$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa File: 3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa (raw, json) Hash identifier: dsrsFtb+rWISy0C5GirgNILypeXnWcLwp0U/y9kV5lA= Subject key identifier: E6:EA:37:7E:07:BB:3A:0B:C1:6B:A6:18:EB:B8:D5:18:8D:B4:66:D3 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B716E7F9BD5DA7E05E499 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:71:6e:7f:9b:d5:da:7e:05:e4:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=8f038321-c263-4d1b-b661-c94f5e7af059 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:af:12:b7:d4:18:b2:9f:91:7a:13:01:c3:14: 00:a7:b5:ba:16:22:e0:06:7d:a6:0c:21:1c:78:7a: 40:04:cc:36:f4:30:25:1c:1d:0a:d8:62:94:17:f0: fe:a2:a5:85:18:43:9b:92:6c:ef:4c:b4:b6:a3:e4: 53:64:ff:c8:6d:0f:74:e7:d4:af:6e:d2:f6:99:f0: d8:88:2a:42:86:3e:62:72:36:9f:b7:f2:3b:b4:f4: e5:40:eb:6d:39:00:9b:82:06:62:36:f2:f0:af:92: 01:8a:48:7b:e2:3b:9a:12:e0:63:91:34:69:8f:b1: 04:cc:07:d6:e1:6e:fc:95:cf:66:89:f0:91:57:bb: 92:88:e3:ea:1a:b7:c0:0b:f6:ec:d2:79:c8:af:3d: 7e:3f:f1:ae:0f:9b:31:47:18:84:30:c8:cb:ac:78: 9d:61:6c:4d:ed:a0:25:08:e0:f5:4a:50:d9:db:ca: ae:ac:a0:6e:de:12:28:56:70:2a:18:81:c1:61:cc: 4b:67:b4:57:89:0e:cf:fc:90:f8:a6:52:d8:0a:6d: 5e:ad:db:ae:74:b8:21:e7:98:5a:33:e1:46:b6:ea: 0e:a1:77:a0:44:7d:d8:0b:eb:92:15:9d:58:4c:bc: 75:7f:7e:2a:0c:f3:5d:7b:b0:c9:30:b9:44:42:0c: 4d:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:EA:37:7E:07:BB:3A:0B:C1:6B:A6:18:EB:B8:D5:18:8D:B4:66:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3bb7c0b5-ad6d-3b3e-8db2-fda8d186bffd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 35:b8:42:0b:9f:87:49:da:36:05:40:f6:e8:f6:a3:0e:cc:82: 25:73:eb:fe:0c:d4:18:d7:60:e0:59:1b:47:1e:cd:03:b9:cc: c9:f9:5e:12:96:7d:93:b1:ec:c3:56:32:87:0e:fd:65:c3:a0: 5a:cd:27:f4:75:38:1d:6e:83:40:53:90:9c:f4:91:4f:7c:b1: 63:66:9b:d8:95:22:c6:84:31:e9:9f:50:ce:6c:dc:a7:78:d6: c9:af:0b:b9:bb:e7:cc:63:0a:0e:49:c1:6e:6d:90:e5:0a:0e: bd:24:91:4d:16:17:50:14:ab:a2:48:19:f7:7a:29:d4:33:27: a3:91:5a:84:da:dc:1e:13:b2:93:0c:1c:88:39:31:90:7e:1c: 57:2a:05:9b:2b:a6:9e:0a:3b:c9:dc:b9:8d:09:69:21:d2:ad: 97:97:67:3a:07:2c:00:bc:49:5e:55:d9:52:3c:12:54:04:44: 74:4b:b0:7d:39:ed:4f:a1:ef:d0:28:8a:48:20:60:dd:66:68: 1c:e8:0f:26:5f:c9:77:14:c4:63:2f:a3:4b:50:a8:55:c5:7e: 1b:07:64:94:6a:28:2b:a9:69:72:a6:b1:ac:19:f6:8a:62:8a: f4:fb:4e:9d:8b:d0:92:b3:ab:f6:e7:f1:6d:39:e0:91:14:a3: 0d:a4:20:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3Fuf5vV2n4F5JkwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OGYwMzgzMjEtYzI2My00ZDFiLWI2NjEtYzk0ZjVlN2FmMDU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAga8St9QYsp+RehMBwxQAp7W6FiLgBn2mDCEc eHpABMw29DAlHB0K2GKUF/D+oqWFGEObkmzvTLS2o+RTZP/IbQ9059SvbtL2mfDY iCpChj5icjaft/I7tPTlQOttOQCbggZiNvLwr5IBikh74juaEuBjkTRpj7EEzAfW 4W78lc9mifCRV7uSiOPqGrfAC/bs0nnIrz1+P/GuD5sxRxiEMMjLrHidYWxN7aAl COD1SlDZ28qurKBu3hIoVnAqGIHBYcxLZ7RXiQ7P/JD4plLYCm1erduudLgh55ha M+FGtuoOoXegRH3YC+uSFZ1YTLx1f34qDPNde7DJMLlEQgxNgwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFObqN34HuzoLwWumGOu41RiNtGbTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2JiN2MwYjUtYWQ2ZC0z YjNlLThkYjItZmRhOGQxODZiZmZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADW4Qgufh0naNgVA9uj2ow7MgiVz6/4M1BjXYOBZG0cezQO5zMn5XhKW fZOx7MNWMocO/WXDoFrNJ/R1OB1ug0BTkJz0kU98sWNmm9iVIsaEMemfUM5s3Kd4 1smvC7m758xjCg5JwW5tkOUKDr0kkU0WF1AUq6JIGfd6KdQzJ6ORWoTa3B4TspMM HIg5MZB+HFcqBZsrpp4KO8ncuY0JaSHSrZeXZzoHLAC8SV5V2VI8ElQERHRLsH05 7U+h79AoikggYN1maBzoDyZfyXcUxGMvo0tQqFXFfhsHZJRqKCupaXKmsawZ9opi ivT7Tp2L0JKzq/bn8W054JEUow2kIO4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:45 2025 by rpki-client