$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa File: c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa (raw, json) Hash identifier: zr8K3UOa+6qfN60n1kb0TItip4MC3wKybIO9XvepIRE= Subject key identifier: 60:F6:B2:F8:D0:E8:9B:7E:F5:04:B3:72:77:F9:30:50:65:2D:37:A8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5E4610F60E1E33287C80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5e:46:10:f6:0e:1e:33:28:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=64e23f19-fa72-4b09-b40a-b9084fadfdc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:3c:c6:88:c9:32:a8:f2:69:67:97:70:eb:5f: 5a:f9:f0:4b:0a:d1:84:ed:6d:05:e8:a9:c9:4c:80: 9d:7c:ed:b9:5c:2d:c8:c1:f7:19:98:bc:d3:22:2d: df:a6:07:66:c8:4a:2d:21:40:cf:b6:9f:42:90:e5: d3:17:a1:06:c4:0e:12:3a:20:d1:f9:35:ff:85:ad: c8:85:db:8c:ef:fd:ab:dc:c4:48:1d:16:fe:a0:85: d8:11:db:b0:4d:85:da:12:fb:58:b5:a6:c1:26:1a: 54:e3:a8:78:e8:4a:eb:4f:2e:4c:a6:92:b1:c8:e1: f4:95:5e:7c:35:94:f0:da:e9:b6:6c:f6:fe:4f:f0: 43:87:09:d3:28:8e:5a:12:bc:57:7d:80:23:24:0c: c9:7c:97:0f:ac:19:fa:bd:85:aa:15:0b:03:b0:b6: 84:b3:92:70:e5:70:08:55:7a:3f:56:b2:d2:3f:26: 83:5c:0f:b5:0d:3d:19:da:61:30:ca:7d:77:ce:c1: 6d:87:23:75:60:c9:f2:2a:22:f9:5c:57:b6:78:a0: 6a:2a:55:5d:f7:36:b2:0e:ef:d5:5c:6c:18:45:b9: 89:0a:be:7b:c8:55:64:3a:22:d7:b6:b4:2b:e2:5c: ca:8e:ae:e3:1e:b6:af:c8:76:b5:5e:71:1e:e4:6c: 73:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:F6:B2:F8:D0:E8:9B:7E:F5:04:B3:72:77:F9:30:50:65:2D:37:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c34b8d11-65b9-3c19-98c9-ac8c00c9f09e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:90:aa:0c:4d:88:ed:ee:c3:17:70:04:1c:76:d3:2a:1d:2d: 4c:3a:55:f7:2f:53:bc:b5:75:14:11:f6:7a:24:c0:53:78:2b: 68:65:f5:bd:c6:25:1f:3f:04:89:61:bd:d3:41:76:8f:36:78: ff:71:be:e5:9b:8b:08:47:75:ea:7c:b6:bd:96:f7:d7:96:97: f4:1c:f3:bb:4c:9d:70:86:36:5f:66:8f:8c:06:e8:ad:a9:4a: 65:9d:22:42:70:48:c8:7e:d4:7e:3f:10:8b:2c:30:5e:4d:7d: de:73:23:8b:34:cd:31:b9:ff:77:fd:67:d4:0b:47:30:5a:ad: 31:96:cb:bc:dc:1d:c6:0f:18:c5:bc:67:dc:4e:7e:5f:04:15: 1d:c9:1b:49:c2:d2:bd:29:06:d7:76:cd:02:76:72:6e:2a:c0: b0:12:ea:a2:3c:91:8e:1f:33:f6:9b:dd:34:bf:ba:ee:c2:27: 09:d9:09:18:e9:bd:ba:54:46:d9:bb:c6:cf:62:69:b5:3c:73: 0d:16:9c:45:96:ed:64:d9:bb:4b:85:83:79:2b:2e:3b:78:ac: 6b:fd:58:12:c2:09:bd:f3:60:e5:a9:34:c2:4f:0d:e8:da:53: a6:b5:b7:59:9b:df:39:19:47:8d:10:e2:03:61:23:f7:0e:c3: ab:9f:dd:f8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF5GEPYOHjMofIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NjRlMjNmMTktZmE3Mi00YjA5LWI0MGEtYjkwODRmYWRmZGM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DzGiMkyqPJpZ5dw619a+fBLCtGE7W0F6KnJ TICdfO25XC3IwfcZmLzTIi3fpgdmyEotIUDPtp9CkOXTF6EGxA4SOiDR+TX/ha3I hduM7/2r3MRIHRb+oIXYEduwTYXaEvtYtabBJhpU46h46ErrTy5MppKxyOH0lV58 NZTw2um2bPb+T/BDhwnTKI5aErxXfYAjJAzJfJcPrBn6vYWqFQsDsLaEs5Jw5XAI VXo/VrLSPyaDXA+1DT0Z2mEwyn13zsFthyN1YMnyKiL5XFe2eKBqKlVd9zayDu/V XGwYRbmJCr57yFVkOiLXtrQr4lzKjq7jHravyHa1XnEe5GxzdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGD2svjQ6Jt+9QSzcnf5MFBlLTeoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzM0YjhkMTEtNjViOS0z YzE5LTk4YzktYWM4YzAwYzlmMDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJaQqgxNiO3uwxdwBBx20yodLUw6VfcvU7y1dRQR9nokwFN4K2hl9b3G JR8/BIlhvdNBdo82eP9xvuWbiwhHdep8tr2W99eWl/Qc87tMnXCGNl9mj4wG6K2p SmWdIkJwSMh+1H4/EIssMF5Nfd5zI4s0zTG5/3f9Z9QLRzBarTGWy7zcHcYPGMW8 Z9xOfl8EFR3JG0nC0r0pBtd2zQJ2cm4qwLAS6qI8kY4fM/ab3TS/uu7CJwnZCRjp vbpURtm7xs9iabU8cw0WnEWW7WTZu0uFg3krLjt4rGv9WBLCCb3zYOWpNMJPDeja U6a1t1mb3zkZR40Q4gNhI/cOw6uf3fg= -----END CERTIFICATE-----Generated at Wed Oct 8 23:10:19 2025 by rpki-client