$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa File: 16d32892-c3eb-30da-a6a2-9342916a0080.roa (raw, json) Hash identifier: 1Rm+YKzLyr5c1nFA4A1aHAuwUF0FFavTarSxCy33n/E= Subject key identifier: F9:E3:4C:74:E8:5B:A4:1D:32:1E:05:3E:51:A1:29:A0:CD:20:6E:66 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B9ABA943F1195C8F30880 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:ba:94:3f:11:95:c8:f3:08:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=629b6a2a-297f-4c3d-82dc-b87f1469bc6c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:5f:f3:27:a2:37:fa:98:e2:90:30:7c:4c:13: be:96:2c:ef:9e:74:95:c7:ce:36:67:d6:32:c4:65: f2:1d:82:0f:e9:76:da:5d:eb:7b:13:4b:af:98:ac: b4:bf:d1:5f:97:ef:29:50:e1:09:ec:ad:3f:44:63: 1c:9f:48:fc:2c:b6:30:59:46:d7:44:8f:24:84:a7: 53:1e:12:4e:e8:ce:39:03:b0:4e:3e:9a:61:c7:36: f5:e5:b6:3d:7d:b7:35:54:39:26:36:30:8b:74:5a: ba:a6:7a:17:0e:37:ea:04:02:00:aa:21:73:a1:a4: 1e:84:7a:5b:27:14:f9:2f:c3:ff:6a:f9:ba:97:cd: e2:c2:46:dc:ec:02:59:7d:be:69:ed:52:de:42:de: 91:1f:86:95:2f:b9:3c:09:cc:f5:f9:82:42:c2:db: ee:66:df:90:28:65:f9:a1:47:2d:ea:dd:3c:d1:f8: 46:59:45:33:70:3a:00:d6:a4:9d:79:a9:54:b0:12: c9:6c:66:83:20:4d:cd:cc:65:60:c4:8f:6e:fc:e1: bd:5d:2d:b2:0f:32:65:8e:4a:77:85:38:ba:aa:fc: 60:6d:4f:8a:f7:f2:56:90:e8:a7:69:ae:87:e4:60: 96:f3:ab:77:60:fc:22:90:43:e6:82:27:c1:88:cb: 53:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:E3:4C:74:E8:5B:A4:1D:32:1E:05:3E:51:A1:29:A0:CD:20:6E:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:0d:34:78:b6:e0:3e:e6:9c:62:69:e0:d8:b4:76:1d:e5:ff: dc:bc:c7:46:48:9a:79:4d:e3:16:e5:d0:7f:6d:94:5f:ed:0e: ed:30:2c:fc:15:9d:57:b1:56:eb:bb:6d:37:73:d3:08:bd:ef: 9a:56:fe:a5:55:da:2a:9d:7c:fd:60:be:dd:af:ee:aa:b7:bf: 62:5e:ba:1f:be:13:f7:df:50:eb:1e:7c:3e:79:99:98:ac:57: cd:de:82:d5:df:5a:60:9f:3e:f4:f2:48:ac:0b:a4:a6:4d:3a: cc:d9:18:40:36:f1:40:7e:89:fa:ea:f1:57:06:51:bb:b7:f4: 91:e2:0d:55:c6:84:9a:67:51:45:ad:4e:3e:5f:a2:d9:d6:90: 72:4d:76:30:98:26:9d:2f:85:fd:de:83:8b:ba:fa:77:31:09: 78:5a:99:16:42:25:9f:50:1d:4c:12:ed:a0:f8:f6:38:4f:50: 4a:4b:06:c3:9a:2e:dc:8b:c5:0b:0a:1e:0a:44:60:39:0b:5c: e8:f8:1c:59:3f:ad:cd:d4:af:4e:92:3d:a3:8b:86:d8:ca:02: ca:1e:ad:46:3a:3a:22:7f:14:b2:5c:8c:32:34:6f:d8:4b:19: 2a:6c:77:08:1f:57:aa:f7:ac:f7:8c:62:7b:1d:c6:92:44:03: c9:1f:f2:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5q6lD8RlcjzCIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NjI5YjZhMmEtMjk3Zi00YzNkLTgyZGMtYjg3ZjE0NjliYzZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyF/zJ6I3+pjikDB8TBO+lizvnnSVx842Z9Yy xGXyHYIP6XbaXet7E0uvmKy0v9Ffl+8pUOEJ7K0/RGMcn0j8LLYwWUbXRI8khKdT HhJO6M45A7BOPpphxzb15bY9fbc1VDkmNjCLdFq6pnoXDjfqBAIAqiFzoaQehHpb JxT5L8P/avm6l83iwkbc7AJZfb5p7VLeQt6RH4aVL7k8Ccz1+YJCwtvuZt+QKGX5 oUct6t080fhGWUUzcDoA1qSdealUsBLJbGaDIE3NzGVgxI9u/OG9XS2yDzJljkp3 hTi6qvxgbU+K9/JWkOinaa6H5GCW86t3YPwikEPmgifBiMtTTwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnjTHToW6QdMh4FPlGhKaDNIG5mMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMTZkMzI4OTItYzNlYi0z MGRhLWE2YTItOTM0MjkxNmEwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0NNHi24D7mnGJp4Ni0dh3l/9y8x0ZImnlN4xbl0H9tlF/tDu0wLPwV nVexVuu7bTdz0wi975pW/qVV2iqdfP1gvt2v7qq3v2Jeuh++E/ffUOsefD55mZis V83egtXfWmCfPvTySKwLpKZNOszZGEA28UB+ifrq8VcGUbu39JHiDVXGhJpnUUWt Tj5fotnWkHJNdjCYJp0vhf3eg4u6+ncxCXhamRZCJZ9QHUwS7aD49jhPUEpLBsOa LtyLxQsKHgpEYDkLXOj4HFk/rc3Ur06SPaOLhtjKAsoerUY6OiJ/FLJcjDI0b9hL GSpsdwgfV6r3rPeMYnsdxpJEA8kf8rs= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:22 2025 by rpki-client