:d4:65:55:7c:20:a3:b6:ab:9b:aa:30:a2:d9:8e:e0: 30:8a:14:a0:53:88:4e:a2:43:9a:17:c1:f2:f6:b2:0e:32:53: dd:8c:99:3d:19:61:dd:59:d6:6e:85:7e:46:ee:0f:91:d2:d9: 18:fd:b4:94:99:52:7a:dc:7a:e2:1e:a0:26:c3:a8:e5:64:27: c4:ee:cd:c9:14:c2:77:c9:3b:d4:e6:6f:4d:ad:10:44:2b:bd: 99:1f:92:db:3f:ed:ec:8c:94:88:50:3b:87:82:14:d9:03:7b: f1:48:f0:a7:f3:8b:71:83:b0:af:85:53:3b:d2:57:c0:b1:37: 8a:e5:26:5a:a2:b0:99:58:e5:30:09:d3:65:13:97:a7:15:b4: 99:9a:d6:97:dd:a3:5c:e0:2e:e9:e2:1e:bf:fe:23:6c:86:c9: cd:1a:4d:f5:b4:5e:75:29:c2:b2:ca:e5:8f:8b:3d:48:68:69: 4a:a8:f6:6a:b4:39:49:80:e9:78:65:63:d0:3d:69:9e:99:50: 52:97:5d:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKdm+fmFCdROHIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MmY3YjI3MzQtNzg0ZC00M2Q1LTkzNDgtMzM2MzAyYmFmY2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7E80JIN0VBgfXlzjMmn9G8vFUlzd44ctiCd1 XdWRqqmBroOgdgnvHkvWI6QlkGbVImxq96vndqgEZiyIjAQbmoCgIx2+o+OEOZr6 DA+eYjNgmhyKtToqTAYPzpDoP9nFJQW9FpNHYAWbCmIpiLghYXt3c+KOwxozt+da Udzig5uzEhZ7M8qXA+6KifIKBb6mAnOUNJ/ChiQWXpgNiSTg7xU6lUKa1RiTsk1v jF1scgru2/XTQLy6BU9Xn2zt9L7H65PXi4MQ4O1SEcIWneapgoh6+ufLF8o5jOdZ WfUGvfyxpneY5LlaQCo+sQrYQqVM+7r7oTATWmXtgAkd1qsK2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM6b6VHY500UlWX7gMFe/lqyD4/DMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTI4ZTlhMTYtNmI3NS0z NmQ0LTgyY2ItYThlYzYwZjgxZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABB+10iGPAaUf2pqDZ6A11lVlKKgSsMpiGJdVCdWWsZkPDcz23rBtu8x J0O/S0lCNqdvlsUiamnwNdRlVXwgo7arm6owotmO4DCKFKBTiE6iQ5oXwfL2sg4y U92MmT0ZYd1Z1m6FfkbuD5HS2Rj9tJSZUnrceuIeoCbDqOVkJ8TuzckUwnfJO9Tm b02tEEQrvZkfkts/7eyMlIhQO4eCFNkDe/FI8Kfzi3GDsK+FUzvSV8CxN4rlJlqi sJlY5TAJ02UTl6cVtJma1pfdo1zgLuniHr/+I2yGyc0aTfW0XnUpwrLK5Y+LPUho aUqo9mq0OUmA6XhlY9A9aZ6ZUFKXXTI= -----END CERTIFICATE-----Generated at Wed Oct 8 23:14:46 2025 by rpki-client