$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa File: d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json) Hash identifier: zaGORJHy4U9Q4zEcUONcBc+md4VolLHYfgZ4iLe1bOU= Subject key identifier: C2:DE:4F:CA:16:C1:87:01:C6:01:40:64:7D:80:11:BB:E4:8C:71:B0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584B434C63E0FF92C16E5D4F7B00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa Signing time: Sun 21 Sep 2025 01:00:32 +0000 ROA not before: Sun 21 Sep 2025 01:00:32 +0000 ROA not after: Sat 20 Dec 2025 02:00:32 +0000 asID: 16591 IP address blocks: 136.35.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:43:4c:63:e0:ff:92:c1:6e:5d:4f:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Sep 21 01:00:32 2025 GMT Not After : Dec 20 02:00:32 2025 GMT Subject: CN=51467dbc-d81b-414f-b1ef-cd6c08ebe80a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:83:ef:ce:ba:97:6b:5c:29:e2:42:5f:6e:7d: 2f:88:2d:b1:ba:5e:c8:a0:e2:29:16:b6:1b:51:fe: 5f:5a:a3:01:b7:17:7c:44:ad:ed:b3:12:c3:6c:2c: f6:df:75:b0:9f:60:81:fd:f2:d3:ff:c4:66:2d:27: cb:78:47:a2:7a:c4:82:bb:0a:3b:a4:58:28:d2:09: 64:74:c1:9c:51:6e:a8:b6:bc:c1:9d:9e:84:fb:28: 0a:f2:a3:89:be:ee:05:03:12:ab:2a:cc:ec:d1:64: 65:6d:35:68:54:4a:f9:c6:6d:dd:60:47:46:00:2d: d7:7e:d0:00:6c:66:a7:92:52:f0:47:66:ca:86:60: 20:b8:3b:33:91:a5:25:1b:f5:81:72:e9:04:3c:91: c1:34:1e:5e:a1:68:8d:18:17:ac:57:bf:a3:23:2a: 30:ea:ae:d1:31:df:5e:91:bb:47:a3:ca:71:8e:2e: cc:db:ea:5d:76:1e:94:a9:ac:a3:1d:6c:36:06:fd: f0:c2:77:e5:f7:af:2e:4f:c2:90:e7:76:fe:ca:86: 63:a3:44:83:82:84:4b:7a:23:ad:a3:46:6e:79:60: 74:eb:29:58:1f:55:34:87:f5:8b:30:da:a1:0e:aa: 6f:fe:3d:7c:64:15:52:e2:e9:a0:fe:d3:d0:00:b6: 08:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:DE:4F:CA:16:C1:87:01:C6:01:40:64:7D:80:11:BB:E4:8C:71:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:72:a4:87:9a:33:8b:b6:c0:5f:51:18:b9:24:5a:77:e8:e3: 72:44:5a:13:7f:e9:ec:e0:34:66:66:b3:73:bb:3c:65:dc:a6: ea:a3:2d:ec:15:a4:78:9e:a0:32:0a:52:35:cb:95:d1:60:8c: d1:fb:6b:9d:fb:56:7c:46:bf:74:63:24:c9:f0:ba:52:8d:e1: 72:d8:9e:93:3e:53:dc:7b:fa:55:ef:3b:1f:b4:99:31:62:8d: fd:9e:82:11:b1:7e:5b:cc:e7:87:f9:cc:0a:00:95:c2:6c:fd: 53:0b:87:c1:c6:61:f2:09:04:e4:25:c1:b4:8d:f4:fa:da:7f: 51:cd:ce:6b:c8:ad:55:13:e8:dd:2e:82:4e:7d:4a:a8:1d:d5: 5a:89:3e:8f:68:56:b8:07:28:d9:07:a8:26:b3:87:d3:46:f8: 20:c6:6f:f3:fa:c3:f4:52:c4:aa:51:d5:92:cf:ba:4e:47:c6: e1:8f:0a:f4:eb:9f:a1:85:c2:1d:8e:e0:60:15:f8:9a:90:af: f0:a9:7a:59:86:c7:f0:c0:90:59:95:d7:87:04:d3:b8:c3:c9: 0e:fa:d3:4b:fd:ef:4d:04:fb:1f:40:d9:be:85:34:b9:31:00: f5:3f:35:0f:7a:5b:ac:f0:b0:38:d8:02:7e:2d:6e:3d:ef:53: 1b:d2:5c:b0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtDTGPg/5LBbl1PewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDkyMTAxMDAzMloXDTI1MTIyMDAyMDAzMlowLzEtMCsGA1UEAxMk NTE0NjdkYmMtZDgxYi00MTRmLWIxZWYtY2Q2YzA4ZWJlODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIPvzrqXa1wp4kJfbn0viC2xul7IoOIpFrYb Uf5fWqMBtxd8RK3tsxLDbCz233Wwn2CB/fLT/8RmLSfLeEeiesSCuwo7pFgo0glk dMGcUW6otrzBnZ6E+ygK8qOJvu4FAxKrKszs0WRlbTVoVEr5xm3dYEdGAC3XftAA bGanklLwR2bKhmAguDszkaUlG/WBcukEPJHBNB5eoWiNGBesV7+jIyow6q7RMd9e kbtHo8pxji7M2+pddh6UqayjHWw2Bv3wwnfl968uT8KQ53b+yoZjo0SDgoRLeiOt o0ZueWB06ylYH1U0h/WLMNqhDqpv/j18ZBVS4umg/tPQALYIJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMLeT8oWwYcBxgFAZH2AEbvkjHGwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDVhZjI2MjktNjE0Mi0z NDhkLWExZTItNzc4NzMzNmM4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFlypIeaM4u2wF9RGLkkWnfo43JEWhN/6ezgNGZms3O7PGXcpuqjLewV pHieoDIKUjXLldFgjNH7a537VnxGv3RjJMnwulKN4XLYnpM+U9x7+lXvOx+0mTFi jf2eghGxflvM54f5zAoAlcJs/VMLh8HGYfIJBOQlwbSN9Praf1HNzmvIrVUT6N0u gk59Sqgd1VqJPo9oVrgHKNkHqCazh9NG+CDGb/P6w/RSxKpR1ZLPuk5HxuGPCvTr n6GFwh2O4GAV+JqQr/CpelmGx/DAkFmV14cE07jDyQ7600v9700E+x9A2b6FNLkx APU/NQ96W6zwsDjYAn4tbj3vUxvSXLA= -----END CERTIFICATE-----Generated at Wed Nov 5 06:10:58 2025 by rpki-client