$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/74f08932-f441-3fc5-a8b3-be4a4c6e9090.roa File: 74f08932-f441-3fc5-a8b3-be4a4c6e9090.roa (raw, json) Hash identifier: xWTeewGxKwD17QXFwFm0mZyBMzNgK8Tmrc4IkIcx+mw= Subject key identifier: 2D:5A:65:0D:2E:D7:5F:BE:D7:67:37:E2:79:BE:AB:C7:C8:BF:FC:DA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C662145266F48E7CDBB00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/74f08932-f441-3fc5-a8b3-be4a4c6e9090.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.34.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:66:21:45:26:6f:48:e7:cd:bb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=da89c1b9-5f31-40ec-bd50-069701c47cc9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:44:8f:d7:65:3a:b0:20:ed:3a:bc:35:0d:6b: d1:13:59:c9:2b:5c:06:fe:c3:a8:55:e2:21:33:f9: 28:49:41:91:2e:fa:9b:63:91:35:c7:94:90:08:b4: 5f:30:99:3a:20:93:23:b6:06:27:ec:57:a5:7b:95: 67:9b:ab:43:24:2e:d2:04:95:31:7b:ee:8a:47:69: d0:93:84:f3:09:79:99:4a:89:5e:70:ac:35:54:da: 0a:41:0c:9c:1b:91:88:ae:1c:c4:17:79:db:82:97: d0:67:b9:d8:72:00:f1:d8:ae:83:cc:71:32:20:7c: 7e:d5:e3:4b:c8:21:e6:22:3c:e2:ba:17:b8:67:4d: 40:7c:39:ca:cc:ce:95:40:ef:ae:a8:4b:2f:47:71: 69:a3:7a:23:c4:9c:f6:a3:dd:ad:ea:8c:ef:b5:27: 5a:02:0f:60:80:54:bb:0e:65:b1:9f:94:df:52:fe: d6:c9:40:48:c5:a3:0c:82:66:ab:56:af:6e:e9:8d: 6a:df:79:91:4b:2b:f0:47:f1:ae:70:81:2a:a3:fd: 2e:e9:fa:53:63:0f:8f:92:16:28:dd:b8:fa:75:f9: d5:16:c8:40:69:99:13:5f:bf:a5:d5:94:80:4c:04: e0:40:90:d9:74:27:d1:1b:f1:53:b1:ca:1a:8d:92: 8c:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:5A:65:0D:2E:D7:5F:BE:D7:67:37:E2:79:BE:AB:C7:C8:BF:FC:DA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/74f08932-f441-3fc5-a8b3-be4a4c6e9090.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:18:d8:bf:63:7b:3d:85:b1:f4:0c:83:4f:54:9f:71:8b:e4: e3:9b:e8:4d:b8:3e:2a:1d:14:f2:2e:d2:0b:c7:e1:41:e2:7b: bf:a2:cb:21:8d:18:67:e8:90:5e:51:bd:be:61:7c:60:f1:b8: 6e:66:6d:f9:d8:79:04:37:97:3e:10:6b:c2:e0:91:01:2c:39: 88:bf:76:96:55:1d:ad:9b:e2:50:4d:1d:6d:47:9a:0f:df:14: ee:46:60:0e:64:89:c5:1e:a4:b0:a5:28:08:da:a9:3b:a4:a1: cd:73:ab:ee:ff:5a:f0:7a:48:b0:e4:39:1f:43:8e:52:ee:19: 3c:45:4f:ac:a6:f7:44:5b:93:a5:f4:df:0e:ca:29:84:f5:12: 30:56:69:26:69:d4:21:16:14:23:26:be:6e:31:88:e1:fc:ef: 2a:31:c4:6d:e3:54:47:50:44:22:78:b5:c6:50:f3:a9:3e:2c: b6:14:6a:99:52:c0:05:26:7c:cf:cc:bd:93:9d:3a:85:66:41: c4:4b:8e:ee:58:7b:17:24:69:13:b9:fa:cd:56:24:06:4c:42: 0b:81:d5:57:a5:6f:cd:8b:0d:8e:00:f9:6f:36:84:5f:5f:69: 74:ce:62:70:97:78:2f:af:bb:df:39:47:6e:8a:eb:fb:93:6c: 46:7b:b1:10 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGYhRSZvSOfNuwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk ZGE4OWMxYjktNWYzMS00MGVjLWJkNTAtMDY5NzAxYzQ3Y2M5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkSP12U6sCDtOrw1DWvRE1nJK1wG/sOoVeIh M/koSUGRLvqbY5E1x5SQCLRfMJk6IJMjtgYn7Fele5Vnm6tDJC7SBJUxe+6KR2nQ k4TzCXmZSolecKw1VNoKQQycG5GIrhzEF3nbgpfQZ7nYcgDx2K6DzHEyIHx+1eNL yCHmIjziuhe4Z01AfDnKzM6VQO+uqEsvR3Fpo3ojxJz2o92t6ozvtSdaAg9ggFS7 DmWxn5TfUv7WyUBIxaMMgmarVq9u6Y1q33mRSyvwR/GucIEqo/0u6fpTYw+PkhYo 3bj6dfnVFshAaZkTX7+l1ZSATATgQJDZdCfRG/FTscoajZKMVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC1aZQ0u11++12c34nm+q8fIv/zaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzRmMDg5MzItZjQ0MS0z ZmM1LWE4YjMtYmU0YTRjNmU5MDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsY2L9jez2FsfQMg09Un3GL5OOb6E24PiodFPIu0gvH4UHie7+iyyGN GGfokF5Rvb5hfGDxuG5mbfnYeQQ3lz4Qa8LgkQEsOYi/dpZVHa2b4lBNHW1Hmg/f FO5GYA5kicUepLClKAjaqTukoc1zq+7/WvB6SLDkOR9DjlLuGTxFT6ym90Rbk6X0 3w7KKYT1EjBWaSZp1CEWFCMmvm4xiOH87yoxxG3jVEdQRCJ4tcZQ86k+LLYUaplS wAUmfM/MvZOdOoVmQcRLju5YexckaRO5+s1WJAZMQguB1Velb82LDY4A+W82hF9f aXTOYnCXeC+vu985R26K6/uTbEZ7sRA= -----END CERTIFICATE-----Generated at Wed Nov 5 12:11:15 2025 by rpki-client