$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa File: 7cfb3343-9794-3299-b118-155e595370a9.roa (raw, json) Hash identifier: koxm81jjJ/KiPeY80bomjDAw+kG8dmblg5+mwaZtyxQ= Subject key identifier: 35:18:CD:92:65:89:24:3A:F2:5C:88:3F:1A:B2:17:91:D5:90:08:05 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584AF7EBD725CF3A1E91638E0D00 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa Signing time: Mon 25 Aug 2025 01:00:33 +0000 ROA not before: Mon 25 Aug 2025 01:00:33 +0000 ROA not after: Sun 23 Nov 2025 02:00:33 +0000 asID: 399672 IP address blocks: 165.140.36.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 27 Oct 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f7:eb:d7:25:cf:3a:1e:91:63:8e:0d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Aug 25 01:00:33 2025 GMT Not After : Nov 23 02:00:33 2025 GMT Subject: CN=9b91d24d-db25-4607-b9ca-5d8e08e84eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:6a:04:1c:a9:46:78:90:f3:52:f5:33:4d:fc: 4b:81:a0:cf:0c:ac:8f:50:79:d5:22:ee:09:97:6c: c5:d6:58:b7:ac:c0:35:d8:a1:71:22:a6:de:a2:96: 4b:eb:0e:97:ba:f6:b1:68:43:57:da:55:85:e2:33: b1:2b:3b:9a:4b:e6:75:92:a7:df:db:4d:2a:11:6a: 3d:d2:61:3c:e0:cd:80:09:df:6c:46:62:f1:81:69: 5c:03:ef:1e:27:1b:e7:b4:ea:71:24:78:8e:65:f7: 01:c8:a9:0f:f0:3a:fb:f8:11:0f:54:be:3b:d0:d8: 2a:3d:c7:58:15:0e:ce:18:a8:77:1e:b8:ae:7d:19: 37:95:9a:d4:f1:1e:37:c0:c3:30:3e:57:a1:a0:61: e6:fe:1e:4f:61:88:e2:9f:19:be:e0:b4:3b:ac:bc: 12:6e:5e:dc:d2:f8:c7:19:08:3c:16:4e:c6:9b:63: a6:38:32:02:a4:ac:3a:7e:7e:b0:bb:91:aa:fe:76: 1a:6c:a5:53:37:2e:f9:cc:1f:ce:36:00:d1:10:8c: 83:f6:85:7f:71:54:f7:ff:c9:28:d6:13:b5:09:3e: a6:f3:c3:38:d5:89:3c:4c:c5:02:4c:0d:33:15:aa: 4d:1c:d7:9e:81:cb:86:27:52:a3:a5:6c:6f:56:6e: 72:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:18:CD:92:65:89:24:3A:F2:5C:88:3F:1A:B2:17:91:D5:90:08:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7cfb3343-9794-3299-b118-155e595370a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 165.140.36.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:11:bb:39:10:85:e5:16:2c:60:cd:b2:9a:8f:16:61:45:10: a6:8d:d5:90:25:59:27:7b:f2:bb:71:f3:fc:86:78:c3:1b:c3: 67:c5:4b:15:31:84:e4:aa:f1:61:dd:7a:39:a3:14:1f:10:3a: 98:1b:22:53:80:ee:e1:32:da:fe:c8:ed:9f:0b:1c:49:1b:4a: 6a:9e:53:14:d2:ff:da:7d:33:96:a9:a7:c9:ac:fb:31:57:e7: 96:99:7b:7a:25:14:50:5b:3e:84:b0:1a:fb:e8:f7:d7:9e:7b: 25:57:a7:26:bc:a8:7c:e3:4a:51:91:3e:c7:cb:26:98:77:37: 52:1b:e8:38:f3:38:44:05:a3:46:62:11:ec:38:d8:c6:17:05: 1b:e8:77:f8:5c:b7:6d:2d:a0:ed:7c:eb:65:3e:31:11:c9:64: 1d:cb:a7:c1:ef:a9:b3:82:82:2a:fc:e0:4b:86:6c:0a:f4:3d: d3:fe:52:34:b2:13:7d:b3:9f:b1:8b:fe:46:69:99:44:b2:ca: 12:a1:71:b9:eb:37:fb:c2:9e:49:07:8a:e3:87:04:9d:23:9a: 2b:41:1c:cc:f6:c1:87:00:11:2b:91:1a:2e:33:7f:37:d0:7f: 0d:5f:4f:36:91:a1:04:ec:9a:da:a7:65:2c:2c:52:bb:da:36: f6:4f:f5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr369clzzoekWOODQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI1MDgyNTAxMDAzM1oXDTI1MTEyMzAyMDAzM1owLzEtMCsGA1UEAxMk OWI5MWQyNGQtZGIyNS00NjA3LWI5Y2EtNWQ4ZTA4ZTg0ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuWoEHKlGeJDzUvUzTfxLgaDPDKyPUHnVIu4J l2zF1li3rMA12KFxIqbeopZL6w6XuvaxaENX2lWF4jOxKzuaS+Z1kqff200qEWo9 0mE84M2ACd9sRmLxgWlcA+8eJxvntOpxJHiOZfcByKkP8Dr7+BEPVL470NgqPcdY FQ7OGKh3HriufRk3lZrU8R43wMMwPlehoGHm/h5PYYjinxm+4LQ7rLwSbl7c0vjH GQg8Fk7Gm2OmODICpKw6fn6wu5Gq/nYabKVTNy75zB/ONgDREIyD9oV/cVT3/8ko 1hO1CT6m88M41Yk8TMUCTA0zFapNHNeegcuGJ1KjpWxvVm5y6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDUYzZJliSQ68lyIPxqyF5HVkAgFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2NmYjMzNDMtOTc5NC0z Mjk5LWIxMTgtMTU1ZTU5NTM3MGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCpYwkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcRuzkQheUWLGDNspqPFmFFEKaN1ZAlWSd78rtx8/yGeMMbw2fFSxUx hOSq8WHdejmjFB8QOpgbIlOA7uEy2v7I7Z8LHEkbSmqeUxTS/9p9M5app8ms+zFX 55aZe3olFFBbPoSwGvvo99eeeyVXpya8qHzjSlGRPsfLJph3N1Ib6DjzOEQFo0Zi Eew42MYXBRvod/hct20toO1862U+MRHJZB3Lp8HvqbOCgir84EuGbAr0PdP+UjSy E32zn7GL/kZpmUSyyhKhcbnrN/vCnkkHiuOHBJ0jmitBHMz2wYcAESuRGi4zfzfQ fw1fTzaRoQTsmtqnZSwsUrvaNvZP9XA= -----END CERTIFICATE-----Generated at Sat Oct 25 15:02:04 2025 by rpki-client