$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa File: f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa (raw, json) Hash identifier: BtU1Pf4qNfxo0boCM18rXoG2N2P5OcOAwxv20U/NfxQ= Subject key identifier: 40:BE:9A:3C:44:F6:7C:B7:8F:A1:74:6F:5F:E3:13:03:72:15:B7:0C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA5859A3891857DA10BC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.58.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a5:85:9a:38:91:85:7d:a1:0b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6f783689-6eef-44a4-affe-79f587c27c23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:5c:dd:dc:39:2f:26:e9:19:5c:73:50:bf:4e: d8:51:8f:92:7a:45:28:ed:33:b3:21:92:6d:ce:77: 91:b0:79:2c:eb:0f:7e:bd:36:50:2b:9a:3f:31:ea: 2f:49:f3:6f:4a:cf:47:1d:27:d6:a0:0d:d0:b6:b9: e1:b7:c6:b8:da:53:77:a9:80:df:d0:19:b2:f5:ab: 5e:ed:9f:4d:19:2e:cd:82:2c:8b:18:f2:76:71:4b: 91:2b:6b:1b:0b:c1:74:a5:40:7a:76:2d:51:0a:4f: e0:94:b7:d6:5f:b4:de:b7:cb:72:54:23:68:80:fb: 31:48:c4:41:1c:b6:9b:65:4c:87:f9:08:29:bc:4d: fa:5c:47:c6:f7:04:a6:d7:97:c4:3b:c1:73:1c:b6: 90:ca:19:2c:8e:f3:5a:9c:46:e5:72:9e:1b:27:f7: a9:23:95:e5:31:17:35:94:64:fd:43:59:a1:6d:7d: 92:5b:8f:77:a2:9e:af:ba:cd:8d:4e:29:f1:86:a6: a3:eb:18:38:5d:42:4a:4c:e7:2f:9d:5a:9f:17:ee: f5:0a:35:8b:1b:a9:ef:26:8c:11:a9:52:1f:d6:0a: 90:43:8d:fb:74:02:49:3b:5b:40:04:dc:80:43:79: e4:42:93:5c:7b:ca:d7:b3:1f:14:22:4b:41:3b:f5: 27:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:BE:9A:3C:44:F6:7C:B7:8F:A1:74:6F:5F:E3:13:03:72:15:B7:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f9f83642-2862-3b8b-a6ca-e7ce0ad6d4fa.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:93:d4:13:b0:9a:a3:60:59:e4:5f:b1:f4:69:75:fe:29:6d: dc:dc:02:b3:a9:f8:3e:7a:ae:53:5f:f4:a5:ea:71:c2:55:1a: d9:4b:d7:b3:c6:6a:81:78:f2:6f:88:05:db:2f:0e:65:48:71: 52:f8:11:16:77:8b:9f:06:d8:f4:9f:f5:a8:f4:85:85:a9:d8: f6:01:e3:72:9b:0a:3e:69:29:61:fd:92:0c:bc:64:dd:fa:6c: 8e:03:96:93:9f:4c:e3:b7:de:12:47:d7:03:63:1c:ce:41:3a: 91:17:e4:00:ac:8b:7a:04:05:fb:31:da:ae:18:5b:22:d2:3d: 90:fb:b9:6c:a9:7f:95:04:9f:4d:eb:33:15:20:30:34:2c:0d: c5:c4:7e:0b:47:30:8a:c6:0c:03:b1:5b:99:5a:15:54:60:e7: 95:79:ec:bb:ff:b3:45:8e:e5:38:42:98:68:24:4a:7a:8b:22: c8:0e:26:63:92:b5:02:2a:13:f9:46:c2:23:37:23:a5:2d:25: e0:2f:da:42:60:28:19:02:43:00:14:f5:f2:a7:64:4a:2f:ed: 6a:cc:09:e2:d4:60:95:a0:76:67:a5:80:59:fb:1a:b0:1a:6b: b7:85:be:df:0e:67:77:74:cc:d1:e6:63:3b:17:e4:24:fb:ef: 11:82:30:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKWFmjiRhX2hC8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NmY3ODM2ODktNmVlZi00NGE0LWFmZmUtNzlmNTg3YzI3YzIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlzd3DkvJukZXHNQv07YUY+SekUo7TOzIZJt zneRsHks6w9+vTZQK5o/MeovSfNvSs9HHSfWoA3Qtrnht8a42lN3qYDf0Bmy9ate 7Z9NGS7NgiyLGPJ2cUuRK2sbC8F0pUB6di1RCk/glLfWX7Tet8tyVCNogPsxSMRB HLabZUyH+QgpvE36XEfG9wSm15fEO8FzHLaQyhksjvNanEblcp4bJ/epI5XlMRc1 lGT9Q1mhbX2SW493op6vus2NTinxhqaj6xg4XUJKTOcvnVqfF+71CjWLG6nvJowR qVIf1gqQQ437dAJJO1tABNyAQ3nkQpNce8rXsx8UIktBO/Un1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEC+mjxE9ny3j6F0b1/jEwNyFbcMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjlmODM2NDItMjg2Mi0z YjhiLWE2Y2EtZTdjZTBhZDZkNGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDpQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECT1BOwmqNgWeRfsfRpdf4pbdzcArOp+D56rlNf9KXqccJVGtlL17PG aoF48m+IBdsvDmVIcVL4ERZ3i58G2PSf9aj0hYWp2PYB43KbCj5pKWH9kgy8ZN36 bI4DlpOfTOO33hJH1wNjHM5BOpEX5ACsi3oEBfsx2q4YWyLSPZD7uWypf5UEn03r MxUgMDQsDcXEfgtHMIrGDAOxW5laFVRg55V57Lv/s0WO5ThCmGgkSnqLIsgOJmOS tQIqE/lGwiM3I6UtJeAv2kJgKBkCQwAU9fKnZEov7WrMCeLUYJWgdmelgFn7GrAa a7eFvt8OZ3d0zNHmYzsX5CT77xGCMCs= -----END CERTIFICATE-----Generated at Wed Oct 8 21:16:56 2025 by rpki-client