$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa File: 1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa (raw, json) Hash identifier: O7Y71I9kh+VJwF47kMf4LRYAFvJOgPKtOHcBfkYHGNY= Subject key identifier: 42:40:B1:43:DB:C0:9E:C1:0C:A0:05:18:EB:BE:3B:FA:AC:95:7F:DC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C9C87D3A116083EDD4520 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:9c:87:d3:a1:16:08:3e:dd:45:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=123974cd-739f-45fe-9f26-54f2ab9cdcd0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:f3:ba:d5:9a:1f:c6:44:1e:4b:02:2e:42:18: ec:1c:b7:cf:60:d1:c4:93:0a:ad:1f:2e:18:aa:85: f6:58:08:54:7d:43:88:2f:42:36:e9:71:1c:79:8b: 66:e6:c8:73:a3:92:95:1e:6e:1a:b6:a2:ec:ba:25: ea:74:26:7a:7d:3b:1e:37:6b:57:34:a3:b7:dc:f5: fb:a6:eb:29:0e:f4:64:3c:9b:ca:3a:95:61:b2:89: e6:62:81:cc:f9:c7:a3:0f:82:30:70:8b:18:49:08: b1:d4:7e:2c:c9:88:94:03:ff:d5:a4:85:9d:75:d8: f8:a5:b7:af:0a:27:23:d9:ef:b5:4f:98:71:e3:5a: 06:4c:61:af:73:8e:65:9e:78:fb:77:40:b6:d2:e5: 8d:bd:05:26:9e:28:bc:e0:98:cb:be:d8:1d:eb:b4: 15:c4:0f:99:7b:7c:25:30:ea:4b:97:bd:f8:c0:24: ea:e8:33:6b:9f:5e:42:d5:69:9c:95:28:ac:ad:96: 8d:a3:41:40:63:d9:86:d7:f9:e0:34:08:4d:1b:53: c6:f1:aa:c2:4f:6d:13:e8:75:b6:df:a3:39:21:76: d5:8f:f4:e4:fa:ce:e2:0b:6c:e8:72:a1:12:79:78: 7a:c3:1f:24:c8:24:76:c0:1d:ee:03:f9:16:a2:4c: 93:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:40:B1:43:DB:C0:9E:C1:0C:A0:05:18:EB:BE:3B:FA:AC:95:7F:DC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:fb:b1:57:73:17:fe:1a:cc:10:1d:93:4b:f8:70:77:9f:31: 60:13:6d:9d:b7:9e:aa:54:34:ef:89:f5:87:4b:b1:f5:dd:66: 7c:f9:b0:d5:86:5f:f5:b7:63:5a:32:a9:ee:3e:61:1f:0e:49: f8:15:c3:2a:5e:1f:d7:01:5e:28:4d:d3:d4:5f:f6:c1:4a:1e: 95:98:62:8a:42:aa:b1:a5:8e:f3:27:71:87:fa:58:e2:90:d8: f2:55:34:40:6a:e8:7e:1c:5d:0a:0b:55:25:a3:03:ec:51:2e: fa:98:cd:4b:19:7a:93:69:4f:77:ca:23:d6:88:1a:7b:b4:fe: 1e:8c:6a:58:5b:b5:79:f4:a6:59:96:b4:8e:15:0b:f6:86:9a: 9f:ff:10:23:04:dc:94:7c:9f:33:ec:81:61:cb:b9:95:36:82: 68:11:16:46:0f:f0:58:7c:98:24:f1:90:5e:4b:f0:8c:5c:bc: 5e:12:4b:bc:5f:74:37:08:c3:56:2d:5b:a0:55:00:f2:89:1e: e0:fa:9a:5a:73:27:6c:d1:e0:f6:20:20:79:fe:d3:e8:6d:9d: 83:29:8d:45:c9:54:a8:de:48:ca:ee:a4:54:8b:63:2b:0c:01: 81:b2:4e:83:f6:40:8e:47:c2:48:58:67:9d:6e:bc:3f:65:92: 5f:00:97:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTJyH06EWCD7dRSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk MTIzOTc0Y2QtNzM5Zi00NWZlLTlmMjYtNTRmMmFiOWNkY2QwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfO61ZofxkQeSwIuQhjsHLfPYNHEkwqtHy4Y qoX2WAhUfUOIL0I26XEceYtm5shzo5KVHm4atqLsuiXqdCZ6fTseN2tXNKO33PX7 puspDvRkPJvKOpVhsonmYoHM+cejD4IwcIsYSQix1H4syYiUA//VpIWdddj4pbev Cicj2e+1T5hx41oGTGGvc45lnnj7d0C20uWNvQUmnii84JjLvtgd67QVxA+Ze3wl MOpLl734wCTq6DNrn15C1WmclSisrZaNo0FAY9mG1/ngNAhNG1PG8arCT20T6HW2 36M5IXbVj/Tk+s7iC2zocqESeXh6wx8kyCR2wB3uA/kWokyTXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEJAsUPbwJ7BDKAFGOu+O/qslX/cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWEwOGU4Y2QtNGY2ZS0z MTkwLThlMTEtMTdlNGQ5OGU5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGn7sVdzF/4azBAdk0v4cHefMWATbZ23nqpUNO+J9YdLsfXdZnz5sNWG X/W3Y1oyqe4+YR8OSfgVwypeH9cBXihN09Rf9sFKHpWYYopCqrGljvMncYf6WOKQ 2PJVNEBq6H4cXQoLVSWjA+xRLvqYzUsZepNpT3fKI9aIGnu0/h6MalhbtXn0plmW tI4VC/aGmp//ECME3JR8nzPsgWHLuZU2gmgRFkYP8Fh8mCTxkF5L8IxcvF4SS7xf dDcIw1YtW6BVAPKJHuD6mlpzJ2zR4PYgIHn+0+htnYMpjUXJVKjeSMrupFSLYysM AYGyToP2QI5HwkhYZ51uvD9lkl8Al8I= -----END CERTIFICATE-----Generated at Wed Nov 5 06:07:03 2025 by rpki-client