$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fedcd341-a391-3c0c-a9b7-9961fb5a78f8.roa File: fedcd341-a391-3c0c-a9b7-9961fb5a78f8.roa (raw, json) Hash identifier: xr0o7ehTkecQpuntVvxwpW7CYkcdiv5cjdYkdacpiQg= Subject key identifier: F0:2E:99:56:CE:73:38:38:CC:7E:5F:C2:C0:C9:72:20:15:C4:8D:E3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA89B6E01FECAFF1B5220 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fedcd341-a391-3c0c-a9b7-9961fb5a78f8.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 10 Oct 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a8:9b:6e:01:fe:ca:ff:1b:52:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=e2975e30-0813-49ba-b0ec-59f92714f548 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:bb:6d:d5:f4:c5:2b:08:96:a7:ae:7b:50:68: 39:ae:43:39:7b:09:a0:78:ad:4c:32:4d:1c:02:45: c0:9e:80:78:39:8e:a4:78:ae:7a:73:e0:b6:c7:5a: f7:55:c9:39:df:93:ca:db:60:a7:83:fa:9c:c4:35: 0e:9c:53:07:7f:5e:df:1d:e0:71:72:24:cf:09:a8: 87:b9:79:33:af:f6:12:5f:93:06:24:00:7d:ba:1a: 32:c1:6e:e8:84:69:0e:35:54:c9:f4:6f:e8:d8:14: a2:74:a5:ad:eb:a0:f4:2c:2f:fb:b0:7b:c5:3a:5e: 81:e3:ed:55:0e:c1:62:c4:bc:8b:b4:32:57:0a:2c: 7f:ad:77:fe:e6:31:af:de:6f:fd:14:41:c7:8b:37: 08:f7:01:56:9f:19:87:c6:06:00:a7:d4:44:d8:ec: 33:a0:e9:23:20:21:10:6b:b0:0d:cc:91:1a:6f:7d: 92:e3:8c:e1:bb:81:97:9d:a7:d2:8c:76:4f:ac:56: 1c:91:24:7a:96:5d:2e:e9:e4:ec:49:3f:68:9b:30: e4:15:1f:bf:9b:3d:97:ef:64:87:32:4f:41:9f:3b: 22:a6:e8:03:b7:6d:44:95:c6:c0:3d:69:dc:c9:bf: 50:c3:8b:92:e8:1e:76:8d:8f:94:e6:39:62:85:0d: 1c:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2E:99:56:CE:73:38:38:CC:7E:5F:C2:C0:C9:72:20:15:C4:8D:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/fedcd341-a391-3c0c-a9b7-9961fb5a78f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:1a:73:d4:6e:69:a5:03:9d:f3:f6:43:0c:7a:15:b0:ad:4e: 3f:31:5d:1a:67:e7:f4:ce:3e:6f:d4:b4:78:ae:e4:23:2b:25: de:57:71:56:95:1c:8a:a4:a4:47:2c:62:93:84:36:19:ee:b1: 32:40:70:fd:35:18:04:40:b7:33:12:43:99:7c:b2:5e:01:28: 14:7e:15:7e:d0:50:e1:5e:ad:c4:cb:0a:03:37:f8:a2:af:cd: 32:f5:0c:f4:89:b2:97:02:24:ea:9f:9a:28:0d:26:7d:0f:7e: 76:d9:6e:46:31:79:a4:3b:45:f0:e5:c9:dc:47:33:1c:04:7e: 57:db:89:cf:11:86:4a:66:6a:89:55:c8:09:d4:f7:92:8c:fc: 9b:6d:d8:5b:95:80:93:20:dc:6e:0b:5e:07:aa:19:05:92:48: 84:51:d3:7a:bf:80:e8:a7:68:ff:c2:62:0e:94:fc:60:9a:c7: dd:07:6c:33:3d:d8:b7:ef:aa:2f:95:8b:c0:6e:48:89:bd:81: 90:c7:43:7e:da:8e:5a:a0:56:83:35:6a:57:9b:41:b8:d2:b9: e7:b4:f5:1c:9e:0f:61:5a:b1:a0:f4:95:af:55:e8:2d:5b:cf: f6:c0:47:96:42:ba:fa:2d:cd:87:58:9f:24:bd:c3:b9:81:16: 82:13:6b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKibbgH+yv8bUiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZTI5NzVlMzAtMDgxMy00OWJhLWIwZWMtNTlmOTI3MTRmNTQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7tt1fTFKwiWp657UGg5rkM5ewmgeK1MMk0c AkXAnoB4OY6keK56c+C2x1r3Vck535PK22Cng/qcxDUOnFMHf17fHeBxciTPCaiH uXkzr/YSX5MGJAB9uhoywW7ohGkONVTJ9G/o2BSidKWt66D0LC/7sHvFOl6B4+1V DsFixLyLtDJXCix/rXf+5jGv3m/9FEHHizcI9wFWnxmHxgYAp9RE2OwzoOkjICEQ a7ANzJEab32S44zhu4GXnafSjHZPrFYckSR6ll0u6eTsST9omzDkFR+/mz2X72SH Mk9BnzsipugDt21ElcbAPWncyb9Qw4uS6B52jY+U5jlihQ0cxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPAumVbOczg4zH5fwsDJciAVxI3jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZmVkY2QzNDEtYTM5MS0z YzBjLWE5YjctOTk2MWZiNWE3OGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIMac9RuaaUDnfP2Qwx6FbCtTj8xXRpn5/TOPm/UtHiu5CMrJd5XcVaV HIqkpEcsYpOENhnusTJAcP01GARAtzMSQ5l8sl4BKBR+FX7QUOFercTLCgM3+KKv zTL1DPSJspcCJOqfmigNJn0PfnbZbkYxeaQ7RfDlydxHMxwEflfbic8RhkpmaolV yAnU95KM/Jtt2FuVgJMg3G4LXgeqGQWSSIRR03q/gOinaP/CYg6U/GCax90HbDM9 2Lfvqi+Vi8BuSIm9gZDHQ37ajlqgVoM1alebQbjSuee09RyeD2FasaD0la9V6C1b z/bAR5ZCuvotzYdYnyS9w7mBFoITaxo= -----END CERTIFICATE-----Generated at Wed Oct 8 21:14:54 2025 by rpki-client