$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa File: 23032a6b-2d78-3ea6-abeb-c2770f474e29.roa (raw, json) Hash identifier: eguz/GOkT/oDR0jxDDjd9Dz61ZzWFNg5Yx+V7Hh0r80= Subject key identifier: EA:9B:2F:D4:ED:A4:22:46:90:6E:C2:C5:D1:44:01:57:59:DA:A4:05 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A8412392B87DA0C91C1FDD958 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa Signing time: Mon 14 Jul 2025 13:01:04 +0000 ROA not before: Mon 14 Jul 2025 13:01:04 +0000 ROA not after: Sun 12 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.22.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:84:12:39:2b:87:da:0c:91:c1:fd:d9:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 14 13:01:04 2025 GMT Not After : Oct 12 13:01:04 2025 GMT Subject: CN=36cbeb69-a184-4ded-8f3e-022a8d63f315 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:61:a3:47:b8:a2:25:b2:e4:60:8e:1b:1e:8c: fc:45:29:09:f3:00:ef:95:0e:8d:a2:7d:21:b3:fa: 8d:24:7b:ee:fe:70:d9:41:a7:65:a8:1c:27:98:5a: 21:72:d4:72:ce:52:18:45:2e:d0:4f:d5:65:bb:fb: 24:d0:11:b3:74:8e:14:a7:d5:da:39:83:de:0c:b0: 2c:eb:90:04:b2:f4:83:9a:ed:76:8c:18:d4:d2:bb: 8b:00:39:2e:f9:11:c4:a8:f3:48:05:5c:f0:a1:c2: 3f:af:ef:13:bb:36:c4:48:82:69:36:b1:8e:b2:2f: 5f:d3:7c:5f:13:50:c7:42:a3:4d:9b:e1:13:cf:d3: ff:bf:1e:18:48:40:af:5b:2b:16:f6:67:29:d5:e9: c5:93:b2:e1:ee:7e:34:f2:a0:d9:e2:e3:62:4c:36: 59:f8:c3:1f:78:cf:61:5b:40:fb:77:0e:a6:9c:9d: bd:cd:11:76:9a:c2:0b:07:20:53:37:f9:c0:02:e3: ca:c5:de:f8:5d:4b:6f:bb:16:5d:1b:83:e2:30:22: bc:dc:45:b5:e0:fe:a1:ca:dd:ed:67:cd:c3:36:ec: fe:26:18:45:b3:5b:4a:ff:33:81:f2:ba:a4:6d:7f: 23:6e:de:7f:d3:a6:b7:fd:75:06:a1:fc:9c:37:28: d8:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:9B:2F:D4:ED:A4:22:46:90:6E:C2:C5:D1:44:01:57:59:DA:A4:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9b:a2:c1:cb:41:da:7b:90:ae:be:05:eb:1b:d0:9d:50:e9:da: 4c:53:12:6f:af:a7:07:76:f8:bd:5f:71:53:81:82:2c:aa:b0: 5b:50:8b:bc:56:93:e8:52:e1:b6:a8:11:a0:2e:a1:2b:7b:b2: 1e:ec:2f:97:49:94:bf:70:f4:7b:c1:64:8a:69:6b:97:7d:0d: cc:3e:30:f7:b7:b1:07:ed:96:87:90:d5:7f:2e:67:f2:86:64: c2:9c:40:80:75:45:78:50:67:70:c9:ab:cf:1c:94:50:87:05: 82:81:71:a9:43:50:79:3e:ea:40:00:a5:42:1d:8f:04:59:b5: f0:79:23:a0:0a:e9:ef:34:db:ff:73:88:07:1f:ee:66:a3:f0: 81:dc:cb:e0:64:8f:e9:28:e4:20:ce:a8:f3:aa:1e:39:3e:b6: 7f:c4:74:e7:a0:a5:30:d2:68:41:39:fb:b8:01:76:6e:16:ac: 2e:ab:db:53:53:a3:86:55:9f:f7:1c:3a:2e:13:50:cf:51:29: ce:e7:d0:57:09:aa:2c:3e:09:80:10:29:a6:f3:b5:85:22:ea: 10:d5:66:f0:b2:f6:15:9a:f4:f2:44:0b:41:c3:75:e6:8e:2c: 63:23:17:f3:09:26:4e:52:e8:07:14:44:4a:6f:73:b7:ec:fa: 3c:52:32:33 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjkrh9oMkcH92VgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk MzZjYmViNjktYTE4NC00ZGVkLThmM2UtMDIyYThkNjNmMzE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGGjR7iiJbLkYI4bHoz8RSkJ8wDvlQ6Non0h s/qNJHvu/nDZQadlqBwnmFohctRyzlIYRS7QT9Vlu/sk0BGzdI4Up9XaOYPeDLAs 65AEsvSDmu12jBjU0ruLADku+RHEqPNIBVzwocI/r+8TuzbESIJpNrGOsi9f03xf E1DHQqNNm+ETz9P/vx4YSECvWysW9mcp1enFk7Lh7n408qDZ4uNiTDZZ+MMfeM9h W0D7dw6mnJ29zRF2msILByBTN/nAAuPKxd74XUtvuxZdG4PiMCK83EW14P6hyt3t Z83DNuz+JhhFs1tK/zOB8rqkbX8jbt5/06a3/XUGofycNyjY+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOqbL9TtpCJGkG7CxdFEAVdZ2qQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMjMwMzJhNmItMmQ3OC0z ZWE2LWFiZWItYzI3NzBmNDc0ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJuiwctB2nuQrr4F6xvQnVDp2kxTEm+vpwd2+L1fcVOBgiyqsFtQi7xW k+hS4baoEaAuoSt7sh7sL5dJlL9w9HvBZIppa5d9Dcw+MPe3sQftloeQ1X8uZ/KG ZMKcQIB1RXhQZ3DJq88clFCHBYKBcalDUHk+6kAApUIdjwRZtfB5I6AK6e802/9z iAcf7maj8IHcy+Bkj+ko5CDOqPOqHjk+tn/EdOegpTDSaEE5+7gBdm4WrC6r21NT o4ZVn/ccOi4TUM9RKc7n0FcJqiw+CYAQKabztYUi6hDVZvCy9hWa9PJEC0HDdeaO LGMjF/MJJk5S6AcUREpvc7fs+jxSMjM= -----END CERTIFICATE-----Generated at Sat Jul 26 07:22:34 2025 by rpki-client