$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa File: 128a74c3-e6aa-3d06-ac4a-655a48640308.roa (raw, json) Hash identifier: HzA6P9v5TNsbXaDkt34UdUfd3V2TWlQ+yTQhjk1Glrw= Subject key identifier: 61:D8:E3:2A:59:02:53:3C:C0:96:60:BF:8B:78:12:AA:FA:34:AB:CF Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C614A8EBABECE4367FE80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.33.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:61:4a:8e:ba:be:ce:43:67:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=6fee3443-afbf-45f0-b2ba-767f1a7756b9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:bc:06:16:c2:75:bf:b7:aa:4c:f0:f6:63:c1: e3:93:b7:e5:eb:44:24:47:5b:72:cd:d2:1a:24:26: 1d:f4:55:e9:fa:12:51:05:68:bd:fc:e6:fe:58:5d: 98:12:b4:c1:f0:d6:4e:2c:96:21:64:cd:f5:ca:68: 45:e6:be:29:8b:99:e6:47:87:4a:38:72:67:21:b4: d4:5a:3b:56:7a:21:dd:70:56:e0:c4:bd:f5:85:88: 65:e9:e1:38:35:f3:68:01:8d:9c:bd:5e:6e:39:72: 2a:a4:aa:97:3f:74:df:15:0b:c0:b3:13:c4:57:c4: d2:84:90:a0:de:a0:09:3d:c4:f6:40:61:31:af:34: 1a:e8:75:b3:f5:9e:9d:0e:ad:68:c0:7c:e1:49:7f: 57:6d:1c:b5:42:38:b5:9c:3c:46:b4:04:88:26:bc: 84:fd:a4:10:7a:4b:72:da:06:5e:3a:06:31:cd:41: 0a:51:d2:3d:ba:70:09:bf:af:dd:32:f6:5b:11:80: f3:1d:f0:70:bf:1a:23:80:f1:de:32:c4:51:3a:4b: e4:aa:e6:3d:8a:66:04:2b:16:a0:8a:ca:e8:12:36: 29:83:86:1b:7c:6b:3b:41:f9:c2:0f:be:57:3c:62: 7d:29:fd:91:46:a6:b6:04:8b:c4:e8:70:62:44:4c: 42:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:D8:E3:2A:59:02:53:3C:C0:96:60:BF:8B:78:12:AA:FA:34:AB:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:f1:6d:04:1f:5a:f1:f8:4a:52:3d:05:be:9c:30:93:68:08: b6:81:56:85:3a:1a:b2:49:df:11:e6:2a:ed:36:21:08:92:7b: b2:c7:35:47:4f:1c:9c:2c:ca:b8:17:1a:1c:99:d6:84:ab:6a: b0:d7:ca:fe:62:50:52:ab:c7:2c:78:f6:52:be:75:a9:9d:9b: c1:29:36:47:a1:23:8d:b5:99:cc:8f:51:87:ae:60:c2:86:10: c5:6d:1b:81:3c:f1:6b:6c:e3:6c:0d:f6:a8:67:78:ba:92:a3: db:8b:c4:f1:13:f6:51:5a:ee:d2:0b:67:9f:27:6e:93:57:92: 66:2c:3b:64:60:87:4a:67:5f:90:42:11:38:da:35:d4:df:33: 95:da:90:20:ba:8b:b4:b4:57:8f:fc:c5:d3:ca:1f:ab:ef:33: 86:17:e1:be:92:8c:25:2d:c1:4c:19:8f:3e:06:43:82:ce:8a: 04:31:eb:14:88:de:2e:8b:01:98:81:1c:54:5f:ae:4e:c8:b1: c2:97:95:d0:da:12:ae:06:21:a4:cf:68:64:a3:70:d5:82:9b: 2f:06:a4:7b:7f:e2:0b:c6:34:81:55:64:f9:32:b0:e5:03:fe: 67:94:4e:00:fa:9b:d5:38:c0:72:9b:c6:0d:61:33:11:f5:c1: fd:41:83:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGFKjrq+zkNn/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NmZlZTM0NDMtYWZiZi00NWYwLWIyYmEtNzY3ZjFhNzc1NmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbwGFsJ1v7eqTPD2Y8Hjk7fl60QkR1tyzdIa JCYd9FXp+hJRBWi9/Ob+WF2YErTB8NZOLJYhZM31ymhF5r4pi5nmR4dKOHJnIbTU WjtWeiHdcFbgxL31hYhl6eE4NfNoAY2cvV5uOXIqpKqXP3TfFQvAsxPEV8TShJCg 3qAJPcT2QGExrzQa6HWz9Z6dDq1owHzhSX9XbRy1Qji1nDxGtASIJryE/aQQekty 2gZeOgYxzUEKUdI9unAJv6/dMvZbEYDzHfBwvxojgPHeMsRROkvkquY9imYEKxag isroEjYpg4YbfGs7QfnCD75XPGJ9Kf2RRqa2BIvE6HBiRExCZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGHY4ypZAlM8wJZgv4t4Eqr6NKvPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTI4YTc0YzMtZTZhYS0z ZDA2LWFjNGEtNjU1YTQ4NjQwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbxbQQfWvH4SlI9Bb6cMJNoCLaBVoU6GrJJ3xHmKu02IQiSe7LHNUdP HJwsyrgXGhyZ1oSrarDXyv5iUFKrxyx49lK+damdm8EpNkehI421mcyPUYeuYMKG EMVtG4E88Wts42wN9qhneLqSo9uLxPET9lFa7tILZ58nbpNXkmYsO2Rgh0pnX5BC ETjaNdTfM5XakCC6i7S0V4/8xdPKH6vvM4YX4b6SjCUtwUwZjz4GQ4LOigQx6xSI 3i6LAZiBHFRfrk7IscKXldDaEq4GIaTPaGSjcNWCmy8GpHt/4gvGNIFVZPkysOUD /meUTgD6m9U4wHKbxg1hMxH1wf1Bgyo= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:06 2025 by rpki-client