$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5ca79f7c-d151-3ce5-bb06-6db17245e3b0.roa File: 5ca79f7c-d151-3ce5-bb06-6db17245e3b0.roa (raw, json) Hash identifier: tAXD7fTxUBPk49bifuhnj6TqWWAkbGM3KpisXao1EyI= Subject key identifier: 4A:7C:59:84:E0:52:3F:E7:B6:B3:77:D2:FD:6E:74:C1:94:D9:9F:16 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C4AC0FB6BEA3C38F33480 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5ca79f7c-d151-3ce5-bb06-6db17245e3b0.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:4a:c0:fb:6b:ea:3c:38:f3:34:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=289eae7e-48a2-43da-92b2-922ef83fada1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c3:42:63:0a:f6:6a:50:54:80:3d:84:10:ad: 73:63:e0:22:b6:11:04:17:bb:17:86:34:ac:a0:d5: 6b:4e:fd:44:be:4c:fd:50:55:bd:a5:f2:c7:85:28: b8:34:2f:4e:1d:26:28:6a:16:2d:7f:dd:74:87:ee: 67:86:59:c0:2e:e5:da:03:df:d5:e4:34:9d:d4:d5: 75:7b:ae:0c:18:c2:94:89:6e:f5:7d:43:62:e9:ba: 23:24:02:02:8c:7f:91:60:c8:66:32:fc:46:1e:7b: 63:2f:e8:23:6f:b8:b2:b6:5c:2a:50:34:bf:10:a5: 28:79:10:94:1d:6a:ba:ab:14:b8:d7:6e:16:6c:4e: f4:83:cd:5c:a5:07:ca:dd:7a:d0:44:09:ff:0f:5e: 7a:44:98:34:66:64:b6:aa:b5:7b:a0:24:3c:03:14: fc:bb:ef:58:80:7f:4f:33:fe:c7:c4:d2:bf:c5:bc: 05:5c:8e:76:a6:98:cf:5c:b4:38:91:32:63:90:8e: 77:82:a9:85:b1:4c:a5:d7:2c:b3:ae:07:5f:8c:ab: 61:9f:78:82:9d:db:e8:01:1d:dc:9c:80:6d:1b:8e: 94:b2:fc:e9:b5:a5:53:7b:32:3c:f3:6c:c4:66:65: 19:c9:a6:9d:2e:cb:0e:09:57:68:8b:5e:5f:06:f8: 3c:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:7C:59:84:E0:52:3F:E7:B6:B3:77:D2:FD:6E:74:C1:94:D9:9F:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5ca79f7c-d151-3ce5-bb06-6db17245e3b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:78:e5:bd:6b:59:37:b1:9c:7a:4d:68:53:0c:59:85:23:0a: 6b:e6:2c:16:92:89:f9:25:ea:35:7f:00:9b:7e:e7:de:27:27: 8d:3c:68:f8:83:dd:bb:95:9d:40:0b:bf:96:7e:eb:00:0a:73: af:30:63:dc:d0:e0:b8:4a:3c:d9:40:76:4f:ea:d9:ba:0f:44: 5e:b2:b1:c9:61:d4:2d:8f:b2:c6:c4:61:b8:7c:f8:2e:57:e8: 29:9d:fa:04:de:f7:f5:6c:f2:f0:37:fd:7b:08:b8:88:1b:10: ed:fb:1f:76:82:49:4c:ec:de:14:8a:4d:f5:e6:ec:5b:d2:b1: bd:0d:3a:50:07:b6:71:fa:eb:b0:6a:13:d9:11:67:a3:6c:59: 62:e6:d8:35:60:70:aa:5b:43:56:c4:35:63:1d:30:6f:a5:7c: 27:81:d1:a5:59:72:e6:58:de:ed:30:98:3b:85:be:5a:75:67: d4:3f:84:42:be:05:75:f5:be:63:63:ff:95:a4:2e:40:7d:cf: 13:ee:53:b6:54:3d:6d:75:f8:c7:23:bd:40:3b:2f:42:42:72: be:21:29:26:76:39:6e:80:d4:54:be:38:87:33:15:67:f5:70: e6:f3:ca:67:1d:f5:37:98:d7:42:a7:21:71:45:54:4b:5e:66: fb:ff:81:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTErA+2vqPDjzNIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Mjg5ZWFlN2UtNDhhMi00M2RhLTkyYjItOTIyZWY4M2ZhZGExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsNCYwr2alBUgD2EEK1zY+AithEEF7sXhjSs oNVrTv1Evkz9UFW9pfLHhSi4NC9OHSYoahYtf910h+5nhlnALuXaA9/V5DSd1NV1 e64MGMKUiW71fUNi6bojJAICjH+RYMhmMvxGHntjL+gjb7iytlwqUDS/EKUoeRCU HWq6qxS4124WbE70g81cpQfK3XrQRAn/D156RJg0ZmS2qrV7oCQ8AxT8u+9YgH9P M/7HxNK/xbwFXI52ppjPXLQ4kTJjkI53gqmFsUyl1yyzrgdfjKthn3iCndvoAR3c nIBtG46UsvzptaVTezI882zEZmUZyaadLssOCVdoi15fBvg8yQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEp8WYTgUj/ntrN30v1udMGU2Z8WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNWNhNzlmN2MtZDE1MS0z Y2U1LWJiMDYtNmRiMTcyNDVlM2IwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHN45b1rWTexnHpNaFMMWYUjCmvmLBaSifkl6jV/AJt+594nJ408aPiD 3buVnUALv5Z+6wAKc68wY9zQ4LhKPNlAdk/q2boPRF6ysclh1C2PssbEYbh8+C5X 6Cmd+gTe9/Vs8vA3/XsIuIgbEO37H3aCSUzs3hSKTfXm7FvSsb0NOlAHtnH667Bq E9kRZ6NsWWLm2DVgcKpbQ1bENWMdMG+lfCeB0aVZcuZY3u0wmDuFvlp1Z9Q/hEK+ BXX1vmNj/5WkLkB9zxPuU7ZUPW11+McjvUA7L0JCcr4hKSZ2OW6A1FS+OIczFWf1 cObzymcd9TeY10KnIXFFVEteZvv/gQM= -----END CERTIFICATE-----Generated at Wed Nov 5 08:19:12 2025 by rpki-client