$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa File: 8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa (raw, json) Hash identifier: +8xxk2XL0tQXWSvfeaR4e1KWOa5UHacI+4FeUTfmaRw= Subject key identifier: 22:32:2A:39:ED:E5:D4:E5:FE:C8:45:A7:FA:AD:2C:FD:43:EB:4B:86 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B986989316D54BF079100 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.158.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:98:69:89:31:6d:54:bf:07:91:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=c3a243f2-123d-42ca-9c37-6193d1f3ae23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:ef:37:56:38:cd:8a:b2:14:75:ab:e4:60:9d: 72:64:ea:ea:78:3b:de:3e:09:43:c4:5a:d1:d6:48: 3d:6c:b3:b7:00:1b:a7:ad:b6:22:22:93:46:5d:f9: 74:0c:dd:80:8e:f3:30:85:d8:d9:76:33:af:1d:21: a7:1b:17:7e:78:19:8c:7c:b5:ec:0e:44:61:7b:24: fa:9f:5e:e8:f3:d0:57:d8:55:8c:fb:cd:a7:5e:96: 0f:95:50:cc:f7:85:3a:be:67:d9:a0:d5:99:47:47: 6c:7f:37:29:45:67:9e:ca:4e:c2:fe:c6:3f:99:da: f3:76:db:59:e1:fc:16:dc:1a:73:e0:52:ac:71:1f: 09:e5:93:db:53:f7:01:11:92:aa:8b:b4:9b:e4:91: fd:23:01:2d:f9:ab:7b:2c:66:5e:91:31:de:2f:fe: 7c:d8:0e:e9:3c:5f:25:42:ae:30:00:ff:62:70:34: c8:d6:ca:b6:1e:d1:ba:9b:57:27:93:99:9e:8f:a3: 73:2e:ac:75:76:b0:2b:57:5b:97:42:95:f6:27:98: 4f:33:ec:8d:ef:ca:f1:29:3d:4e:fa:ed:6b:3b:46: f6:04:b1:3b:80:11:4d:dc:74:d1:12:ff:1f:79:4d: 00:16:26:9c:24:2a:09:ce:7e:50:0f:1b:7a:22:49: 15:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:32:2A:39:ED:E5:D4:E5:FE:C8:45:A7:FA:AD:2C:FD:43:EB:4B:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8620adf1-40f6-3cb9-86f3-46fbb53bf8c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.158.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:95:8a:e4:01:48:fd:75:2a:c1:c5:ef:04:c4:e0:be:68:3b: 18:d9:aa:20:33:71:d7:be:ab:ec:a7:32:05:42:cd:ca:68:6b: 45:6d:9d:45:0a:4a:71:21:57:e9:da:8c:1c:38:b2:6d:59:4b: c0:5a:c6:bb:fe:30:88:9b:d2:f5:28:58:49:22:c9:a5:b7:08: 53:c0:24:87:4b:52:a0:25:8a:9e:52:67:59:2e:2a:d1:90:cd: bd:a8:6c:22:cf:2e:ad:9d:ae:af:24:79:ff:b1:55:c3:f0:ce: 39:1a:82:2c:4c:0e:59:2b:03:98:8f:6f:a3:68:b7:9d:8e:40: 4c:a5:10:d8:37:07:06:d6:d2:e5:d3:ba:3d:9e:af:13:1b:e9: f1:e6:0a:f1:a9:63:bc:d4:2d:c2:0d:87:6b:0a:d2:15:21:82: 40:51:bf:55:d6:94:bc:ab:57:89:76:99:fd:e0:7d:77:8b:17: 2e:f4:46:a2:b4:f8:9c:3f:4b:ac:f0:f2:69:a2:9f:be:f7:84: bf:ed:75:d4:5d:12:29:cd:87:66:00:af:b5:64:ba:a0:a7:5d: 17:9a:5f:5c:e7:f5:cc:2e:5f:62:6c:7e:ae:5e:ff:3d:3b:0d: d3:5b:9e:e1:60:1d:7a:b2:27:6a:57:b9:4a:7a:36:a1:f0:d1: 29:37:4b:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5hpiTFtVL8HkQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YzNhMjQzZjItMTIzZC00MmNhLTljMzctNjE5M2QxZjNhZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4O83VjjNirIUdavkYJ1yZOrqeDvePglDxFrR 1kg9bLO3ABunrbYiIpNGXfl0DN2AjvMwhdjZdjOvHSGnGxd+eBmMfLXsDkRheyT6 n17o89BX2FWM+82nXpYPlVDM94U6vmfZoNWZR0dsfzcpRWeeyk7C/sY/mdrzdttZ 4fwW3Bpz4FKscR8J5ZPbU/cBEZKqi7Sb5JH9IwEt+at7LGZekTHeL/582A7pPF8l Qq4wAP9icDTI1sq2HtG6m1cnk5mej6NzLqx1drArV1uXQpX2J5hPM+yN78rxKT1O +u1rO0b2BLE7gBFN3HTREv8feU0AFiacJCoJzn5QDxt6IkkVVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIyKjnt5dTl/shFp/qtLP1D60uGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODYyMGFkZjEtNDBmNi0z Y2I5LTg2ZjMtNDZmYmI1M2JmOGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABqViuQBSP11KsHF7wTE4L5oOxjZqiAzcde+q+ynMgVCzcpoa0VtnUUK SnEhV+najBw4sm1ZS8Baxrv+MIib0vUoWEkiyaW3CFPAJIdLUqAlip5SZ1kuKtGQ zb2obCLPLq2drq8kef+xVcPwzjkagixMDlkrA5iPb6Not52OQEylENg3BwbW0uXT uj2erxMb6fHmCvGpY7zULcINh2sK0hUhgkBRv1XWlLyrV4l2mf3gfXeLFy70RqK0 +Jw/S6zw8mmin773hL/tddRdEinNh2YAr7VkuqCnXReaX1zn9cwuX2Jsfq5e/z07 DdNbnuFgHXqyJ2pXuUp6NqHw0Sk3S7M= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:22 2025 by rpki-client