$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa File: 87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa (raw, json) Hash identifier: pCsyIsLu7RZscygR0qKTN93aJ9DVHUrnUsROjp7z668= Subject key identifier: 75:28:EA:F5:E1:7B:BF:16:6B:43:99:B8:D1:D4:19:09:F5:F2:43:43 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B781EFF064224B29652FA Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:78:1e:ff:06:42:24:b2:96:52:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=8c9e0a25-190c-4edc-946d-f6f5c694a4e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:82:39:c1:7f:0a:07:ce:4e:d4:fe:d0:fd:f8: d9:a6:60:46:1a:0e:91:34:63:c1:ca:20:05:20:6b: fe:74:7e:54:b6:ff:af:f3:81:11:13:bf:2e:01:e9: 3d:68:2c:11:2b:ce:32:52:2b:6e:8a:c3:38:ec:c6: 9b:ae:9d:a1:c2:74:79:35:bb:f0:6c:77:c0:51:56: b9:70:1c:dc:1f:f5:93:c1:28:df:a6:ff:45:d8:10: e1:99:6c:4e:e8:b8:ce:2f:a4:3a:70:31:6b:e7:75: 95:3c:be:7b:2f:70:f1:96:a2:38:14:47:45:64:6b: 28:ec:d8:d8:30:2d:5d:8f:d4:f9:44:05:7a:1e:71: e7:39:9d:7c:c9:e6:35:86:24:27:e4:ba:25:61:c5: c8:99:8a:9d:aa:f1:75:3c:91:6c:bd:2a:30:d2:70: d1:d9:43:50:46:45:0e:85:2f:f8:75:a7:a7:71:48: 12:eb:44:9d:44:4d:22:8b:c0:40:97:77:c8:91:2b: 21:5e:3b:17:a0:99:2c:b4:26:88:bb:9f:8f:be:bb: 2e:4b:c8:1b:d0:68:ad:39:a7:bc:7c:7b:73:9b:1f: 88:89:e3:67:c9:df:ea:b4:d5:e4:95:5c:48:08:98: 21:4e:8c:74:37:a9:ad:16:51:6f:20:5e:1f:24:d9: 5c:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:28:EA:F5:E1:7B:BF:16:6B:43:99:B8:D1:D4:19:09:F5:F2:43:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:82:8f:1a:38:6c:9c:4e:9b:f0:d4:d4:18:bb:37:db:0d:c4: 61:e7:b0:39:7c:58:c2:90:65:06:a8:68:b1:e9:55:e2:e1:c1: 3b:26:19:bf:32:56:51:ef:77:78:17:3b:bc:e4:15:70:c2:42: bf:38:a9:4c:62:75:dd:6c:c2:68:cc:ba:3f:77:a8:83:d0:35: ed:bc:92:8a:4d:fa:27:d2:2f:e8:1a:a1:47:e5:00:c1:d0:65: 95:f7:7e:7d:06:83:36:9d:18:75:f4:bd:3e:8b:6f:8b:a5:a5: 65:07:e7:a2:85:57:cd:d1:5f:cd:99:28:60:61:3d:1c:ca:96: ae:49:96:7f:df:a9:9f:dc:08:1b:db:62:8d:ed:91:06:33:05: 17:8d:e7:23:68:58:2a:a2:ca:1b:80:37:03:f8:f8:37:82:90: 2f:e3:c5:a3:41:65:96:b5:5a:99:06:51:85:b6:17:e3:11:3f: ae:0d:cb:a6:46:73:42:e2:c5:8d:e1:75:da:0e:60:5d:27:d0: 46:7e:80:e0:63:79:b4:bc:ea:1d:5a:d8:12:e6:1e:46:d9:f1: 9b:a1:dd:84:17:78:86:ab:7b:36:e4:bb:3f:3c:04:55:24:cc: 01:a0:99:7f:ff:45:a0:55:38:b2:f7:6f:85:d6:f6:88:6c:61: 59:6b:37:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3ge/wZCJLKWUvowDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OGM5ZTBhMjUtMTkwYy00ZWRjLTk0NmQtZjZmNWM2OTRhNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4I5wX8KB85O1P7Q/fjZpmBGGg6RNGPByiAF IGv+dH5Utv+v84ERE78uAek9aCwRK84yUituisM47Mabrp2hwnR5NbvwbHfAUVa5 cBzcH/WTwSjfpv9F2BDhmWxO6LjOL6Q6cDFr53WVPL57L3DxlqI4FEdFZGso7NjY MC1dj9T5RAV6HnHnOZ18yeY1hiQn5LolYcXImYqdqvF1PJFsvSow0nDR2UNQRkUO hS/4daencUgS60SdRE0ii8BAl3fIkSshXjsXoJkstCaIu5+PvrsuS8gb0GitOae8 fHtzmx+IieNnyd/qtNXklVxICJghTox0N6mtFlFvIF4fJNlc9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHUo6vXhe78Wa0OZuNHUGQn18kNDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODdhMmI4NGEtMjMxNC0z YjI0LTlmNDgtNThlMGQzNWY4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOCjxo4bJxOm/DU1Bi7N9sNxGHnsDl8WMKQZQaoaLHpVeLhwTsmGb8y VlHvd3gXO7zkFXDCQr84qUxidd1swmjMuj93qIPQNe28kopN+ifSL+gaoUflAMHQ ZZX3fn0GgzadGHX0vT6Lb4ulpWUH56KFV83RX82ZKGBhPRzKlq5Jln/fqZ/cCBvb Yo3tkQYzBReN5yNoWCqiyhuANwP4+DeCkC/jxaNBZZa1WpkGUYW2F+MRP64Ny6ZG c0LixY3hddoOYF0n0EZ+gOBjebS86h1a2BLmHkbZ8Zuh3YQXeIarezbkuz88BFUk zAGgmX//RaBVOLL3b4XW9ohsYVlrNyA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:28:36 2025 by rpki-client