$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa File: c85f8a2a-7356-393c-8636-675c190b1567.roa (raw, json) Hash identifier: eTXLxnQf5ETjrVH7AlKM3uu7bo8THHhEngr+JKFQPnU= Subject key identifier: 9F:02:21:93:F4:0B:44:4B:A4:D7:5D:C3:1A:5F:EC:B5:3E:A7:A0:AB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A5FC5DF10E84A27A01C0D1190 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 14618 IP address blocks: 136.226.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:df:10:e8:4a:27:a0:1c:0d:11:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=6f84b5b7-146b-45b4-a906-c6d2ef64ab8d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:5a:eb:af:35:34:ab:1a:dd:32:59:ff:67:01: bc:50:be:2b:3f:29:05:4e:cc:7e:24:b8:a0:68:67: 44:b0:6b:12:70:9d:00:65:1d:4f:96:86:24:42:62: 25:a0:58:6b:37:ba:78:89:5e:84:8b:1c:5d:27:73: b0:df:5c:14:52:ad:e6:18:cf:ec:98:33:50:49:4a: 48:5f:c2:62:e9:cb:9a:d5:62:62:6f:41:e3:d4:3d: 2b:2b:e3:52:3e:8a:a5:fb:e0:4f:d2:6e:e8:87:d6: 87:49:46:f5:12:17:02:6b:24:f6:3d:14:9f:4d:c9: fb:d6:eb:6f:e0:7f:8c:1b:b9:47:46:e3:0b:cf:35: 6e:26:f1:3f:df:49:d1:f9:18:dc:52:30:27:b2:ae: b2:50:c8:fc:3b:fe:11:d5:55:21:41:a4:99:9a:3c: 93:2e:ea:7d:7f:42:76:b4:18:b4:b3:02:a5:e4:64: 03:5f:36:66:a6:c0:41:55:77:ba:9b:0e:1d:bb:64: 8f:f3:46:9d:24:25:bf:a8:2a:89:51:09:3a:e4:71: 81:ae:3f:73:7d:9b:a6:07:5c:ab:5c:6d:4b:e0:04: 92:4a:0a:b1:d9:c4:54:77:df:dc:53:3b:d4:5d:18: 71:c9:c6:08:ff:2c:e2:1c:d0:12:97:26:7c:13:ee: 47:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:02:21:93:F4:0B:44:4B:A4:D7:5D:C3:1A:5F:EC:B5:3E:A7:A0:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/c85f8a2a-7356-393c-8636-675c190b1567.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:73:cd:f2:59:8d:46:39:52:31:64:79:2e:c0:10:60:a0:a0: 2e:11:8b:41:22:95:ad:86:11:a1:df:f0:c7:d3:df:75:9e:00: 9b:ab:00:0c:66:6c:30:5f:db:49:09:cc:81:7b:3d:64:54:3a: f7:0b:86:45:83:fd:03:3b:fe:b3:5a:53:a2:8c:4f:e9:2a:50: 45:d1:14:15:89:e1:b5:db:dc:18:42:bc:d0:16:a2:10:0f:23: 70:15:10:7a:77:98:b4:a0:50:c2:41:2f:74:f7:93:52:fb:94: 2b:f0:22:3f:d5:d1:b0:a4:8c:1d:b1:99:d0:05:8d:66:da:5b: 93:da:b2:11:c0:87:a2:f5:bb:5f:28:89:30:55:71:77:ba:87: 58:78:72:d9:be:ba:5a:38:8d:db:31:44:8e:7c:ca:4a:14:c8: 5f:98:1a:22:8b:fd:57:24:93:18:8b:1f:9b:65:7b:ad:42:4e: ea:75:29:4b:79:85:d6:6b:dc:96:0d:29:f3:94:74:85:19:2e: 04:4f:5d:0b:77:86:63:82:4b:cf:c1:2b:8f:3d:8c:be:60:66: 76:81:b8:a4:ca:4b:46:f4:f4:a6:c5:82:a1:a4:70:fc:86:1f: aa:c6:ec:b6:81:b0:73:41:30:4e:92:cb:a1:6b:9b:b5:22:1b: 0f:8e:03:97 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxd8Q6EonoBwNEZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk NmY4NGI1YjctMTQ2Yi00NWI0LWE5MDYtYzZkMmVmNjRhYjhkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1rrrzU0qxrdMln/ZwG8UL4rPykFTsx+JLig aGdEsGsScJ0AZR1PloYkQmIloFhrN7p4iV6EixxdJ3Ow31wUUq3mGM/smDNQSUpI X8Ji6cua1WJib0Hj1D0rK+NSPoql++BP0m7oh9aHSUb1EhcCayT2PRSfTcn71utv 4H+MG7lHRuMLzzVuJvE/30nR+RjcUjAnsq6yUMj8O/4R1VUhQaSZmjyTLup9f0J2 tBi0swKl5GQDXzZmpsBBVXe6mw4du2SP80adJCW/qCqJUQk65HGBrj9zfZumB1yr XG1L4ASSSgqx2cRUd9/cUzvUXRhxycYI/yziHNASlyZ8E+5HqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ8CIZP0C0RLpNddwxpf7LU+p6CrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYzg1ZjhhMmEtNzM1Ni0z OTNjLTg2MzYtNjc1YzE5MGIxNTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEZzzfJZjUY5UjFkeS7AEGCgoC4Ri0Eila2GEaHf8MfT33WeAJurAAxm bDBf20kJzIF7PWRUOvcLhkWD/QM7/rNaU6KMT+kqUEXRFBWJ4bXb3BhCvNAWohAP I3AVEHp3mLSgUMJBL3T3k1L7lCvwIj/V0bCkjB2xmdAFjWbaW5PashHAh6L1u18o iTBVcXe6h1h4ctm+ulo4jdsxRI58ykoUyF+YGiKL/VckkxiLH5tle61CTup1KUt5 hdZr3JYNKfOUdIUZLgRPXQt3hmOCS8/BK489jL5gZnaBuKTKS0b09KbFgqGkcPyG H6rG7LaBsHNBME6Sy6Frm7UiGw+OA5c= -----END CERTIFICATE-----Generated at Wed Jul 23 01:36:05 2025 by rpki-client