$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa File: 82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa (raw, json) Hash identifier: B16aOV/D/h5uuORZxsrSaAzOdURLS/FYQJL+jNWgxis= Subject key identifier: 53:B3:AF:C4:CD:37:5C:77:BD:F5:4A:EE:85:98:1B:1A:75:02:A8:24 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B9993A75BC4C181EBDD00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.154.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:99:93:a7:5b:c4:c1:81:eb:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=40a7a96b-ea46-46c6-878e-a46cc6087f19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:55:23:4e:a6:b8:f7:11:7b:fc:74:0c:7a:dd: ae:af:58:f0:41:27:2a:55:51:3e:fb:6a:3c:60:fb: 10:1b:ae:7f:29:2b:80:cb:8c:21:68:51:b7:0c:b0: be:5b:a1:55:51:16:0a:e4:7a:2c:2a:b0:37:80:8d: 8c:2d:4a:c6:81:eb:08:47:d2:61:4a:03:48:61:84: 2a:80:23:58:c2:cb:18:a0:7e:0e:92:89:08:d1:16: 56:3e:18:1b:b1:b0:da:74:37:bb:7e:2b:ad:ab:e3: 9b:d5:36:64:80:00:76:19:96:d1:e5:0f:83:75:c1: 60:c3:b1:a4:e7:7d:06:f7:03:9c:a6:8a:14:48:3e: d7:ef:0d:f8:4d:c5:d8:89:a9:36:33:64:59:1a:54: 59:25:a5:f1:7b:cb:f0:d1:56:f5:5f:ab:1d:2f:99: 88:9d:bc:c7:a5:a3:5b:f8:44:f0:54:31:9a:25:24: 22:a9:dd:e2:9b:e2:de:61:e6:09:89:c4:f8:45:98: d3:c8:cc:1c:3d:dd:73:88:11:25:ea:e3:e1:cb:01: 5e:46:ef:88:42:92:6d:d7:1b:8a:1b:8a:b0:61:3d: 1d:3e:24:1d:fe:db:4a:f9:87:44:be:7a:ab:02:12: 0a:1c:c2:17:11:d7:b1:32:37:91:c0:df:5d:e7:a7: 0a:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:B3:AF:C4:CD:37:5C:77:BD:F5:4A:EE:85:98:1B:1A:75:02:A8:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/82a8acc1-ac50-3342-a8f8-0775e8e5a19b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.154.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:3b:41:fd:d4:e9:0f:a9:83:9e:18:33:66:dc:cd:40:5f:d2: 6a:56:63:d8:3a:a5:cb:d8:e5:26:88:50:ce:1c:c1:a3:0f:f4: 9d:a0:74:00:59:1d:e2:c3:46:15:81:07:06:48:02:e4:69:bd: 55:3b:61:a0:37:e8:2a:73:53:be:dd:52:f7:07:dd:ed:dc:4c: 27:25:31:f3:e6:3f:f6:f9:67:98:8f:9b:c4:bf:17:07:66:8c: f8:f8:aa:d0:21:df:79:fb:82:2a:4a:4f:73:b6:23:cd:55:a0: ca:a0:e9:9b:4b:cb:c4:39:21:57:1d:c9:50:7c:c6:7d:b8:30: 3a:b9:1a:27:de:05:4c:b1:ea:d2:cc:4f:e4:77:47:d5:44:09: 3d:66:f8:12:e6:7e:8a:e1:13:f0:53:09:3f:94:50:18:73:57: c5:e5:11:1e:83:ae:63:92:12:b5:20:27:84:64:22:ed:8f:39: ad:42:35:a3:38:ef:ef:7d:9d:8d:23:6c:fc:bd:1b:05:0a:e6: 3d:25:e2:c3:75:b7:2e:d5:6b:fb:fb:a0:61:ea:7c:ab:56:21: c3:3a:f4:c3:28:91:92:0b:4c:a7:e4:3b:f2:55:fe:c8:14:f3: 4d:62:60:a2:c9:d2:68:e0:16:cf:a4:96:8b:20:f6:85:56:c3: f0:1d:9b:32 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5mTp1vEwYHr3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NDBhN2E5NmItZWE0Ni00NmM2LTg3OGUtYTQ2Y2M2MDg3ZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFUjTqa49xF7/HQMet2ur1jwQScqVVE++2o8 YPsQG65/KSuAy4whaFG3DLC+W6FVURYK5HosKrA3gI2MLUrGgesIR9JhSgNIYYQq gCNYwssYoH4OkokI0RZWPhgbsbDadDe7fiutq+Ob1TZkgAB2GZbR5Q+DdcFgw7Gk 530G9wOcpooUSD7X7w34TcXYiak2M2RZGlRZJaXxe8vw0Vb1X6sdL5mInbzHpaNb +ETwVDGaJSQiqd3im+LeYeYJicT4RZjTyMwcPd1ziBEl6uPhywFeRu+IQpJt1xuK G4qwYT0dPiQd/ttK+YdEvnqrAhIKHMIXEdexMjeRwN9d56cKUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFOzr8TNN1x3vfVK7oWYGxp1AqgkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODJhOGFjYzEtYWM1MC0z MzQyLWE4ZjgtMDc3NWU4ZTVhMTliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADI7Qf3U6Q+pg54YM2bczUBf0mpWY9g6pcvY5SaIUM4cwaMP9J2gdABZ HeLDRhWBBwZIAuRpvVU7YaA36CpzU77dUvcH3e3cTCclMfPmP/b5Z5iPm8S/Fwdm jPj4qtAh33n7gipKT3O2I81VoMqg6ZtLy8Q5IVcdyVB8xn24MDq5GifeBUyx6tLM T+R3R9VECT1m+BLmforhE/BTCT+UUBhzV8XlER6DrmOSErUgJ4RkIu2POa1CNaM4 7+99nY0jbPy9GwUK5j0l4sN1ty7Va/v7oGHqfKtWIcM69MMokZILTKfkO/JV/sgU 801iYKLJ0mjgFs+klosg9oVWw/AdmzI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:44 2025 by rpki-client