$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b7d6b188-e535-3b36-9a13-642445f0694e.roa File: b7d6b188-e535-3b36-9a13-642445f0694e.roa (raw, json) Hash identifier: kvSIiMi8aHjnkPpL7OMEAXi0YFwGg9AXJqd6xTw7NPc= Subject key identifier: A7:C6:AF:91:66:36:19:26:B0:1C:5F:8E:AB:56:0C:47:AD:9B:45:B7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A7780894FC775BAEEB6D49B40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b7d6b188-e535-3b36-9a13-642445f0694e.roa Signing time: Thu 10 Jul 2025 01:00:51 +0000 ROA not before: Thu 10 Jul 2025 01:00:51 +0000 ROA not after: Wed 08 Oct 2025 01:00:51 +0000 asID: 53813 IP address blocks: 136.226.242.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:77:80:89:4f:c7:75:ba:ee:b6:d4:9b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 10 01:00:51 2025 GMT Not After : Oct 8 01:00:51 2025 GMT Subject: CN=8a6c9b1e-8820-4740-8aa4-43b67c0317b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:c1:e4:bb:94:32:94:04:88:35:07:78:08: 15:f3:3c:e4:61:f2:de:a3:ac:4b:3c:b4:bc:4d:51: 21:1a:5e:47:59:1f:91:44:9d:3b:50:fe:f6:86:f1: 9e:53:5b:82:94:bb:84:da:3f:1d:c5:33:ca:96:a6: 7c:c2:45:36:29:c9:f5:aa:e7:5d:c5:04:5c:c6:c8: b3:c0:a8:93:c3:46:b8:e8:65:94:37:ac:c4:53:9b: b6:89:29:38:e8:98:fd:63:3b:1a:40:75:4d:53:3b: ea:d8:b9:68:a3:ee:e4:7e:80:5f:2d:7d:a5:28:97: 17:31:40:1a:63:92:ba:ac:39:fc:1e:81:5f:ef:62: a7:25:a4:9a:72:bb:ab:e2:8e:2f:68:cb:4d:b4:d7: 88:7c:d7:fa:51:15:39:13:ac:1c:f2:32:cc:af:54: d4:04:02:7c:16:67:84:ad:5b:ae:d5:21:7c:cc:4a: af:fb:9f:8a:fc:1e:5b:46:52:62:4d:fa:67:15:ad: d0:0c:58:81:c2:b9:25:60:8d:3d:71:6b:af:62:48: ca:a7:bf:ed:45:cf:3a:29:3a:79:f3:42:66:9d:e7: 63:e3:a2:ba:da:bf:37:bf:ba:6c:b6:18:2f:48:b1: 9a:99:a4:57:2b:b5:f3:f7:dd:b7:79:17:65:a3:37: 19:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:C6:AF:91:66:36:19:26:B0:1C:5F:8E:AB:56:0C:47:AD:9B:45:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b7d6b188-e535-3b36-9a13-642445f0694e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:c7:e1:1c:a1:dd:ac:c4:12:ee:c5:ad:88:7e:14:5e:73:23: 40:7e:f2:ac:a0:1e:91:ae:6f:35:9e:f7:1c:03:85:15:13:a8: aa:bf:69:92:b8:2f:10:ed:c1:13:da:5b:ac:9a:90:16:c3:41: 21:d6:c9:5a:b5:ea:5d:9e:f5:4b:60:05:4b:51:81:8c:63:7b: 7c:77:68:48:5d:ea:e9:41:87:72:a7:8f:eb:e3:6e:c8:21:99: a8:1b:94:ce:e7:e9:fc:54:93:84:05:a7:e8:c6:86:c5:a4:17: d7:ac:8e:a3:c5:22:39:b8:f1:7d:79:8d:11:f7:d9:e4:d4:89: 0e:4a:79:9e:d0:5e:33:47:43:c9:53:db:bc:d4:70:a4:c1:f7: e4:41:dc:3b:fa:ad:1d:e4:94:ae:6a:e5:fc:91:36:92:d6:6f: 28:65:5d:7c:94:72:ef:59:1c:1f:87:3b:79:01:9a:94:5d:76: 42:7f:b5:34:3e:e0:79:1e:94:6b:83:91:4a:0f:92:c6:19:9a: db:3a:d1:ce:d4:a9:8e:67:47:39:39:19:66:a5:13:a5:4c:63: 4f:e5:c9:46:21:c4:70:cc:59:d5:dd:f7:77:86:77:6c:e2:6a: 12:e7:1b:ed:2e:6b:61:97:c0:83:ac:1a:5c:8e:4c:1f:b7:49: b4:f2:2d:3a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIlPx3W67rbUm0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk OGE2YzliMWUtODgyMC00NzQwLThhYTQtNDNiNjdjMDMxN2IwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplLB5LuUMpQEiDUHeAgV8zzkYfLeo6xLPLS8 TVEhGl5HWR+RRJ07UP72hvGeU1uClLuE2j8dxTPKlqZ8wkU2Kcn1quddxQRcxsiz wKiTw0a46GWUN6zEU5u2iSk46Jj9YzsaQHVNUzvq2Lloo+7kfoBfLX2lKJcXMUAa Y5K6rDn8HoFf72KnJaSacrur4o4vaMtNtNeIfNf6URU5E6wc8jLMr1TUBAJ8FmeE rVuu1SF8zEqv+5+K/B5bRlJiTfpnFa3QDFiBwrklYI09cWuvYkjKp7/tRc86KTp5 80Jmnedj46K62r83v7psthgvSLGamaRXK7Xz9923eRdlozcZMwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKfGr5FmNhkmsBxfjqtWDEetm0W3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjdkNmIxODgtZTUzNS0z YjM2LTlhMTMtNjQyNDQ1ZjA2OTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzH4Ryh3azEEu7FrYh+FF5zI0B+8qygHpGubzWe9xwDhRUTqKq/aZK4 LxDtwRPaW6yakBbDQSHWyVq16l2e9UtgBUtRgYxje3x3aEhd6ulBh3Knj+vjbsgh magblM7n6fxUk4QFp+jGhsWkF9esjqPFIjm48X15jRH32eTUiQ5KeZ7QXjNHQ8lT 27zUcKTB9+RB3Dv6rR3klK5q5fyRNpLWbyhlXXyUcu9ZHB+HO3kBmpRddkJ/tTQ+ 4HkelGuDkUoPksYZmts60c7UqY5nRzk5GWalE6VMY0/lyUYhxHDMWdXd93eGd2zi ahLnG+0ua2GXwIOsGlyOTB+3SbTyLTo= -----END CERTIFICATE-----Generated at Mon Jul 21 02:05:30 2025 by rpki-client