$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa File: bc96c6ca-8690-3363-938c-5b04183f6c29.roa (raw, json) Hash identifier: q+jWQXA6TMdYjBPRPgkWVx7iJnaXYrZc8CpK1F0Vs/Y= Subject key identifier: 30:54:48:87:52:3E:71:BE:CF:31:6C:9E:B6:E9:49:1C:93:C1:74:AB Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A7E7B8B5472245033E57B6100 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.22.199.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:8b:54:72:24:50:33:e5:7b:61:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=25faa246-7d65-4716-9de0-4adba1c06928 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:1c:20:33:ee:25:9b:7d:11:b0:5a:2a:6f:71: cc:06:77:c2:92:46:74:dc:3e:24:a9:38:93:56:2a: 43:aa:69:a8:80:99:02:b9:0a:25:db:c8:4d:73:e5: 20:4a:62:94:f7:b2:ab:ec:f7:c6:42:ae:ad:20:1b: 1e:db:9f:e5:ef:37:e5:9f:cd:7a:5b:fd:30:f9:3c: c6:c5:39:e3:b9:d6:4c:2f:06:90:66:0d:6d:63:d6: a3:ff:4c:67:9d:3b:21:d6:39:f4:ed:67:67:6c:66: 4a:6e:64:b5:f6:f1:d4:05:d1:25:5c:2c:09:81:a6: 55:88:a8:5b:28:69:a1:d8:74:5a:ba:42:71:85:22: bc:23:bd:39:29:b4:65:dc:a2:96:8c:54:e0:2e:6d: 77:f8:be:8e:d2:09:87:25:c8:d9:be:1e:8e:df:8e: 46:40:1c:3e:48:69:de:0b:63:a4:cf:25:54:2e:a4: a9:74:5d:37:07:1c:38:cf:37:29:45:85:7e:d4:d7: b9:c2:31:bc:21:af:43:71:c3:88:5a:87:79:51:c0: 51:f8:c8:06:53:22:72:75:da:1b:e1:46:ee:b8:f6: a8:85:a4:0f:bf:de:7a:ea:99:b6:95:ff:8c:66:9e: 95:e5:56:2f:7a:73:6b:08:55:48:4c:ce:fb:e5:73: 46:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:54:48:87:52:3E:71:BE:CF:31:6C:9E:B6:E9:49:1C:93:C1:74:AB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bc96c6ca-8690-3363-938c-5b04183f6c29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.199.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:aa:e0:7b:5a:dc:44:28:30:03:30:af:af:8c:c7:40:ee:ac: 13:dd:0a:b1:46:dd:de:32:f3:4e:64:08:9e:37:82:bb:b0:2f: 0a:af:08:21:63:94:4d:61:ec:08:87:65:93:19:dd:2d:97:9e: e5:ca:c5:e9:c0:e2:30:2a:0f:67:d1:18:99:a6:9e:d9:d7:96: 4d:a0:8a:ec:8c:3b:3b:78:79:7f:36:b0:19:d3:1a:dd:1a:2e: 96:46:b2:28:09:a9:54:f3:bd:60:e7:01:28:3b:57:c3:86:3e: 5c:4e:e1:7c:19:c3:4f:74:2d:fc:b4:a6:bf:62:55:36:d4:26: 9b:ba:98:9d:b7:70:c4:7c:f2:d8:65:9c:47:79:9d:d5:44:c8: de:f7:e6:64:8e:97:b1:60:d0:85:12:6e:c3:70:b8:58:5c:29: 21:dc:dc:7f:fa:d8:be:d9:0e:2a:0c:de:c5:37:96:4f:52:0e: 03:26:e8:42:00:c6:4f:3f:3a:05:a2:d3:85:71:9a:46:b7:e1: 28:d0:fd:82:c8:11:a1:ec:93:dc:2b:d3:75:33:d5:58:ba:bf: 37:99:52:6f:77:76:c5:cc:69:b0:50:c8:d5:7d:6f:11:e4:43: b0:97:4b:f0:dd:f9:c5:29:ff:34:03:6c:5e:1c:d2:f8:f8:6f: 5a:44:01:14 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4tUciRQM+V7YQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjVmYWEyNDYtN2Q2NS00NzE2LTlkZTAtNGFkYmExYzA2OTI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhwgM+4lm30RsFoqb3HMBnfCkkZ03D4kqTiT VipDqmmogJkCuQol28hNc+UgSmKU97Kr7PfGQq6tIBse25/l7zfln816W/0w+TzG xTnjudZMLwaQZg1tY9aj/0xnnTsh1jn07WdnbGZKbmS19vHUBdElXCwJgaZViKhb KGmh2HRaukJxhSK8I705KbRl3KKWjFTgLm13+L6O0gmHJcjZvh6O345GQBw+SGne C2OkzyVULqSpdF03Bxw4zzcpRYV+1Ne5wjG8Ia9DccOIWod5UcBR+MgGUyJyddob 4UbuuPaohaQPv9566pm2lf+MZp6V5VYvenNrCFVITM775XNGVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDBUSIdSPnG+zzFsnrbpSRyTwXSrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYmM5NmM2Y2EtODY5MC0z MzYzLTkzOGMtNWIwNDE4M2Y2YzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHqq4Hta3EQoMAMwr6+Mx0DurBPdCrFG3d4y805kCJ43gruwLwqvCCFj lE1h7AiHZZMZ3S2XnuXKxenA4jAqD2fRGJmmntnXlk2giuyMOzt4eX82sBnTGt0a LpZGsigJqVTzvWDnASg7V8OGPlxO4XwZw090Lfy0pr9iVTbUJpu6mJ23cMR88thl nEd5ndVEyN735mSOl7Fg0IUSbsNwuFhcKSHc3H/62L7ZDioM3sU3lk9SDgMm6EIA xk8/OgWi04Vxmka34SjQ/YLIEaHsk9wr03Uz1Vi6vzeZUm93dsXMabBQyNV9bxHk Q7CXS/Dd+cUp/zQDbF4c0vj4b1pEARQ= -----END CERTIFICATE-----Generated at Sat Jul 26 07:26:58 2025 by rpki-client