$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa File: e7428bc5-158c-3dda-8acc-403a9b9b59be.roa (raw, json) Hash identifier: mlhUDDhI02UCe5Yu6Rvdx4StbYl+AwQuMRCwSebG0ec= Subject key identifier: CF:A9:2A:29:95:A2:1C:95:5F:5D:A3:AD:04:5B:0C:20:8D:81:4C:78 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4BBEB3ED16E44950C680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.53.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4b:be:b3:ed:16:e4:49:50:c6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=a197e698-8772-4a71-8846-add87b20b258 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e2:d9:36:bb:10:c6:cd:fb:9a:49:18:8b:88: e8:04:2c:10:43:9b:b4:b3:6c:3c:7d:95:9a:2c:ac: e6:51:73:d1:ac:e6:de:16:e1:81:8e:83:38:05:7e: 0d:c1:1e:e1:e5:dd:27:be:40:79:5b:48:88:f8:da: 77:76:fc:c6:93:f2:1b:92:1a:b9:99:48:e5:0f:83: f2:64:0a:0b:da:1c:4c:91:7a:6f:74:93:6d:a3:cc: a7:e8:e3:03:99:3f:ac:89:d5:e4:2a:f8:4a:e5:29: 0b:a3:db:a3:bb:57:f2:af:66:92:32:fc:30:e2:de: f7:25:1a:2e:4e:80:e2:e4:6c:51:94:04:fe:10:fe: e7:70:68:9f:04:e7:a4:88:51:2e:d4:5e:82:7c:d0: b9:14:2e:8d:52:0c:1d:4a:c4:eb:71:38:86:c9:df: ca:12:b6:96:57:5d:dd:95:33:b2:a1:f5:a1:73:dd: 74:70:10:dd:f5:54:1e:d6:61:8a:59:e5:a7:51:98: e4:8c:13:6c:79:33:14:fc:b5:85:da:43:fb:76:e6: 60:e9:a5:a0:37:7e:2e:d7:5c:82:4f:00:9d:b6:3c: 69:69:e6:35:ea:9d:55:e3:1c:c5:a5:6e:19:62:5f: ef:6e:ee:56:aa:cf:b4:5e:0c:bd:f7:07:7e:ea:67: 7f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:A9:2A:29:95:A2:1C:95:5F:5D:A3:AD:04:5B:0C:20:8D:81:4C:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:3f:5e:5b:77:55:e4:db:e3:25:88:5c:73:d0:e4:f6:fd:8f: 44:12:a3:67:91:0e:3f:b1:41:3a:3a:10:64:f0:1b:93:4e:1e: 36:b6:61:de:34:c3:88:75:cb:86:44:f9:ad:ed:3c:22:7d:08: 22:e9:2c:74:d7:09:22:06:5f:d6:1a:4c:75:4c:83:69:ac:a7: 05:a2:18:ba:74:8b:f6:ab:f1:38:6c:5d:29:25:bc:5a:8c:99: 78:b9:6a:d0:dc:b5:29:ac:a0:d6:be:e4:a0:1a:46:a1:f1:09: df:e1:9d:a5:93:ed:35:40:8a:da:21:c1:3d:f9:9e:d6:9b:ba: 5d:3b:10:ea:35:da:fe:21:5c:88:81:e9:1a:16:eb:98:9e:dd: 0f:a6:ae:8f:e5:58:20:31:b1:86:47:5a:b2:e6:fd:a1:ff:4f: eb:21:ef:31:60:dc:95:1b:97:ae:a7:e9:f2:ee:35:ef:b0:41: 72:7c:f9:4d:57:b1:d6:64:2e:ad:d9:cf:2d:a5:dc:01:f2:5e: d6:9d:ae:d1:7f:d8:08:f4:5b:60:aa:90:5e:24:09:03:84:0c: 91:18:fe:25:d0:8d:d8:e1:34:5c:9f:95:60:45:15:20:ad:86: ce:8a:dd:72:47:89:d8:b0:6d:8c:f9:69:84:06:d9:9d:97:17: 45:69:f5:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTEu+s+0W5ElQxoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YTE5N2U2OTgtODc3Mi00YTcxLTg4NDYtYWRkODdiMjBiMjU4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuLZNrsQxs37mkkYi4joBCwQQ5u0s2w8fZWa LKzmUXPRrObeFuGBjoM4BX4NwR7h5d0nvkB5W0iI+Np3dvzGk/Ibkhq5mUjlD4Py ZAoL2hxMkXpvdJNto8yn6OMDmT+sidXkKvhK5SkLo9uju1fyr2aSMvww4t73JRou ToDi5GxRlAT+EP7ncGifBOekiFEu1F6CfNC5FC6NUgwdSsTrcTiGyd/KEraWV13d lTOyofWhc910cBDd9VQe1mGKWeWnUZjkjBNseTMU/LWF2kP7duZg6aWgN34u11yC TwCdtjxpaeY16p1V4xzFpW4ZYl/vbu5Wqs+0Xgy99wd+6md/2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM+pKimVohyVX12jrQRbDCCNgUx4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTc0MjhiYzUtMTU4Yy0z ZGRhLThhY2MtNDAzYTliOWI1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFw/Xlt3VeTb4yWIXHPQ5Pb9j0QSo2eRDj+xQTo6EGTwG5NOHja2Yd40 w4h1y4ZE+a3tPCJ9CCLpLHTXCSIGX9YaTHVMg2mspwWiGLp0i/ar8ThsXSklvFqM mXi5atDctSmsoNa+5KAaRqHxCd/hnaWT7TVAitohwT35ntabul07EOo12v4hXIiB 6RoW65ie3Q+mro/lWCAxsYZHWrLm/aH/T+sh7zFg3JUbl66n6fLuNe+wQXJ8+U1X sdZkLq3Zzy2l3AHyXtadrtF/2Aj0W2CqkF4kCQOEDJEY/iXQjdjhNFyflWBFFSCt hs6K3XJHidiwbYz5aYQG2Z2XF0Vp9ec= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:08 2025 by rpki-client