$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: 0+2/HMQbuZmFsr2pr+4yZliTTLDA7OQsg3rYOEODJIQ= Subject key identifier: 03:29:D2:21:B1:AC:A4:04:3E:46:A9:01:7A:99:A7:C4:7E:05:A7:86 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B89FB1D4E1303FF7A3A80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:89:fb:1d:4e:13:03:ff:7a:3a:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=2a17d418-eddb-4170-8ac7-1e887cf1eb09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:22:80:b2:68:7b:de:72:63:99:4e:5b:53:f4: dd:92:e4:c6:3d:a5:e8:3f:a4:0a:7d:e6:2a:ee:85: 50:ed:45:35:88:43:d5:f1:8d:3e:7a:f5:f7:9b:d4: e7:50:d3:c0:f2:d0:c3:cb:fb:08:d1:f3:70:58:76: 2e:43:b4:d5:72:96:89:ad:a9:e9:dc:70:60:52:0c: 87:06:f5:19:da:bd:6c:55:08:51:5d:cd:bb:07:87: 68:b4:f7:cb:82:fe:38:28:db:57:a0:ce:36:37:28: 62:17:4e:38:8a:b3:c5:58:2f:ff:5d:54:6d:38:44: 6f:33:ae:fc:ad:f5:af:58:8f:82:39:53:6d:2c:7b: 7a:8a:48:51:86:dc:c0:0b:a9:2b:65:ab:38:36:c2: 72:59:54:db:ce:b6:c2:d5:fb:f4:7e:47:e0:45:7d: ce:f6:52:59:7c:70:bb:17:25:d4:7f:c6:df:c0:10: 93:4f:db:7c:e1:96:41:b8:90:5e:b3:a8:0a:7b:13: 8e:68:74:9c:18:88:d0:f8:b5:08:86:d8:82:8f:2d: 2a:8e:45:13:b8:a9:01:97:96:40:61:73:19:e3:9d: 36:67:5f:1b:ba:23:ec:eb:f2:7e:69:6f:cf:8c:3c: 5d:c0:9f:10:36:e8:ef:6b:c4:6e:df:fa:42:92:62: 2b:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:29:D2:21:B1:AC:A4:04:3E:46:A9:01:7A:99:A7:C4:7E:05:A7:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:b6:45:95:ee:02:df:e9:48:8b:27:fb:5f:49:39:97:ab:86: a0:6a:6f:ea:27:60:25:aa:80:e3:b7:70:d2:8d:76:65:b0:49: d2:08:46:44:da:4f:4c:6d:fc:d8:17:e6:4d:1f:d1:4b:a2:a7: e0:06:87:e1:40:dd:cb:cc:ed:c4:21:11:b5:83:5b:81:07:50: 82:56:6d:a7:8e:ae:d8:d9:b0:9e:59:e2:60:63:35:a1:8e:fc: 2b:95:e4:1e:e0:56:d4:b7:91:aa:0d:1e:a4:6c:fa:d6:f0:69: cf:68:35:71:ea:b9:f9:d5:8d:08:27:79:65:36:c2:7e:27:c9: 43:db:cc:b1:38:3e:54:27:d4:10:72:9d:80:a4:d9:8b:f3:77: 48:5b:ab:c6:10:84:93:b7:76:03:99:1e:49:43:95:ab:6f:73: 8a:3a:05:d8:b1:53:48:c7:5b:e7:4f:aa:8e:b8:31:92:f1:c9: 0a:da:e2:44:ca:d2:4e:58:ff:93:90:48:94:86:68:a0:50:22: 93:25:82:53:32:a5:98:18:84:61:7d:fa:18:1c:31:00:05:ac: a5:dd:71:39:15:e7:d8:ba:b2:e3:10:e9:fe:00:a3:a6:85:9e: e5:5c:30:34:c0:de:33:35:51:6b:22:78:90:e5:4f:ae:7f:19: c2:4d:5b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e4n7HU4TA/96OoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MmExN2Q0MTgtZWRkYi00MTcwLThhYzctMWU4ODdjZjFlYjA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyKAsmh73nJjmU5bU/TdkuTGPaXoP6QKfeYq 7oVQ7UU1iEPV8Y0+evX3m9TnUNPA8tDDy/sI0fNwWHYuQ7TVcpaJranp3HBgUgyH BvUZ2r1sVQhRXc27B4dotPfLgv44KNtXoM42NyhiF044irPFWC//XVRtOERvM678 rfWvWI+COVNtLHt6ikhRhtzAC6krZas4NsJyWVTbzrbC1fv0fkfgRX3O9lJZfHC7 FyXUf8bfwBCTT9t84ZZBuJBes6gKexOOaHScGIjQ+LUIhtiCjy0qjkUTuKkBl5ZA YXMZ4502Z18buiPs6/J+aW/PjDxdwJ8QNujva8Ru3/pCkmIrCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAMp0iGxrKQEPkapAXqZp8R+BaeGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHK2RZXuAt/pSIsn+19JOZerhqBqb+onYCWqgOO3cNKNdmWwSdIIRkTa T0xt/NgX5k0f0Uuip+AGh+FA3cvM7cQhEbWDW4EHUIJWbaeOrtjZsJ5Z4mBjNaGO /CuV5B7gVtS3kaoNHqRs+tbwac9oNXHqufnVjQgneWU2wn4nyUPbzLE4PlQn1BBy nYCk2Yvzd0hbq8YQhJO3dgOZHklDlatvc4o6BdixU0jHW+dPqo64MZLxyQra4kTK 0k5Y/5OQSJSGaKBQIpMlglMypZgYhGF9+hgcMQAFrKXdcTkV59i6suMQ6f4Ao6aF nuVcMDTA3jM1UWsieJDlT65/GcJNW+U= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:27 2025 by rpki-client