$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa File: 9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa (raw, json) Hash identifier: freLj/Jj+MozOgk7uWcFWGp04F0eyPckrlVKyWPV+no= Subject key identifier: 00:1C:6F:BA:E0:B1:40:60:44:2C:53:F9:35:1F:DC:B5:A0:F7:11:8F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA21540F0751DFC245600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a2:15:40:f0:75:1d:fc:24:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=ef02238a-5f00-4540-b8b6-097eba2d8c69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:c7:3e:d9:76:65:b5:5d:a1:71:dd:be:34:94: 4c:2d:8f:55:19:ec:8d:e0:29:06:44:10:2f:30:cc: b2:25:c7:33:68:b6:db:ad:a7:25:a6:c2:bd:aa:c6: 70:a4:bc:d5:2d:52:a8:45:e3:07:61:2e:ac:1f:25: 32:6a:83:f9:e3:fb:00:4b:9b:55:66:83:8f:60:4c: e1:65:66:35:5f:48:1c:ec:6e:bb:2d:91:d5:54:e9: 2f:8d:3e:3b:ad:9d:e2:c8:de:ef:be:60:22:79:f1: 9a:75:b3:23:f1:80:1d:34:e6:1e:47:b8:46:32:0e: a4:5e:e4:e9:d8:b3:3f:6f:92:d9:91:1b:b1:26:ed: 35:c1:6c:78:48:d8:a4:3c:9d:9d:2a:f6:93:25:55: 54:8e:f4:73:f7:de:59:9f:90:ac:18:c5:17:a3:25: c3:0a:d3:72:cb:8c:84:35:e6:bb:ad:f5:8d:36:c3: f4:4a:db:7c:ad:f0:7e:1e:9a:19:9c:88:79:e6:3e: 99:d4:60:be:f1:15:a9:a0:f9:15:c9:70:dc:d8:2e: 43:87:3f:d0:4a:a5:ab:8d:c7:d2:86:85:6e:af:d2: f6:93:66:44:f2:7c:a8:2d:eb:94:a8:f1:e5:15:cb: 37:d6:0f:00:25:2e:2c:e8:ef:b6:f9:0b:8a:70:00: da:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:1C:6F:BA:E0:B1:40:60:44:2C:53:F9:35:1F:DC:B5:A0:F7:11:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:af:7b:74:71:1e:4d:38:30:77:bb:cc:a8:a3:0c:3d:e7:33: e6:fe:58:94:d9:dd:0d:67:3d:1a:e2:1b:bc:c2:76:a3:06:6c: c8:67:3d:66:9c:19:cb:87:e3:b1:8a:35:7a:44:4d:1e:b5:f9: c7:ec:07:c7:c9:d2:b5:2d:9c:b2:b9:91:69:70:1f:a5:b3:3f: 56:b8:81:82:ae:df:36:91:e7:72:4c:da:bf:45:e1:20:47:58: 74:c9:68:fb:a5:12:ef:c9:2a:d8:dd:94:6b:87:8c:6a:16:aa: 1b:13:1e:e5:f4:87:27:4d:d6:fd:d4:5a:4a:dd:4a:20:c6:7a: b4:25:65:c2:b4:a0:37:e4:e6:6d:38:32:de:5b:74:a8:a6:30: 3c:04:1c:53:5c:3c:c1:b5:58:1b:06:62:cc:c2:08:44:8b:6f: 74:80:70:52:d7:24:97:53:75:fb:be:0e:cb:e9:47:4b:34:94: 4f:58:12:35:70:09:b2:7b:0f:9d:f3:be:e7:f4:0f:4c:5d:b4: d0:b6:86:53:d2:b1:76:68:f2:1e:02:b2:ca:af:c2:ee:a9:04: 53:c3:50:81:da:07:1e:81:de:23:d7:b8:94:39:d4:bf:dc:2c: 71:d4:04:ba:87:18:93:cc:b6:8f:b3:b0:4c:9c:79:df:52:6f: bd:c2:6b:fb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKIVQPB1HfwkVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZWYwMjIzOGEtNWYwMC00NTQwLWI4YjYtMDk3ZWJhMmQ4YzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmcc+2XZltV2hcd2+NJRMLY9VGeyN4CkGRBAv MMyyJcczaLbbraclpsK9qsZwpLzVLVKoReMHYS6sHyUyaoP54/sAS5tVZoOPYEzh ZWY1X0gc7G67LZHVVOkvjT47rZ3iyN7vvmAiefGadbMj8YAdNOYeR7hGMg6kXuTp 2LM/b5LZkRuxJu01wWx4SNikPJ2dKvaTJVVUjvRz995Zn5CsGMUXoyXDCtNyy4yE Nea7rfWNNsP0Stt8rfB+HpoZnIh55j6Z1GC+8RWpoPkVyXDc2C5Dhz/QSqWrjcfS hoVur9L2k2ZE8nyoLeuUqPHlFcs31g8AJS4s6O+2+QuKcADavwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAAcb7rgsUBgRCxT+TUf3LWg9xGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTMxMGE0YTYtOTZlMy0z OWMwLWFlYTgtZmE0ZGM0MmQ4ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADWve3RxHk04MHe7zKijDD3nM+b+WJTZ3Q1nPRriG7zCdqMGbMhnPWac GcuH47GKNXpETR61+cfsB8fJ0rUtnLK5kWlwH6WzP1a4gYKu3zaR53JM2r9F4SBH WHTJaPulEu/JKtjdlGuHjGoWqhsTHuX0hydN1v3UWkrdSiDGerQlZcK0oDfk5m04 Mt5bdKimMDwEHFNcPMG1WBsGYszCCESLb3SAcFLXJJdTdfu+DsvpR0s0lE9YEjVw CbJ7D53zvuf0D0xdtNC2hlPSsXZo8h4Cssqvwu6pBFPDUIHaBx6B3iPXuJQ51L/c LHHUBLqHGJPMto+zsEyced9Sb73Ca/s= -----END CERTIFICATE-----Generated at Wed Oct 8 23:12:00 2025 by rpki-client