$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa File: 67809917-6020-3043-ad7f-2c9b27b1d820.roa (raw, json) Hash identifier: 1+Csikctr2KveKdo28tUXG0RKrzC+jl84jyFms60UY8= Subject key identifier: 98:8A:C5:47:4B:8D:02:A9:82:58:86:A0:04:40:38:A6:F7:46:73:24 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B99591C1E6DD7A1408290 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.142.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:99:59:1c:1e:6d:d7:a1:40:82:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=96c81ec0-951f-43e2-bf8f-82d6e49082fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:e3:f7:39:6a:4c:6f:c9:49:da:1c:5b:19:8b: 19:d8:03:fd:a9:d6:eb:c4:de:81:be:8f:d0:80:5e: 0e:7a:ac:60:b5:63:b1:ef:8d:d1:da:c1:8f:2d:5e: 4c:63:cc:22:98:69:53:9b:eb:d8:21:09:7e:dd:d3: d9:ee:63:7e:d6:8f:50:07:0f:0f:aa:f5:74:95:c2: c4:8c:6b:cf:8d:fd:38:2c:b0:8d:f4:1d:8f:d6:7a: 8e:c6:52:ef:ed:1a:98:76:20:ad:b3:2b:6b:35:47: 7c:01:68:49:7a:c6:65:6a:c9:f5:4b:c5:2c:ef:5c: b9:03:45:cc:10:b4:ad:75:b4:c1:1d:3f:de:68:2f: 54:7c:f9:07:97:96:c0:d1:19:92:72:2c:a3:e5:dd: 57:e4:88:ea:5c:a4:ba:e2:fe:1b:e4:37:86:26:77: cf:3c:0b:ee:61:cd:fb:b1:93:89:ad:aa:92:02:46: 82:20:00:a2:a6:89:e7:74:7d:9c:90:7b:a9:c1:0a: 40:24:51:57:11:f6:60:be:05:4b:71:6c:5d:52:2d: db:0b:2c:65:7c:4b:be:5e:6c:e5:60:e2:a5:c6:2e: bb:1f:93:1f:ca:47:f3:cd:dd:d9:27:18:7e:26:5d: cd:8b:5e:29:a5:87:ae:30:98:0c:1b:e6:85:5c:41: 75:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:8A:C5:47:4B:8D:02:A9:82:58:86:A0:04:40:38:A6:F7:46:73:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/67809917-6020-3043-ad7f-2c9b27b1d820.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.142.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:84:71:2a:62:ca:9c:c3:b6:44:b7:86:07:af:e1:87:18:a7: f1:a1:1f:8c:e8:40:77:25:aa:81:8c:14:9f:4d:86:da:c3:15: 4d:e5:f6:c9:0a:23:b4:7b:42:02:f8:37:c5:e4:99:aa:11:f3: b7:63:52:1b:a4:67:da:d5:1c:0f:27:3e:ef:05:75:d4:80:6b: 41:19:6b:e5:60:bf:f1:d5:32:f4:6b:f2:d0:80:e6:ac:ed:bc: 1e:60:52:cd:a7:0a:df:18:fb:e5:20:bf:de:c4:33:f5:df:c8: 5c:f5:17:d9:64:9b:74:dd:2d:9a:24:27:7d:96:42:41:3d:cb: c5:82:6c:f8:75:91:bc:da:62:d9:e7:6c:56:cf:40:b6:fd:a9: ca:c3:f6:61:a5:ba:b8:04:90:62:14:57:ba:71:8b:23:3c:92: a9:c1:ca:2c:b7:5b:6d:d7:d8:fa:c2:3d:71:1c:99:23:0b:b3: b4:40:b8:02:42:a3:58:1e:bc:d5:75:9f:3e:9d:db:fc:ab:20: 5c:85:b7:32:69:61:c0:04:94:a8:ae:38:6c:83:fb:53:a1:ef: 31:93:d9:df:f4:ca:96:e7:0b:9d:36:7c:3c:28:1f:47:ff:1d: 17:0b:f0:1e:ce:4f:39:3d:e4:3a:b2:66:05:c9:a8:e3:77:55: 5d:93:d1:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5lZHB5t16FAgpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OTZjODFlYzAtOTUxZi00M2UyLWJmOGYtODJkNmU0OTA4MmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeP3OWpMb8lJ2hxbGYsZ2AP9qdbrxN6Bvo/Q gF4OeqxgtWOx743R2sGPLV5MY8wimGlTm+vYIQl+3dPZ7mN+1o9QBw8PqvV0lcLE jGvPjf04LLCN9B2P1nqOxlLv7RqYdiCtsytrNUd8AWhJesZlasn1S8Us71y5A0XM ELStdbTBHT/eaC9UfPkHl5bA0RmSciyj5d1X5IjqXKS64v4b5DeGJnfPPAvuYc37 sZOJraqSAkaCIACiponndH2ckHupwQpAJFFXEfZgvgVLcWxdUi3bCyxlfEu+Xmzl YOKlxi67H5Mfykfzzd3ZJxh+Jl3Ni14ppYeuMJgMG+aFXEF1uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJiKxUdLjQKpgliGoARAOKb3RnMkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjc4MDk5MTctNjAyMC0z MDQzLWFkN2YtMmM5YjI3YjFkODIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACSEcSpiypzDtkS3hgev4YcYp/GhH4zoQHclqoGMFJ9NhtrDFU3l9skK I7R7QgL4N8XkmaoR87djUhukZ9rVHA8nPu8FddSAa0EZa+Vgv/HVMvRr8tCA5qzt vB5gUs2nCt8Y++Ugv97EM/XfyFz1F9lkm3TdLZokJ32WQkE9y8WCbPh1kbzaYtnn bFbPQLb9qcrD9mGlurgEkGIUV7pxiyM8kqnByiy3W23X2PrCPXEcmSMLs7RAuAJC o1gevNV1nz6d2/yrIFyFtzJpYcAElKiuOGyD+1Oh7zGT2d/0ypbnC502fDwoH0f/ HRcL8B7OTzk95DqyZgXJqON3VV2T0W0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:00 2025 by rpki-client