$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa File: 3c900b67-1d99-32dc-857b-856cecf8fac7.roa (raw, json) Hash identifier: 0tQmvjUmwduZwrZhzkUVJYeZYjUDqtlxM4Y46ITdclw= Subject key identifier: BE:3C:88:2A:B4:AD:50:1F:69:9D:DA:37:1F:84:FC:94:C4:AC:14:7D Certificate issuer: /CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Certificate serial: 010D0C9F4328584B2CF6E30B9A12A1446FA31A80 Authority key identifier: E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa Signing time: Sat 13 Sep 2025 01:00:33 +0000 ROA not before: Sat 13 Sep 2025 01:00:33 +0000 ROA not after: Fri 12 Dec 2025 02:00:33 +0000 asID: 10103 IP address blocks: 216.40.68.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2c:f6:e3:0b:9a:12:a1:44:6f:a3:1a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=36cdb697-d20d-47e7-9f9e-c4174dbc0bf2 Validity Not Before: Sep 13 01:00:33 2025 GMT Not After : Dec 12 02:00:33 2025 GMT Subject: CN=9fa8ebec-9784-4d6c-a2b9-cecf4fe81bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:b4:20:4d:17:fb:f1:63:4b:09:25:47:9f:d2: c5:04:ce:e3:fa:71:02:6f:1e:37:8b:98:b8:e3:91: a7:30:dc:3d:45:d2:55:e3:24:49:38:90:90:ed:1c: 0c:4c:2a:19:a2:07:2c:ae:4a:99:d5:ac:25:4f:36: ec:a7:f9:9a:d1:68:92:29:a4:1b:a1:6c:37:92:3b: df:b1:3c:89:35:9b:ad:3d:83:66:aa:ad:7b:a0:ed: 3d:8f:f6:ba:4a:59:0a:c1:7c:71:4e:d1:c0:66:dc: 64:d0:8c:b9:d6:de:e1:f1:49:33:27:1b:9a:fa:c1: 16:f6:fe:c3:df:82:a6:69:58:ad:15:fb:fa:60:fe: b1:2b:a2:10:db:7f:e3:df:4d:29:35:7e:bd:4f:40: 3f:11:d8:f7:86:40:7e:58:ac:5c:68:93:d6:f6:5c: 04:db:3c:7a:c8:d6:d5:40:a0:f8:9e:61:6e:e6:0e: e9:fc:30:26:41:92:d3:e8:94:4a:4e:b8:54:cb:10: a4:f2:1b:8c:f7:c3:5e:0f:6f:16:84:2e:69:5a:d6: a7:7c:84:71:57:06:0e:0d:3d:1e:59:5b:a3:45:b7: 9a:99:10:6f:08:c8:ec:bf:d0:f9:e8:0c:89:ca:5e: 38:f8:dc:b1:81:52:17:8a:e9:d9:d9:bb:8c:c0:87: d6:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:3C:88:2A:B4:AD:50:1F:69:9D:DA:37:1F:84:FC:94:C4:AC:14:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/3c900b67-1d99-32dc-857b-856cecf8fac7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.crl X509v3 Authority Key Identifier: keyid:E0:E9:57:15:8F:45:93:B6:EF:D9:C4:AD:3E:77:EA:A6:1F:EC:EA:35 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/36cdb697-d20d-47e7-9f9e-c4174dbc0bf2.cer sbgp-ipAddrBlock: critical IPv4: 216.40.