$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa File: 0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa (raw, json) Hash identifier: tLQiKcuMVMbiP6yINsfG2QIhWynLbkfa2YrlxyXc2U4= Subject key identifier: 60:A9:6E:3C:D2:08:9A:74:80:B1:DA:79:12:73:C6:9A:E4:83:54:6A Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A841188E4E0C882475D259F60 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.22.220.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:11:88:e4:e0:c8:82:47:5d:25:9f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=2a9a1dae-8e3a-4ec7-bb8e-cff50ee18bd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:28:02:db:d5:46:1c:27:d3:b6:a4:6f:63:28: 27:ee:73:c4:89:1c:a7:ad:41:a8:c3:6f:29:34:4b: b1:9b:4c:fd:dc:ba:98:44:5a:66:dc:fc:56:89:d6: bf:35:8f:7d:32:72:98:ed:80:f5:58:9d:22:6f:8f: d8:84:da:a6:b4:27:be:89:52:fc:d5:4d:e6:a5:c1: 81:b6:54:5e:35:f7:0f:c1:c9:f6:bb:f4:2b:f4:8d: 1b:2f:a9:a0:1a:bf:16:01:0f:fd:d5:b4:4e:bc:87: e5:7f:fc:e1:fc:24:19:c3:9b:ed:f9:87:5f:05:b6: c1:13:5e:eb:de:6e:be:4a:85:b3:9f:1c:2e:6c:05: d3:36:b3:e6:25:0e:7a:f0:18:01:6e:93:0b:1e:e9: 77:2b:8a:95:f3:24:43:8b:bc:77:f9:ed:ed:b6:22: 8f:28:a7:8e:ac:b5:54:ec:69:da:ba:f9:cb:79:60: 43:63:75:89:04:fe:ae:56:19:bf:d1:ee:de:4b:15: 04:61:72:07:1c:9b:e1:ce:4a:80:6c:a2:5d:5d:51: e9:c4:0f:3a:ea:6a:a7:72:18:60:98:24:1f:1d:9a: a1:b1:31:cf:02:58:67:0b:9d:76:24:ce:87:eb:98: 1a:24:e3:b7:86:7f:c1:cd:3a:88:a0:ec:c2:d5:74: da:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:A9:6E:3C:D2:08:9A:74:80:B1:DA:79:12:73:C6:9A:E4:83:54:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/0c96c42d-234b-33dc-ac09-63f4e3f2da5d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.220.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:0c:b5:9d:03:6d:c6:1e:f0:5c:19:72:68:5c:c7:c6:9f:b2: ef:45:31:8b:c2:1f:85:e5:d6:5a:1e:fd:03:3d:69:71:98:35: a3:c8:98:3f:24:95:b2:90:eb:c9:9d:09:dc:c2:4b:1d:7b:27: 2f:f2:8e:1d:5f:97:b1:03:f1:70:57:a7:e8:0b:fd:48:e3:00: ff:83:8e:20:5d:9b:d1:57:ec:56:87:85:d4:32:8a:b1:53:f5: f7:0b:ba:ca:4b:4a:d6:0d:ad:8e:28:2a:90:d3:43:36:a8:ec: a4:f5:62:13:37:a2:13:ff:71:ab:98:c2:48:81:3d:40:49:ea: 15:65:0e:0e:fb:43:94:bb:6d:d0:9e:52:9e:9e:83:e4:a7:4b: d5:c4:55:16:86:76:30:c9:68:e3:57:86:fd:0e:bb:81:05:96: 2c:2f:2b:03:be:07:f4:16:31:9d:e6:5a:0f:16:2c:c1:8d:73: 06:37:fa:e8:28:84:0b:6a:ad:bb:af:ea:bd:41:b9:90:78:a1: 85:7e:73:42:fc:6f:e6:48:5a:17:47:c8:10:88:dc:56:2c:ea: 0d:fe:1e:58:9b:4f:a7:f5:fe:65:5b:eb:db:b8:48:56:dc:0d: f9:68:e9:aa:c9:95:61:a1:43:c0:da:5c:7d:41:4c:1f:b3:3c: 69:4c:4f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEYjk4MiCR10ln2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MmE5YTFkYWUtOGUzYS00ZWM3LWJiOGUtY2ZmNTBlZTE4YmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlygC29VGHCfTtqRvYygn7nPEiRynrUGow28p NEuxm0z93LqYRFpm3PxWida/NY99MnKY7YD1WJ0ib4/YhNqmtCe+iVL81U3mpcGB tlReNfcPwcn2u/Qr9I0bL6mgGr8WAQ/91bROvIflf/zh/CQZw5vt+YdfBbbBE17r 3m6+SoWznxwubAXTNrPmJQ568BgBbpMLHul3K4qV8yRDi7x3+e3ttiKPKKeOrLVU 7GnauvnLeWBDY3WJBP6uVhm/0e7eSxUEYXIHHJvhzkqAbKJdXVHpxA866mqnchhg mCQfHZqhsTHPAlhnC512JM6H65gaJOO3hn/BzTqIoOzC1XTaKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGCpbjzSCJp0gLHaeRJzxprkg1RqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMGM5NmM0MmQtMjM0Yi0z M2RjLWFjMDktNjNmNGUzZjJkYTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA8MtZ0DbcYe8FwZcmhcx8afsu9FMYvCH4Xl1loe/QM9aXGYNaPImD8k lbKQ68mdCdzCSx17Jy/yjh1fl7ED8XBXp+gL/UjjAP+DjiBdm9FX7FaHhdQyirFT 9fcLuspLStYNrY4oKpDTQzao7KT1YhM3ohP/cauYwkiBPUBJ6hVlDg77Q5S7bdCe Up6eg+SnS9XEVRaGdjDJaONXhv0Ou4EFliwvKwO+B/QWMZ3mWg8WLMGNcwY3+ugo hAtqrbuv6r1BuZB4oYV+c0L8b+ZIWhdHyBCI3FYs6g3+HlibT6f1/mVb69u4SFbc Dflo6arJlWGhQ8DaXH1BTB+zPGlMT+s= -----END CERTIFICATE-----Generated at Sat Jul 26 07:23:26 2025 by rpki-client