$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa File: eab971f4-114c-3798-a9f4-6c0ad419f866.roa (raw, json) Hash identifier: SmwsFdHi4ifm+rhZbD6Rb1mdNtwyUf+wLAwVfZ0AJWE= Subject key identifier: C7:AB:FB:41:A7:41:91:61:8F:94:4A:A0:34:B1:FB:C1:21:78:CD:1A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA1DA25F31C4560089800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.61.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a1:da:25:f3:1c:45:60:08:98:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=fe50a8ca-5aa4-44ec-8b00-f32545fb440a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:c9:cf:89:43:2d:c5:7a:8d:f6:5b:cf:b2:76: 99:27:b9:1c:66:fd:70:ac:cd:ba:ee:6d:ca:f7:8b: e7:5f:b2:c1:b7:55:84:9f:59:14:b3:45:12:75:d0: f5:10:80:75:df:89:19:16:ec:bb:d8:a3:ab:24:3f: e6:60:91:e3:4a:8d:35:9f:13:0e:f0:4b:8d:70:e8: 2f:4f:16:ac:9d:72:9e:48:f6:8d:99:7e:68:59:83: 98:5e:1b:29:28:ce:96:e7:63:ee:1d:6e:4c:27:38: 66:ef:98:56:84:b0:d6:da:fc:bc:92:9a:23:f3:cc: 01:62:d4:db:1f:da:70:fe:b4:b4:5a:02:9b:a4:cc: a9:34:be:46:12:10:cb:9e:2e:05:b3:c6:7a:29:0c: 84:10:18:59:89:53:d9:15:a2:39:26:af:e0:ed:a7: e8:f5:87:45:b1:ce:81:38:15:39:ae:d6:b5:aa:12: 31:fe:44:62:0c:09:4e:c9:3f:6f:63:2f:b3:7d:4b: 0a:fa:fc:9c:36:1c:8d:8e:21:d8:42:40:56:44:67: 54:3e:95:b9:df:52:cd:f0:31:c2:3f:6a:5d:49:7c: 41:f2:64:23:ec:17:f6:06:24:f0:e9:29:45:19:67: 5d:6a:5b:b8:77:3d:3a:b5:42:2e:d5:29:60:de:06: df:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AB:FB:41:A7:41:91:61:8F:94:4A:A0:34:B1:FB:C1:21:78:CD:1A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eab971f4-114c-3798-a9f4-6c0ad419f866.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:7f:8d:78:64:de:e8:99:66:fc:78:21:ec:ad:05:e8:89:a9: a2:76:dc:d6:a5:74:c2:67:1d:96:84:9f:82:82:53:8c:82:ca: 26:50:af:cf:6e:1a:d2:8d:19:b8:65:a4:55:3c:6f:3a:b8:97: 53:12:c5:e7:40:ea:64:a8:63:dd:ef:01:1e:aa:4a:a9:18:c0: af:a6:52:b9:7d:f2:bc:77:7b:78:2d:5f:3c:40:0e:6e:bd:4a: b8:1b:f1:2e:83:17:b8:23:b2:bc:19:9d:6c:5e:f1:c2:14:db: 87:60:42:0e:6e:b1:15:d4:d4:d4:52:77:3f:93:90:c3:48:20: 5a:d8:af:bf:32:a0:99:50:4a:c1:d7:54:77:75:56:6d:bf:dc: 19:52:96:30:01:3b:07:60:c2:6a:b2:df:1c:e6:e5:91:4d:a3: 51:b4:7f:78:47:03:47:a3:c9:ab:6f:6b:ef:00:79:4e:5a:ef: 26:0d:dc:06:52:13:10:49:8c:bf:f4:57:46:77:fe:18:5e:04: 43:da:f3:5e:37:35:d3:81:f8:cb:8a:2b:52:4e:64:d1:eb:e9: c7:ad:ca:05:67:ed:c8:e1:0c:98:1b:89:02:85:0b:74:fd:01: b9:6d:54:28:48:a1:bb:cd:ce:cb:71:6c:a9:7a:6d:b6:b7:97: 94:bf:fa:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKHaJfMcRWAImAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZmU1MGE4Y2EtNWFhNC00NGVjLThiMDAtZjMyNTQ1ZmI0NDBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl8nPiUMtxXqN9lvPsnaZJ7kcZv1wrM267m3K 94vnX7LBt1WEn1kUs0USddD1EIB134kZFuy72KOrJD/mYJHjSo01nxMO8EuNcOgv TxasnXKeSPaNmX5oWYOYXhspKM6W52PuHW5MJzhm75hWhLDW2vy8kpoj88wBYtTb H9pw/rS0WgKbpMypNL5GEhDLni4Fs8Z6KQyEEBhZiVPZFaI5Jq/g7afo9YdFsc6B OBU5rta1qhIx/kRiDAlOyT9vYy+zfUsK+vycNhyNjiHYQkBWRGdUPpW531LN8DHC P2pdSXxB8mQj7Bf2BiTw6SlFGWddalu4dz06tUIu1Slg3gbf4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMer+0GnQZFhj5RKoDSx+8EheM0aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWFiOTcxZjQtMTE0Yy0z Nzk4LWE5ZjQtNmMwYWQ0MTlmODY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD1gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJR/jXhk3uiZZvx4IeytBeiJqaJ23NaldMJnHZaEn4KCU4yCyiZQr89u GtKNGbhlpFU8bzq4l1MSxedA6mSoY93vAR6qSqkYwK+mUrl98rx3e3gtXzxADm69 Srgb8S6DF7gjsrwZnWxe8cIU24dgQg5usRXU1NRSdz+TkMNIIFrYr78yoJlQSsHX VHd1Vm2/3BlSljABOwdgwmqy3xzm5ZFNo1G0f3hHA0ejyatva+8AeU5a7yYN3AZS ExBJjL/0V0Z3/hheBEPa8143NdOB+MuKK1JOZNHr6cetygVn7cjhDJgbiQKFC3T9 AbltVChIobvNzstxbKl6bba3l5S/+ro= -----END CERTIFICATE-----Generated at Wed Oct 8 21:15:00 2025 by rpki-client