$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json) Hash identifier: 2D35N8HH7cuSZAaNytheyzNAuKpcqzP98Iq8IM8qQ4k= Subject key identifier: F1:91:E1:EC:69:51:0C:CF:1C:71:BE:FF:1E:34:26:09:AA:D6:2D:ED Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B747416F76271D050F0A0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:74:74:16:f7:62:71:d0:50:f0:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=84b7423e-9101-4ead-b283-fc347e16753d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5d:3f:f1:50:08:5d:4a:72:cd:09:f4:22:47: 9e:05:d3:61:c5:9f:ab:52:2c:39:f6:56:af:c4:02: 9a:63:83:f8:dc:f2:81:c9:cb:41:6c:f8:4e:a9:57: 60:5a:94:4f:0e:66:76:f8:a7:50:93:3f:51:45:ca: 56:d8:b9:14:8b:b7:db:89:64:54:dd:2b:9c:7b:e9: 68:1c:d0:7d:dc:55:e8:c8:86:14:35:67:ef:f6:1d: b2:8c:13:0f:fd:ba:d5:09:c8:95:17:ef:5a:86:0a: 8b:d7:99:64:be:0c:83:fc:a5:5d:fe:9c:8b:cf:0d: 5f:38:e3:3d:97:1a:30:d3:95:f5:65:07:6e:a1:a8: b5:e9:b1:c1:ee:41:9d:99:06:75:2e:0b:86:ac:f6: 10:cb:ca:25:9d:cf:b4:b1:82:f1:ae:b9:07:7f:5c: ef:c6:26:66:c9:84:bc:02:96:13:9b:ed:77:b1:62: 3a:b3:bb:a3:ec:f0:d9:17:61:2d:53:77:65:93:d1: b6:cb:f1:9f:e1:cf:36:4b:41:b7:7c:14:6c:7f:ac: 97:50:33:f3:f6:77:a8:bd:2e:70:d2:39:14:5a:22: 5c:c4:72:23:e2:b1:d7:b7:55:7d:5c:80:e4:f1:60: b6:18:96:e2:5b:b6:5c:b2:f1:b1:f4:70:0d:98:c7: 1e:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:91:E1:EC:69:51:0C:CF:1C:71:BE:FF:1E:34:26:09:AA:D6:2D:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:01:8d:7e:b4:91:76:8f:29:94:e1:a7:6e:09:6b:ff:59:f7: 77:eb:69:a0:3e:72:f1:73:58:89:ac:5e:c4:32:90:64:03:0e: 36:83:50:05:d3:43:15:bb:62:fe:2f:bf:2b:97:eb:39:74:a4: 57:cd:7b:27:fa:a3:f8:31:31:61:e1:67:e2:25:e1:f1:1b:d0: 8d:c5:b6:ee:8e:4f:7b:fd:e3:60:a3:ca:1d:ed:29:06:15:55: c2:15:95:8a:25:94:dc:be:48:18:57:1f:0d:67:1e:55:7c:3f: 2b:c0:e9:86:60:35:a7:53:c0:94:55:b3:f4:24:e7:cb:c9:84: cb:0e:09:60:66:d2:59:39:4f:e0:f0:66:b4:17:3e:ff:b5:fc: 91:f9:a5:eb:f3:a4:79:d1:3d:44:f9:83:1d:50:f3:dd:b9:df: 2d:fb:52:dc:b0:59:f7:a4:46:10:33:bd:94:a0:2c:3a:99:6a: ea:18:3d:db:48:b6:9d:87:ff:74:6a:48:68:24:9f:10:7c:28: da:e7:3d:aa:1f:d6:cf:26:df:8a:45:7c:29:0f:87:ae:af:64: 8c:71:42:36:58:46:e2:8c:dd:79:68:2a:ad:e3:cc:89:03:7e: b0:d4:25:4e:df:9c:c9:03:f9:b5:b9:ae:92:b4:c0:b1:67:43: 3b:10:b7:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3R0FvdicdBQ8KAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ODRiNzQyM2UtOTEwMS00ZWFkLWIyODMtZmMzNDdlMTY3NTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA510/8VAIXUpyzQn0IkeeBdNhxZ+rUiw59lav xAKaY4P43PKByctBbPhOqVdgWpRPDmZ2+KdQkz9RRcpW2LkUi7fbiWRU3Suce+lo HNB93FXoyIYUNWfv9h2yjBMP/brVCciVF+9ahgqL15lkvgyD/KVd/pyLzw1fOOM9 lxow05X1ZQduoai16bHB7kGdmQZ1LguGrPYQy8olnc+0sYLxrrkHf1zvxiZmyYS8 ApYTm+13sWI6s7uj7PDZF2EtU3dlk9G2y/Gf4c82S0G3fBRsf6yXUDPz9neovS5w 0jkUWiJcxHIj4rHXt1V9XIDk8WC2GJbiW7ZcsvGx9HANmMcepwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGR4expUQzPHHG+/x40Jgmq1i3tMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI4BjX60kXaPKZThp24Ja/9Z93fraaA+cvFzWImsXsQykGQDDjaDUAXT QxW7Yv4vvyuX6zl0pFfNeyf6o/gxMWHhZ+Il4fEb0I3Ftu6OT3v942Cjyh3tKQYV VcIVlYollNy+SBhXHw1nHlV8PyvA6YZgNadTwJRVs/Qk58vJhMsOCWBm0lk5T+Dw ZrQXPv+1/JH5pevzpHnRPUT5gx1Q89253y37UtywWfekRhAzvZSgLDqZauoYPdtI tp2H/3RqSGgknxB8KNrnPaof1s8m34pFfCkPh66vZIxxQjZYRuKM3XloKq3jzIkD frDUJU7fnMkD+bW5rpK0wLFnQzsQt5o= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:40 2025 by rpki-client