$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa File: cec7a1a6-72a6-3535-b74e-3962d0df9425.roa (raw, json) Hash identifier: y17WIuNoNevlFdZxnmHPeGntsaP3tgSQS9MyCWce9m0= Subject key identifier: 4A:EA:2F:F7:6E:01:3B:A3:9C:9A:F9:02:9E:AB:01:F6:DB:1D:AF:37 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C5FB6220952FBE190C1E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.62.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:5f:b6:22:09:52:fb:e1:90:c1:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=c4463955-c6d3-49af-9dc9-13108361a0d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:77:52:79:49:e5:ce:d9:86:2e:02:45:39:28: 28:21:ad:48:dc:a8:48:e4:89:9c:b1:0d:db:f7:aa: 1d:09:4d:ab:da:bb:e6:b5:1e:01:c0:8f:f9:f5:77: bd:f9:f2:96:68:c5:d5:8f:50:0a:4e:c1:b0:5d:9b: e0:1f:cd:3b:01:16:a5:73:43:f4:85:a0:e9:da:2f: 2d:fd:de:ee:39:05:7f:5b:21:48:d7:9f:33:49:20: fa:f6:cd:c7:3f:20:a8:5b:95:47:35:7c:9a:4b:d8: 73:ac:a6:73:d3:d1:e2:1f:7f:86:66:5d:67:45:75: 0f:17:07:b7:cd:4d:14:e7:b6:b0:02:f1:61:d1:0f: 2d:81:07:53:01:35:ab:3b:d4:94:50:dc:0a:7b:fa: a0:06:5c:5c:8d:e7:f3:e7:03:01:4b:84:af:e7:84: 74:55:66:3c:6b:66:33:7c:50:f0:f0:a1:09:65:b8: c4:94:3e:74:e3:67:23:2b:66:99:d1:fe:a8:b8:17: c8:e2:22:02:69:80:f0:5a:81:62:1a:67:01:eb:4b: da:c2:6c:8b:35:92:2d:92:18:96:04:dd:ee:46:0d: 63:32:07:e9:83:23:71:dd:2c:0b:c8:6b:bf:14:5d: 0f:41:1b:b8:d1:cb:7e:09:f8:42:de:fb:ec:c0:d5: 7f:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:EA:2F:F7:6E:01:3B:A3:9C:9A:F9:02:9E:AB:01:F6:DB:1D:AF:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cec7a1a6-72a6-3535-b74e-3962d0df9425.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:0c:6f:68:8f:6b:09:e4:3d:22:cb:3b:86:4f:10:9f:59:b4: 1c:9e:82:42:38:38:9a:06:23:21:54:a1:b5:5a:b0:0e:70:30: 76:2a:aa:0e:c2:a7:83:05:a8:9f:30:f5:1b:3f:a5:7d:fc:63: 73:ab:86:35:e3:5a:3a:0f:4d:bd:bd:a9:99:d9:35:ac:19:c6: f3:fa:e9:2b:15:f7:96:60:91:ad:39:b3:37:ec:dd:09:77:7e: 69:57:1b:bf:c9:4c:82:7a:66:eb:6c:11:a2:cd:e8:05:38:7f: c6:a0:09:fb:41:3c:ed:50:b3:67:5c:df:e6:e5:88:16:ba:0f: dd:d1:fd:0b:65:d0:de:4b:d1:bf:cc:37:ae:44:85:59:56:15: 79:1a:38:ff:f1:b6:c7:15:7f:6b:05:7e:81:07:c5:f2:a9:86: c5:aa:51:f1:af:cb:fc:f4:b3:44:ae:b3:d8:20:92:fb:bf:4c: a9:6e:43:00:bf:d4:a7:da:aa:a0:6d:6d:b8:ba:98:01:5c:f3: ee:74:3e:47:36:da:a8:cc:bc:d2:00:55:5b:ef:7e:51:f4:df: e6:0e:a0:70:5c:f5:1a:ae:4c:8f:1f:ae:6c:dc:46:29:b5:17: f6:bc:b5:f8:84:ff:a9:0d:bb:94:d6:03:19:13:dd:c3:31:9d: 22:65:37:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTF+2IglS++GQweAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YzQ0NjM5NTUtYzZkMy00OWFmLTlkYzktMTMxMDgzNjFhMGQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXdSeUnlztmGLgJFOSgoIa1I3KhI5ImcsQ3b 96odCU2r2rvmtR4BwI/59Xe9+fKWaMXVj1AKTsGwXZvgH807ARalc0P0haDp2i8t /d7uOQV/WyFI158zSSD69s3HPyCoW5VHNXyaS9hzrKZz09HiH3+GZl1nRXUPFwe3 zU0U57awAvFh0Q8tgQdTATWrO9SUUNwKe/qgBlxcjefz5wMBS4Sv54R0VWY8a2Yz fFDw8KEJZbjElD5042cjK2aZ0f6ouBfI4iICaYDwWoFiGmcB60vawmyLNZItkhiW BN3uRg1jMgfpgyNx3SwLyGu/FF0PQRu40ct+CfhC3vvswNV/+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFErqL/duATujnJr5Ap6rAfbbHa83MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjN2ExYTYtNzJhNi0z NTM1LWI3NGUtMzk2MmQwZGY5NDI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI8Mb2iPawnkPSLLO4ZPEJ9ZtByegkI4OJoGIyFUobVasA5wMHYqqg7C p4MFqJ8w9Rs/pX38Y3OrhjXjWjoPTb29qZnZNawZxvP66SsV95Zgka05szfs3Ql3 fmlXG7/JTIJ6ZutsEaLN6AU4f8agCftBPO1Qs2dc3+bliBa6D93R/Qtl0N5L0b/M N65EhVlWFXkaOP/xtscVf2sFfoEHxfKphsWqUfGvy/z0s0Sus9ggkvu/TKluQwC/ 1KfaqqBtbbi6mAFc8+50Pkc22qjMvNIAVVvvflH03+YOoHBc9RquTI8frmzcRim1 F/a8tfiE/6kNu5TWAxkT3cMxnSJlNwA= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:13 2025 by rpki-client