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 17:8a:e3:d5:5f:64:b0:9a:ae:2f:22:a9:18:c3:99:36:42:a1: e9:f6:38:13:47:96:3f:7e:7b:a4:d8:3e:72:36:5e:7a:4e:9a: f7:97:86:00:cd:80:1b:2b:12:81:8a:79:c7:3b:65:22:99:41: be:a5:b2:d9:01:08:9d:ec:ae:40:4f:ec:1f:fd:65:9e:7e:ac: 12:3d:91:0f:6a:38:eb:16:41:57:85:a0:f8:35:74:20:da:d8: cf:5b:c6:49:24:0c:aa:ab:67:00:7a:78:2e:43:5e:0b:38:31: 3f:b1:a7:1d:c8:72:ed:5f:83:cb:a3:82:df:08:a4:4e:0a:ab: 4b:78:d5:5e:8b:c2:81:85:ca:f8:31:da:37:16:eb:3d:14:ee: 9e:0f:bc:d0:e3:a1:95:05:fd:27:52:20:56:6e:97:d8:f0:76: 15:81:e4:7f:78:38:19:a6:ce:fa:9a:57:dc:0d:09:fb:3e:f5: f2:67:2b:cf:27:37:bb:d8:21:d3:be:47:81:4a:f0:bc:7a:ee: 19:40:25:13:3b:99:02:0e:34:34:74:27:60:61:da:b2:91:40: 23:80:7c:40:a9:b6:20:ac:28:d3:33:56:60:0c:eb:04:81:e9: 50:55:f1:70:5d:91:87:6b:b5:c7:c7:75:bb:05:c6:53:cd:f0: 15:4d:54:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEss9uMLmhKhRG+jGoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMzZjZGI2OTctZDIwZC00N2U3LTlmOWUtYzQxNzRkYmMw YmYyMB4XDTI1MDkxMzAxMDAzM1oXDTI1MTIxMjAyMDAzM1owLzEtMCsGA1UEAxMk OWZhOGViZWMtOTc4NC00ZDZjLWEyYjktY2VjZjRmZTgxYmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk7QgTRf78WNLCSVHn9LFBM7j+nECbx43i5i4 45GnMNw9RdJV4yRJOJCQ7RwMTCoZogcsrkqZ1awlTzbsp/ma0WiSKaQboWw3kjvf sTyJNZutPYNmqq17oO09j/a6SlkKwXxxTtHAZtxk0Iy51t7h8UkzJxua+sEW9v7D 34KmaVitFfv6YP6xK6IQ23/j300pNX69T0A/Edj3hkB+WKxcaJPW9lwE2zx6yNbV QKD4nmFu5g7p/DAmQZLT6JRKTrhUyxCk8huM98NeD28WhC5pWtanfIRxVwYODT0e WVujRbeamRBvCMjsv9D56AyJyl44+NyxgVIXiunZ2buMwIfW5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL48iCq0rVAfaZ3aNx+E/JTErBR9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8zNmNk YjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3NGRiYzBiZjIvM2M5MDBiNjctMWQ5OS0z MmRjLTg1N2ItODU2Y2VjZjhmYWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMzZjZGI2OTctZDIwZC00N2U3LTlm OWUtYzQxNzRkYmMwYmYyLzM2Y2RiNjk3LWQyMGQtNDdlNy05ZjllLWM0MTc0ZGJj MGJmMi5jcmwwHwYDVR0jBBgwFoAU4OlXFY9Fk7bv2cStPnfqph/s6jUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8zNmNkYjY5Ny1kMjBkLTQ3ZTctOWY5ZS1jNDE3 NGRiYzBiZjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ChEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABeK49VfZLCari8iqRjDmTZCoen2OBNHlj9+e6TYPnI2XnpOmveXhgDN gBsrEoGKecc7ZSKZQb6lstkBCJ3srkBP7B/9ZZ5+rBI9kQ9qOOsWQVeFoPg1dCDa 2M9bxkkkDKqrZwB6eC5DXgs4MT+xpx3Icu1fg8ujgt8IpE4Kq0t41V6LwoGFyvgx 2jcW6z0U7p4PvNDjoZUF/SdSIFZul9jwdhWB5H94OBmmzvqaV9wNCfs+9fJnK88n N7vYIdO+R4FK8Lx67hlAJRM7mQIONDR0J2Bh2rKRQCOAfECptiCsKNMzVmAM6wSB 6VBV8XBdkYdrtcfHdbsFxlPN8BVNVEQ= -----END CERTIFICATE-----Generated at Mon Oct 20 07:51:03 2025 by rpki-client