$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa File: 619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json) Hash identifier: incVnV8N+ZbZL/OVxnC2JJ0qSSZyRyYPR5guvGpA5G8= Subject key identifier: C2:4A:DF:64:41:8C:F6:44:B8:91:D7:DC:29:F0:89:5F:EA:32:EA:58 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B9CD45CFF516D51825B00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9c:d4:5c:ff:51:6d:51:82:5b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=fa899fa2-12a4-4fee-87d7-c8dbbe329351 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:38:26:35:82:a0:56:38:99:81:dc:df:7d:41: 98:4d:6f:db:5b:e2:a0:d3:ea:5b:f3:8b:35:96:be: 82:bb:fd:9a:c7:b1:79:e4:cc:a3:49:44:5b:40:8b: 24:98:19:58:07:4a:89:76:87:24:2f:39:e4:6a:63: 4c:be:14:92:cf:6e:9e:0f:ce:60:f0:b1:1e:33:4c: f7:fa:24:4d:9c:93:d7:a8:dd:62:04:55:d2:a3:7c: 9e:24:3b:a6:93:33:59:4b:47:9a:51:a8:cc:5f:c3: a7:a3:e7:09:4f:f0:5d:98:d2:76:81:e2:6c:83:dd: 61:63:e8:a3:b1:f8:0d:7f:1b:bd:45:d9:61:a9:19: 10:85:a1:ec:9e:c6:54:d3:e7:26:b6:7b:b4:40:1c: 70:c3:87:bc:cf:9a:07:61:08:08:26:5f:14:bf:3f: 99:73:9f:1e:5a:e4:7f:8a:a4:b6:9f:07:cd:e2:e2: 2b:38:a1:ce:10:b7:e6:c3:09:90:c0:44:79:02:0c: 99:99:4d:ae:63:7c:62:5a:b7:73:2f:a6:a1:ea:48: 5b:99:07:27:53:06:46:a7:76:6e:1a:3b:0e:e1:8c: d9:48:35:3e:c1:aa:70:58:61:9c:45:d4:b9:46:eb: d8:c5:02:7c:b3:b6:f2:b4:b2:c8:1e:5f:b4:3c:c5: 22:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:4A:DF:64:41:8C:F6:44:B8:91:D7:DC:29:F0:89:5F:EA:32:EA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:88:b2:a1:cd:f1:9a:5f:ec:0f:e4:55:04:8d:f4:df:43:3d: 22:1a:27:6f:43:70:d8:31:46:1d:72:9d:bd:1a:47:b7:72:3f: 78:ca:e0:ac:30:f5:0d:d7:e6:3b:59:7f:25:31:97:fa:e1:b2: 63:40:4c:de:5a:64:0b:27:9c:3b:ba:f0:1b:a2:8c:c8:d4:c6: 8d:5b:8c:69:6b:c8:36:8c:6c:08:6f:ed:22:b3:61:11:28:e9: dc:1c:64:9c:a5:a4:46:bb:c6:5c:84:6b:7a:b0:1a:a9:25:62: 9f:30:e9:a6:3e:e3:98:96:93:70:25:13:ba:a0:0f:17:35:1c: 09:45:b7:4d:fa:d1:ee:8c:9a:4c:44:ec:24:dd:01:26:95:ab: f0:ed:d1:54:37:c9:94:2e:88:ad:f3:6e:be:c0:7c:ce:56:0a: 80:4c:60:82:a2:7a:e9:d5:62:ca:8e:a2:2d:c9:eb:70:4b:60: 5d:34:a1:1e:be:9c:d9:96:cd:02:31:3b:ae:86:10:f4:56:54: c0:fe:44:2b:92:ea:8a:28:af:46:89:0f:3c:fc:24:fc:76:8d: d7:33:48:77:26:01:95:c9:91:f3:fb:db:e6:db:f0:8e:29:c1: 9d:47:0a:0b:e4:cb:e8:4d:d8:55:b2:ff:0d:2f:51:96:2e:81: e5:5e:04:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5zUXP9RbVGCWwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmE4OTlmYTItMTJhNC00ZmVlLTg3ZDctYzhkYmJlMzI5MzUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTgmNYKgVjiZgdzffUGYTW/bW+Kg0+pb84s1 lr6Cu/2ax7F55MyjSURbQIskmBlYB0qJdockLznkamNMvhSSz26eD85g8LEeM0z3 +iRNnJPXqN1iBFXSo3yeJDumkzNZS0eaUajMX8Ono+cJT/BdmNJ2geJsg91hY+ij sfgNfxu9RdlhqRkQhaHsnsZU0+cmtnu0QBxww4e8z5oHYQgIJl8Uvz+Zc58eWuR/ iqS2nwfN4uIrOKHOELfmwwmQwER5AgyZmU2uY3xiWrdzL6ah6khbmQcnUwZGp3Zu GjsO4YzZSDU+wapwWGGcRdS5RuvYxQJ8s7bytLLIHl+0PMUiSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMJK32RBjPZEuJHX3CnwiV/qMupYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjE5ZTM1NGMtODFkMC0z YTY1LThmNTgtYjE1M2UzZWRmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFCIsqHN8Zpf7A/kVQSN9N9DPSIaJ29DcNgxRh1ynb0aR7dyP3jK4Kww 9Q3X5jtZfyUxl/rhsmNATN5aZAsnnDu68BuijMjUxo1bjGlryDaMbAhv7SKzYREo 6dwcZJylpEa7xlyEa3qwGqklYp8w6aY+45iWk3AlE7qgDxc1HAlFt0360e6MmkxE 7CTdASaVq/Dt0VQ3yZQuiK3zbr7AfM5WCoBMYIKieunVYsqOoi3J63BLYF00oR6+ nNmWzQIxO66GEPRWVMD+RCuS6ooor0aJDzz8JPx2jdczSHcmAZXJkfP72+bb8I4p wZ1HCgvky+hN2FWy/w0vUZYugeVeBOM= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:40 2025 by rpki-client