$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa File: 7414e153-6a51-342c-a0c1-785f5d538a41.roa (raw, json) Hash identifier: 1Ua/FQc3mPKMm8c02j+NUYYfJE2CyKodZzDYlpMdgGc= Subject key identifier: BE:84:A4:CF:0F:53:2A:F6:8C:D6:92:3E:32:FB:F9:AE:8D:29:D2:7C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA0AD451800C26EFE7CC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a0:ad:45:18:00:c2:6e:fe:7c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=7055e548-d68d-4846-b61a-859acd3e15b6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:df:7e:57:cd:91:54:d6:92:48:4a:e3:46:38: 55:bc:6c:57:ca:ce:36:31:ba:44:a6:d2:98:d1:5a: 07:d0:37:c1:2e:1d:82:8b:a7:4f:96:c1:a0:d8:b5: 90:f4:69:a9:bc:8b:8d:a6:cc:d6:d6:28:c1:f3:f0: d7:be:5c:49:73:18:f2:fd:d5:70:77:01:b4:7a:3e: 07:9c:ef:87:6e:83:b6:6a:ab:29:90:27:37:1b:29: 4a:c2:7b:3e:e6:ee:6b:80:ed:fc:49:ca:cb:44:67: 9d:98:2d:d9:1a:04:36:f6:ef:5c:4b:fe:b3:65:8d: 0f:55:dc:cd:cc:51:46:11:d9:b7:ee:1f:67:91:d6: 8d:82:68:bf:50:9e:ee:86:67:57:ff:56:31:6f:f9: ce:b2:c6:a5:9a:e6:1b:f1:21:e4:dd:a0:2e:5e:02: 11:64:d4:9f:d3:1d:30:89:fd:3a:70:80:a8:b7:47: 07:9a:89:6e:78:11:d0:6d:41:e6:12:fc:f0:75:67: 69:55:dd:d1:a2:61:dd:d8:65:4f:de:01:7e:8a:7a: 7a:f6:1b:3a:fe:10:3d:6f:a6:e5:fb:2f:71:5e:12: a9:76:d9:8a:8f:d1:d1:65:85:6b:c9:0a:37:a4:66: ad:41:73:00:fd:48:0f:bb:41:08:59:94:5c:4c:18: c3:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:84:A4:CF:0F:53:2A:F6:8C:D6:92:3E:32:FB:F9:AE:8D:29:D2:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:cd:3f:57:78:ec:0b:e4:f2:78:43:ea:ae:db:19:b6:e5:c6: 8d:8e:27:0b:41:bb:e8:07:ce:e1:d8:4e:f8:d1:d8:39:d0:fb: f4:17:a2:79:c1:b5:a9:fe:b4:13:d3:ac:bf:81:f8:30:7a:75: 26:ec:d6:67:aa:9b:05:f0:7d:ba:23:a7:7f:76:6c:87:97:98: 38:ef:cb:99:02:0f:dd:66:29:42:47:e9:be:f5:5a:64:e1:64: 7b:a3:4e:5a:f2:74:67:e8:fe:4e:bc:e2:46:6e:98:c8:79:0a: c2:84:a5:c0:de:bd:3e:0d:4a:0d:0d:b7:ed:fd:08:5a:c2:1a: 68:7d:88:91:c3:9b:7f:8b:7a:88:26:43:6b:19:2d:f8:f4:27: a9:c7:a3:f2:d1:92:41:82:b5:42:ee:fb:6c:3f:dd:5e:8d:a7: 12:e2:60:9f:71:fd:f6:f9:9f:b2:f1:30:cc:38:35:37:5f:52: a9:59:ac:44:9a:a2:e4:b8:4c:aa:8f:e4:28:0b:88:6e:11:54: ed:c5:61:ce:ee:ce:49:cb:60:d1:93:18:64:21:9f:a2:49:06: 5d:17:f5:ea:c5:c9:00:f2:e1:58:4d:88:29:8b:9a:85:cb:c9: a5:7f:a7:9a:44:25:7b:cf:b9:3a:97:76:b1:8c:b0:40:87:88: 17:be:a3:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKCtRRgAwm7+fMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NzA1NWU1NDgtZDY4ZC00ODQ2LWI2MWEtODU5YWNkM2UxNWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo99+V82RVNaSSErjRjhVvGxXys42MbpEptKY 0VoH0DfBLh2Ci6dPlsGg2LWQ9GmpvIuNpszW1ijB8/DXvlxJcxjy/dVwdwG0ej4H nO+HboO2aqspkCc3GylKwns+5u5rgO38ScrLRGedmC3ZGgQ29u9cS/6zZY0PVdzN zFFGEdm37h9nkdaNgmi/UJ7uhmdX/1Yxb/nOssalmuYb8SHk3aAuXgIRZNSf0x0w if06cICot0cHmolueBHQbUHmEvzwdWdpVd3RomHd2GVP3gF+inp69hs6/hA9b6bl +y9xXhKpdtmKj9HRZYVryQo3pGatQXMA/UgPu0EIWZRcTBjD6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6EpM8PUyr2jNaSPjL7+a6NKdJ8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzQxNGUxNTMtNmE1MS0z NDJjLWEwYzEtNzg1ZjVkNTM4YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHnNP1d47Avk8nhD6q7bGbblxo2OJwtBu+gHzuHYTvjR2DnQ+/QXonnB tan+tBPTrL+B+DB6dSbs1meqmwXwfbojp392bIeXmDjvy5kCD91mKUJH6b71WmTh ZHujTlrydGfo/k684kZumMh5CsKEpcDevT4NSg0Nt+39CFrCGmh9iJHDm3+Leogm Q2sZLfj0J6nHo/LRkkGCtULu+2w/3V6NpxLiYJ9x/fb5n7LxMMw4NTdfUqlZrESa ouS4TKqP5CgLiG4RVO3FYc7uzknLYNGTGGQhn6JJBl0X9erFyQDy4VhNiCmLmoXL yaV/p5pEJXvPuTqXdrGMsECHiBe+owA= -----END CERTIFICATE-----Generated at Wed Nov 5 09:51:22 2025 by rpki-client