$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa File: 536bdaa0-0f1a-3e47-9251-28af7a104243.roa (raw, json) Hash identifier: FTvhkgWlLvH9xUl9J6R4FULwT6VaOTj4dGbJHr5ZWLg= Subject key identifier: C1:F6:91:BE:21:A7:A9:E3:06:26:39:0D:51:5C:6F:2E:FD:F4:1A:47 Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d Certificate serial: 010D0C9F4328584AAC8B820B8F99904ED1200BE8 Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa Signing time: Tue 29 Jul 2025 01:00:48 +0000 ROA not before: Tue 29 Jul 2025 01:00:48 +0000 ROA not after: Mon 27 Oct 2025 01:00:48 +0000 asID: 20365 IP address blocks: 199.7.156.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 03 Aug 2025 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:8b:82:0b:8f:99:90:4e:d1:20:0b:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d Validity Not Before: Jul 29 01:00:48 2025 GMT Not After : Oct 27 01:00:48 2025 GMT Subject: CN=c5a754dd-4ec1-487d-b0bf-765c5297c9c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:2a:f9:50:48:86:f7:cb:a0:95:1c:fb:fa:ce: 81:d1:db:90:78:93:ac:66:8d:1b:29:f1:36:2f:04: 2c:19:4b:10:81:db:76:5e:8e:8f:12:28:b7:c1:42: 73:57:7a:c2:d3:58:88:da:ed:98:83:a6:0f:52:b2: 7b:6f:25:c1:28:9e:f4:28:40:e2:d0:b3:99:37:c2: e8:c1:52:a8:8d:d4:48:0c:ec:90:1f:9e:03:94:ae: 78:b6:75:c8:9f:5a:2c:a5:dd:a3:43:0b:bb:7e:4c: 9f:ce:46:04:99:0e:67:5d:4e:8f:0d:05:91:57:9e: 5d:75:bf:ef:95:99:19:3e:5d:ca:af:29:63:6c:24: a0:63:4e:06:8d:0e:43:fa:cd:4c:ed:8c:23:92:24: a5:fc:95:f2:be:92:8e:01:0b:f6:be:f7:18:5c:2a: 45:c1:0e:83:3f:1e:20:1b:60:cf:21:c4:f4:24:39: 27:0d:42:10:14:47:f8:35:18:e1:e2:68:74:88:09: 57:7b:13:dd:b2:88:50:b9:68:65:0b:b5:b4:7b:c8: 21:c0:eb:47:bf:78:d7:b2:a1:b2:4e:5b:58:f2:db: 24:19:fe:ed:1e:62:ad:e5:f0:06:85:04:51:64:a1: cb:aa:06:6c:48:b9:eb:20:fb:e1:2f:7c:69:21:22: 3e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:F6:91:BE:21:A7:A9:E3:06:26:39:0D:51:5C:6F:2E:FD:F4:1A:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/536bdaa0-0f1a-3e47-9251-28af7a104243.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl X509v3 Authority Key Identifier: keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer sbgp-ipAddrBlock: critical IPv4: 199.7.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:5c:49:d7:c7:53:18:60:0d:c1:b2:9e:d3:ee:1c:3a:11:c2: b0:4f:2f:d8:c5:f3:61:05:af:48:b8:87:0f:fa:2f:34:db:ef: 40:5a:4d:ee:6e:9e:3e:cf:23:8a:35:2f:d2:ee:f2:cb:02:63: 48:21:b9:cf:7e:d1:21:23:b8:68:f8:ad:b0:2d:2b:fc:2b:ca: 54:ab:84:bc:f2:ca:2d:9c:c2:a6:a7:d7:c2:6c:70:c4:9d:39: 3b:9d:b8:55:cb:d4:27:81:c7:c3:2f:8a:9b:65:b4:23:42:6f: f9:05:46:57:2f:8f:01:4f:56:9a:4e:23:40:66:3a:d9:41:9f: 97:84:d9:e2:7e:61:f7:54:a3:ae:23:4c:1d:56:3c:87:0d:85: b0:17:5a:cb:08:30:f4:bb:fd:89:84:2d:53:96:bb:88:5e:b0: 4e:e9:2e:97:18:34:67:78:07:82:6e:de:79:5c:a4:e0:4b:90: 23:2f:a0:91:96:aa:63:0b:e0:af:3c:e9:21:d3:d7:17:d2:cd: 28:b3:70:4c:c4:64:77:68:6e:55:fb:7d:d5:bd:fa:6c:08:68: 8a:6e:5d:89:d6:20:b5:fb:3a:f7:43:d3:09:d0:98:d1:db:f9: ad:05:cb:28:0c:e7:53:5b:c1:b9:6a:63:bb:b4:10:ad:bc:3b: 17:2d:82:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsi4ILj5mQTtEgC+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl ZTdkMB4XDTI1MDcyOTAxMDA0OFoXDTI1MTAyNzAxMDA0OFowLzEtMCsGA1UEAxMk YzVhNzU0ZGQtNGVjMS00ODdkLWIwYmYtNzY1YzUyOTdjOWMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgyr5UEiG98uglRz7+s6B0duQeJOsZo0bKfE2 LwQsGUsQgdt2Xo6PEii3wUJzV3rC01iI2u2Yg6YPUrJ7byXBKJ70KEDi0LOZN8Lo wVKojdRIDOyQH54DlK54tnXIn1ospd2jQwu7fkyfzkYEmQ5nXU6PDQWRV55ddb/v lZkZPl3KryljbCSgY04GjQ5D+s1M7YwjkiSl/JXyvpKOAQv2vvcYXCpFwQ6DPx4g G2DPIcT0JDknDUIQFEf4NRjh4mh0iAlXexPdsohQuWhlC7W0e8ghwOtHv3jXsqGy TltY8tskGf7tHmKt5fAGhQRRZKHLqgZsSLnrIPvhL3xpISI+YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMH2kb4hp6njBiY5DVFcby799BpHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvNTM2YmRhYTAtMGYxYS0z ZTQ3LTkyNTEtMjhhZjdhMTA0MjQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4 ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh MzlmOGVlN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxwecMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdcSdfHUxhgDcGyntPuHDoRwrBPL9jF82EFr0i4hw/6LzTb70BaTe5u nj7PI4o1L9Lu8ssCY0ghuc9+0SEjuGj4rbAtK/wrylSrhLzyyi2cwqan18JscMSd OTuduFXL1CeBx8MviptltCNCb/kFRlcvjwFPVppOI0BmOtlBn5eE2eJ+YfdUo64j TB1WPIcNhbAXWssIMPS7/YmELVOWu4hesE7pLpcYNGd4B4Ju3nlcpOBLkCMvoJGW qmML4K886SHT1xfSzSizcEzEZHdoblX7fdW9+mwIaIpuXYnWILX7OvdD0wnQmNHb +a0FyygM51NbwblqY7u0EK28OxctgtA= -----END CERTIFICATE-----Generated at Fri Aug 1 18:25:55 2025 by rpki-client