$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa File: c1226114-ac52-3467-82e8-02f6e8f05664.roa (raw, json) Hash identifier: xZ2+PbXXeWY4tvVe01HYmxlhTJkUp4AAeyh4wQh904Q= Subject key identifier: BD:4F:E0:22:74:31:14:1F:BC:52:2C:76:16:C3:ED:CF:11:3E:FD:6D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434CA06DDF73A36233E10200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.37.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:a0:6d:df:73:a3:62:33:e1:02:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=cede803e-0784-4f5f-811a-51f88c408a93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:95:e6:11:9b:b6:87:9e:62:29:45:f4:88:fd: f0:df:0a:d8:cf:7c:eb:19:39:ca:ab:f5:04:6f:b7: d8:4d:9d:fa:45:e1:3e:bd:10:ea:99:07:42:3b:12: 70:53:1c:c6:be:e8:45:39:0a:27:f7:c9:0f:d6:f3: 38:17:8a:b9:4e:fe:15:68:79:60:cb:f2:b6:a2:80: d2:b8:97:17:6c:ef:f9:56:5b:ee:f1:65:9e:79:b2: 4f:85:88:86:19:de:9c:af:b2:d5:5f:2c:a5:1f:a0: e2:30:19:fe:54:f3:a2:bf:b5:c6:7a:a3:cd:d8:91: 86:52:4b:d5:1b:fc:60:19:9b:90:8d:a9:ba:97:ad: 19:f1:39:b3:f8:a7:a3:e4:fa:61:77:ee:0f:97:8d: 04:5d:76:8d:a2:a6:30:84:44:19:6d:2d:0b:f2:0c: 92:0f:75:69:79:f4:a8:a9:e5:9b:08:3a:3e:c1:8c: 65:ce:f1:94:2b:48:e5:50:6d:b8:88:bc:a2:80:20: 94:ce:a8:fa:73:fb:df:0c:0d:0a:25:59:6c:19:b1: 32:ff:c0:fd:79:79:b2:99:11:0d:5f:01:5f:6f:b9: d3:cf:ae:43:c0:0a:a9:30:78:80:33:6e:26:45:93: 53:ba:38:a3:b2:66:a1:7e:82:82:50:ce:31:67:4a: c7:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:4F:E0:22:74:31:14:1F:BC:52:2C:76:16:C3:ED:CF:11:3E:FD:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c1226114-ac52-3467-82e8-02f6e8f05664.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:25:e9:c5:6f:37:d8:14:d7:d4:4d:18:71:fd:54:ca:33:4a: 36:f5:b7:5f:3d:de:28:72:d3:b8:76:f3:cc:f5:a0:8b:7a:ce: 54:ee:16:b5:20:92:b4:7b:6f:fd:c3:bd:3c:d8:e6:af:12:ce: ce:c2:bc:dd:e2:99:df:84:3f:93:ab:61:1a:83:a5:7c:14:68: e2:76:2a:b9:e4:2f:2b:fe:0f:17:b4:2b:fd:20:df:ea:c8:bc: e7:0e:d6:c7:62:73:38:6a:a3:ca:bc:5f:e1:3c:d4:a3:a5:c6: 7e:22:12:9e:b1:56:44:17:2b:a1:79:89:f9:f9:cd:97:fd:eb: 91:4f:57:b5:58:37:20:b5:b0:f3:d0:c7:e2:61:b0:f7:7e:93: 20:aa:ea:19:01:f6:76:bc:66:68:83:2f:9c:ee:b3:25:82:5f: f4:85:7f:34:66:b1:01:d2:36:12:ff:8a:8f:5f:e1:9e:74:91: bb:f8:68:d9:9f:45:38:1f:45:35:f9:16:99:da:93:e8:48:ff: d0:b4:cc:d3:97:05:7d:8f:90:24:ed:b2:66:21:31:09:40:49: 1f:3f:e6:d6:8a:4a:c4:66:d6:44:f1:e9:81:9b:45:13:3f:19: 3c:a5:86:1c:1d:15:c2:09:63:ef:dd:49:c4:43:dc:53:df:18: a3:f0:5c:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTKBt33OjYjPhAgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk Y2VkZTgwM2UtMDc4NC00ZjVmLTgxMWEtNTFmODhjNDA4YTkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArZXmEZu2h55iKUX0iP3w3wrYz3zrGTnKq/UE b7fYTZ36ReE+vRDqmQdCOxJwUxzGvuhFOQon98kP1vM4F4q5Tv4VaHlgy/K2ooDS uJcXbO/5Vlvu8WWeebJPhYiGGd6cr7LVXyylH6DiMBn+VPOiv7XGeqPN2JGGUkvV G/xgGZuQjam6l60Z8Tmz+Kej5Pphd+4Pl40EXXaNoqYwhEQZbS0L8gySD3VpefSo qeWbCDo+wYxlzvGUK0jlUG24iLyigCCUzqj6c/vfDA0KJVlsGbEy/8D9eXmymREN XwFfb7nTz65DwAqpMHiAM24mRZNTujijsmahfoKCUM4xZ0rHYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL1P4CJ0MRQfvFIsdhbD7c8RPv1tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzEyMjYxMTQtYWM1Mi0z NDY3LTgyZTgtMDJmNmU4ZjA1NjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACwl6cVvN9gU19RNGHH9VMozSjb1t1893ihy07h288z1oIt6zlTuFrUg krR7b/3DvTzY5q8Szs7CvN3imd+EP5OrYRqDpXwUaOJ2KrnkLyv+Dxe0K/0g3+rI vOcO1sdiczhqo8q8X+E81KOlxn4iEp6xVkQXK6F5ifn5zZf965FPV7VYNyC1sPPQ x+JhsPd+kyCq6hkB9na8ZmiDL5zusyWCX/SFfzRmsQHSNhL/io9f4Z50kbv4aNmf RTgfRTX5Fpnak+hI/9C0zNOXBX2PkCTtsmYhMQlASR8/5taKSsRm1kTx6YGbRRM/ GTylhhwdFcIJY+/dScRD3FPfGKPwXNA= -----END CERTIFICATE-----Generated at Wed Nov 5 15:20:24 2025 by rpki-client