$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa File: 6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa (raw, json) Hash identifier: N0NJuD8LZkx/+QanrPEk+Ip/BBREftbFV0y2St+4OUM= Subject key identifier: A9:E0:AF:E7:C7:81:67:A6:1D:1F:6E:5B:B0:64:12:F6:9B:D6:D7:B8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C518C076E13D91999C700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:51:8c:07:6e:13:d9:19:99:c7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=be5545b8-9201-4d6e-8945-40190eb3e117 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:be:5a:2e:2f:e4:42:e2:45:51:29:de:c4:84: 64:de:28:04:4a:f6:f4:5a:e2:c5:72:8e:d8:af:9c: 79:ee:c0:b1:e7:d2:6a:98:5b:6c:78:7f:26:14:68: 65:68:24:01:02:54:4c:a2:78:a7:10:a5:9e:cf:91: c0:3c:10:a7:e1:b4:d0:17:91:51:a6:44:f0:e5:71: 80:1d:64:ae:9d:dd:75:c4:b7:28:70:9d:c7:66:b2: ba:06:d8:50:d6:eb:c9:42:f1:49:5e:73:fa:72:9f: e5:28:bb:31:6d:1c:5d:5e:36:ad:0e:12:85:8a:0a: 4c:51:3d:81:fc:6e:03:c9:90:b2:61:3a:24:b5:d0: 09:73:5b:98:26:e6:2c:99:48:4a:68:ec:50:0d:c0: 9e:84:8d:fb:34:9f:a9:71:8d:28:c2:dd:14:f9:a1: 5f:6c:3e:19:f1:64:68:dc:51:96:cf:95:0a:b9:05: 45:c8:43:97:a8:e2:7e:80:5b:6f:3b:b0:1f:25:28: c7:3c:9a:11:bb:63:c1:f3:44:ab:0d:45:3e:5f:da: 25:e4:e2:72:b1:bd:06:ea:68:36:b8:31:09:ad:35: 44:9c:39:d7:f9:89:72:b5:3a:46:a6:83:0e:66:e0: 39:70:3d:50:4f:11:96:3a:52:59:dc:36:16:bc:f7: b0:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E0:AF:E7:C7:81:67:A6:1D:1F:6E:5B:B0:64:12:F6:9B:D6:D7:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6f8b0381-08ad-3ccb-a2a4-d7ab11bb5f39.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:37:4c:10:12:ba:08:84:be:30:e6:c4:79:22:25:11:39: 28:fe:d2:e6:93:d5:6a:96:e3:b1:2c:b1:96:ac:6e:f1:c5:87: 4c:46:f2:b9:74:fd:50:6e:74:82:a8:df:91:7e:b4:53:1a:b4: 73:70:28:b7:c4:8c:5d:a1:91:64:01:27:74:86:76:bf:7b:29: 6b:a3:35:22:48:0f:c9:f2:93:6f:48:73:4b:39:5a:36:88:01: 87:f8:17:27:66:d1:09:98:a3:a2:62:a5:a1:83:12:1e:fb:7d: d0:be:92:b2:fe:5f:9f:01:c6:41:18:8e:fe:1a:d0:5d:e5:30: 14:6e:ce:e4:37:00:b4:a7:4b:55:25:da:4f:fa:6e:da:65:f3: 7b:d7:0a:a4:60:ca:1a:75:5e:6c:d8:b2:e2:a1:57:84:21:25: e7:b4:0c:af:85:9a:f9:71:25:e2:2c:b0:47:06:79:ce:ec:45: 92:ee:43:74:49:ba:52:6d:78:80:e8:42:d6:3c:d0:9c:bc:9b: b8:cc:65:47:35:c7:db:19:69:14:4a:0c:32:e9:26:6c:60:ce: 5b:72:34:a2:2f:14:dc:d7:df:2f:a9:89:9a:e3:f5:6e:ad:2d: b6:ae:7f:8a:06:54:ea:2a:8e:89:bc:a0:64:47:ad:34:8f:a4: 69:7b:ef:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTFGMB24T2RmZxwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk YmU1NTQ1YjgtOTIwMS00ZDZlLTg5NDUtNDAxOTBlYjNlMTE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAir5aLi/kQuJFUSnexIRk3igESvb0WuLFco7Y r5x57sCx59JqmFtseH8mFGhlaCQBAlRMoninEKWez5HAPBCn4bTQF5FRpkTw5XGA HWSund11xLcocJ3HZrK6BthQ1uvJQvFJXnP6cp/lKLsxbRxdXjatDhKFigpMUT2B /G4DyZCyYToktdAJc1uYJuYsmUhKaOxQDcCehI37NJ+pcY0owt0U+aFfbD4Z8WRo 3FGWz5UKuQVFyEOXqOJ+gFtvO7AfJSjHPJoRu2PB80SrDUU+X9ol5OJysb0G6mg2 uDEJrTVEnDnX+YlytTpGpoMOZuA5cD1QTxGWOlJZ3DYWvPewWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKngr+fHgWemHR9uW7BkEvab1te4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNmY4YjAzODEtMDhhZC0z Y2NiLWEyYTQtZDdhYjExYmI1ZjM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF1N0wQEroIhL4w5sR5IiUROSj+0uaT1WqW47EssZasbvHFh0xG8rl0 /VBudIKo35F+tFMatHNwKLfEjF2hkWQBJ3SGdr97KWujNSJID8nyk29Ic0s5WjaI AYf4Fydm0QmYo6JipaGDEh77fdC+krL+X58BxkEYjv4a0F3lMBRuzuQ3ALSnS1Ul 2k/6btpl83vXCqRgyhp1XmzYsuKhV4QhJee0DK+FmvlxJeIssEcGec7sRZLuQ3RJ ulJteIDoQtY80Jy8m7jMZUc1x9sZaRRKDDLpJmxgzltyNKIvFNzX3y+piZrj9W6t Lbauf4oGVOoqjom8oGRHrTSPpGl77wo= -----END CERTIFICATE-----Generated at Wed Nov 5 06:06:46 2025 by rpki-client