$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa File: db894078-d2ff-3020-86a4-0d7c5452e065.roa (raw, json) Hash identifier: BvO1od3JetfSkQk0CKgQw5e5gK83+BlrG4p5EFzswpw= Subject key identifier: 17:E2:3C:BF:91:69:56:80:A4:73:81:96:45:45:74:F8:DC:0D:3A:03 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F4328584A7E7B965DD3643863F84C555E Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36492 IP address blocks: 136.22.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Jul 2025 08:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:96:5d:d3:64:38:63:f8:4c:55:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=0475e317-c706-48b7-914c-fbc29513a766 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:c2:60:dc:09:5c:87:9e:38:f4:6f:c2:91:de: 17:20:fb:b8:ff:03:1f:ad:78:0a:d1:ed:ea:dd:16: e6:64:d3:75:29:e4:ec:05:d9:f3:14:fe:d4:4c:2f: 19:45:21:6d:dc:cd:3d:44:83:88:71:c5:44:2a:c6: 96:ab:16:2c:cd:b5:61:b0:6b:60:97:cd:05:c3:3e: 89:e6:18:91:ac:ff:98:4e:af:42:41:0c:1f:96:fe: e0:66:4e:8d:a7:aa:0a:59:4d:9a:01:83:87:2c:ec: 9f:14:8d:85:df:de:df:ec:26:b4:7d:e7:f1:a7:13: 19:fc:78:78:4c:50:ed:94:de:98:d0:8a:00:65:1c: f1:45:ad:84:4b:f6:d0:44:03:2b:48:d2:5f:98:ab: f3:1a:70:bc:55:52:52:6a:81:73:a2:9d:8c:a1:6e: 46:65:7a:59:74:e0:b2:4e:d9:20:b6:5d:a8:ab:35: c4:1e:fe:a0:4f:d2:3e:42:40:0d:6e:25:fb:87:57: 62:80:4e:df:68:58:ee:38:e7:73:53:79:68:7e:65: f3:5a:a8:e8:b5:a3:90:8f:16:23:fa:de:15:72:b4: d8:3a:5c:69:07:43:0a:dc:6a:11:23:3a:79:87:83: 7b:ca:88:2c:35:14:c1:47:32:05:1a:b8:ce:d5:fc: 61:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:E2:3C:BF:91:69:56:80:A4:73:81:96:45:45:74:F8:DC:0D:3A:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/db894078-d2ff-3020-86a4-0d7c5452e065.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:d2:79:a6:ed:ed:af:7a:38:de:36:a3:a2:f7:70:84:5c:fc: da:e4:19:1a:4d:ff:fd:6f:c0:09:87:1d:f6:10:3f:37:8d:d0: d8:b5:86:cc:5b:b1:5c:4d:99:64:9b:f9:9b:26:e1:80:9a:9f: 7d:c3:19:6e:2a:f8:26:4c:db:a3:aa:b1:c9:cf:8b:81:36:4b: be:93:d2:28:2d:9b:f2:53:00:73:71:dd:15:b9:bb:be:a4:07: dd:39:cc:93:ee:61:de:2d:97:19:51:26:b9:2e:d2:1b:32:fa: b6:d3:79:6b:a0:f8:7c:83:04:13:2f:35:9c:08:40:bc:c3:ee: b9:bd:67:2e:d2:12:a1:7d:65:83:c0:c0:63:45:aa:81:ec:1d: 8b:ff:bb:2f:20:38:1c:a5:10:47:05:63:b9:a7:1d:ca:06:5e: f7:51:94:7b:04:82:93:11:27:54:87:24:91:88:f9:a9:24:a6: c3:51:e7:f7:6d:05:68:57:76:42:00:2f:08:26:63:5b:bb:5e: 48:33:a1:08:75:03:3e:01:b0:af:f1:f6:fc:18:ef:ef:8a:6b: 98:2c:74:6e:5f:4d:89:52:be:8a:1c:86:1a:8b:db:b1:bc:da: ee:e0:49:45:2e:61:9a:da:d8:b0:11:f0:fe:d5:a5:6c:6a:9c: bf:a8:d8:de -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5Zd02Q4Y/hMVV4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MDQ3NWUzMTctYzcwNi00OGI3LTkxNGMtZmJjMjk1MTNhNzY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh8Jg3Alch5449G/Ckd4XIPu4/wMfrXgK0e3q 3RbmZNN1KeTsBdnzFP7UTC8ZRSFt3M09RIOIccVEKsaWqxYszbVhsGtgl80Fwz6J 5hiRrP+YTq9CQQwflv7gZk6Np6oKWU2aAYOHLOyfFI2F397f7Ca0fefxpxMZ/Hh4 TFDtlN6Y0IoAZRzxRa2ES/bQRAMrSNJfmKvzGnC8VVJSaoFzop2MoW5GZXpZdOCy Ttkgtl2oqzXEHv6gT9I+QkANbiX7h1digE7faFjuOOdzU3lofmXzWqjotaOQjxYj +t4VcrTYOlxpB0MK3GoRIzp5h4N7yogsNRTBRzIFGrjO1fxhOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBfiPL+RaVaApHOBlkVFdPjcDToDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGI4OTQwNzgtZDJmZi0z MDIwLTg2YTQtMGQ3YzU0NTJlMDY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLSeabt7a96ON42o6L3cIRc/NrkGRpN//1vwAmHHfYQPzeN0Ni1hsxb sVxNmWSb+Zsm4YCan33DGW4q+CZM26OqscnPi4E2S76T0igtm/JTAHNx3RW5u76k B905zJPuYd4tlxlRJrku0hsy+rbTeWug+HyDBBMvNZwIQLzD7rm9Zy7SEqF9ZYPA wGNFqoHsHYv/uy8gOBylEEcFY7mnHcoGXvdRlHsEgpMRJ1SHJJGI+akkpsNR5/dt BWhXdkIALwgmY1u7XkgzoQh1Az4BsK/x9vwY7++Ka5gsdG5fTYlSvoochhqL27G8 2u7gSUUuYZra2LAR8P7VpWxqnL+o2N4= -----END CERTIFICATE-----Generated at Sat Jul 26 07:25:36 2025 by rpki-client