$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa File: 5032c97c-1d16-35c2-a426-f84175509595.roa (raw, json) Hash identifier: oTNoSSu5NK0hyGzu8ixXr5TCWm8eGOrKY3DaqdAENmg= Subject key identifier: 39:D5:3B:5E:CB:21:21:D5:29:B0:8A:69:6F:8A:98:61:FE:DB:FD:82 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A7E7B6FE3DC9BA0410310C8A0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.22.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6f:e3:dc:9b:a0:41:03:10:c8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d328aa6e-2a6c-4e11-8bef-afd25721cea1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ed:78:b9:e3:0a:e3:d9:15:87:bb:29:b2:fd: 59:fe:33:0b:82:93:72:94:2a:8d:cf:ec:51:f4:0f: e9:12:f8:be:d1:fa:75:5a:94:71:61:1f:0c:94:8c: 4f:bd:05:f4:72:16:05:68:e1:db:4f:60:04:c2:7b: 78:13:3a:bd:25:18:aa:31:bf:ad:37:83:d3:48:b7: de:8d:b3:da:87:ac:e8:43:a9:4b:6a:7c:65:db:50: 4d:f1:3c:58:1b:31:94:42:e4:73:59:3c:a0:42:ad: d3:da:a6:49:25:9e:b2:0c:1d:88:ef:5b:0d:0a:82: 8c:78:51:1b:64:bc:43:88:56:43:94:1f:02:d9:86: 60:5e:34:92:d6:ea:5d:86:a5:0c:49:ca:d6:e8:17: 03:ca:88:82:1c:3c:61:d6:e3:8e:7d:4c:d9:58:d2: 5f:7f:e6:89:07:66:e6:f6:36:1d:56:42:e4:b1:c1: ed:25:f6:f9:91:71:97:02:ca:f2:e4:60:b7:a4:b1: 6f:2f:c6:00:13:00:10:40:4d:4a:57:0c:3f:c8:70: 96:57:a4:71:1c:71:91:13:14:64:e3:cb:f4:e1:a9: f7:f3:52:5b:03:bf:97:12:a8:0d:ab:fc:3c:4d:17: 1c:6e:9b:95:1f:52:2f:8a:bf:3f:4e:e2:f9:36:2e: d8:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:D5:3B:5E:CB:21:21:D5:29:B0:8A:69:6F:8A:98:61:FE:DB:FD:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/5032c97c-1d16-35c2-a426-f84175509595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:13:71:19:01:d8:b1:ca:4a:36:3f:2b:da:cb:1c:7a:41:64: 74:93:e9:48:f8:f5:c1:d2:89:99:28:d5:a7:a2:d3:e4:ab:b9: 12:dd:67:eb:f6:2e:62:f7:d0:5a:7d:de:16:8d:0a:ad:7f:fd: 96:14:44:c0:f1:e8:c5:84:ad:b7:52:64:6f:e4:b0:4c:d4:58: a8:47:ec:ad:af:59:ec:0c:23:db:48:e2:f1:41:e3:ec:31:5e: 2b:fc:4a:59:11:e9:79:72:d1:56:46:86:98:cc:35:61:59:cb: 6d:b1:1c:16:ee:20:bd:db:29:63:b2:d0:77:10:96:1e:f2:b5: 31:9b:c0:7a:20:9e:40:b2:48:45:fd:ee:0e:22:df:e9:68:df: c3:f6:90:0b:cf:0d:91:77:ea:57:d5:a9:83:47:31:a3:59:ab: 25:50:16:ea:be:05:46:d1:3e:80:00:32:14:ae:53:08:fc:89: 31:2f:a7:64:c7:ce:dc:69:86:5c:1d:cd:f0:f0:d7:12:24:26: 36:e4:c0:b6:b7:4c:83:a0:b6:47:bc:73:ec:d8:b8:42:88:d9: ba:6a:9b:7c:84:f3:d5:57:27:d8:b8:cb:57:3f:bf:ed:83:55: f3:78:cc:a0:73:5a:7c:4e:dc:3c:a3:65:ce:93:98:f2:7d:ee: 6c:e5:f9:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2/j3JugQQMQyKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDMyOGFhNmUtMmE2Yy00ZTExLThiZWYtYWZkMjU3MjFjZWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+14ueMK49kVh7spsv1Z/jMLgpNylCqNz+xR 9A/pEvi+0fp1WpRxYR8MlIxPvQX0chYFaOHbT2AEwnt4Ezq9JRiqMb+tN4PTSLfe jbPah6zoQ6lLanxl21BN8TxYGzGUQuRzWTygQq3T2qZJJZ6yDB2I71sNCoKMeFEb ZLxDiFZDlB8C2YZgXjSS1updhqUMScrW6BcDyoiCHDxh1uOOfUzZWNJff+aJB2bm 9jYdVkLkscHtJfb5kXGXAsry5GC3pLFvL8YAEwAQQE1KVww/yHCWV6RxHHGRExRk 48v04an381JbA7+XEqgNq/w8TRccbpuVH1Ivir8/TuL5Ni7YhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDnVO17LISHVKbCKaW+KmGH+2/2CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTAzMmM5N2MtMWQxNi0z NWMyLWE0MjYtZjg0MTc1NTA5NTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoTcRkB2LHKSjY/K9rLHHpBZHST6Uj49cHSiZko1aei0+SruRLdZ+v2 LmL30Fp93haNCq1//ZYURMDx6MWErbdSZG/ksEzUWKhH7K2vWewMI9tI4vFB4+wx Xiv8SlkR6Xly0VZGhpjMNWFZy22xHBbuIL3bKWOy0HcQlh7ytTGbwHognkCySEX9 7g4i3+lo38P2kAvPDZF36lfVqYNHMaNZqyVQFuq+BUbRPoAAMhSuUwj8iTEvp2TH ztxphlwdzfDw1xIkJjbkwLa3TIOgtke8c+zYuEKI2bpqm3yE89VXJ9i4y1c/v+2D VfN4zKBzWnxO3DyjZc6TmPJ97mzl+fk= -----END CERTIFICATE-----Generated at Sat Jul 26 07:24:09 2025 by rpki-client