$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa File: af9131e4-4c33-324d-822b-2890fa01e698.roa (raw, json) Hash identifier: 54Kb0Z3ADLtRwqmqJacUYjj0Bwa6fgRTCEAm6Az1p84= Subject key identifier: D3:9F:33:5F:57:47:E6:F9:A5:FD:C0:EB:3C:9B:30:E6:C8:10:C1:C2 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B948F69F8FD8C2CC3A5CE Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.138.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:94:8f:69:f8:fd:8c:2c:c3:a5:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=bdf2c799-f864-44d9-814e-cc8ffae99926 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:20:84:fc:44:38:76:9f:a1:92:3b:77:fd:71: 45:04:3d:d7:37:f2:ec:2b:08:fa:dc:ba:10:6e:01: c5:89:05:5a:7b:b4:b8:cb:5c:4b:87:ca:19:95:b4: d3:16:dc:ad:b1:43:48:ae:c6:69:ad:c4:b4:b6:d8: 84:75:55:b4:1d:ce:15:ed:9f:30:22:2f:7c:2a:9d: ad:67:cf:78:80:af:6d:23:da:51:9a:3c:6a:d7:fa: 9c:64:25:87:42:2c:7c:41:f0:fe:6f:7f:38:99:d4: 63:59:f8:34:99:60:77:db:e3:7a:fa:bd:9a:2d:50: 16:05:bb:6e:9a:ff:9e:e9:95:17:8a:69:7e:c1:c2: d3:13:2e:7c:86:73:ff:8e:28:5a:bc:12:f7:89:3f: 61:da:07:dc:1e:9b:62:fc:97:29:32:92:32:e9:0a: d1:e2:7e:13:13:2a:a5:66:9f:91:c3:61:cf:69:0a: 03:d8:ea:8a:de:36:25:f3:dd:59:95:90:e9:9a:74: 63:a4:77:f7:37:8c:30:3e:03:15:43:60:b7:88:4a: 42:80:3d:ba:3a:e2:e7:ea:bb:02:46:10:e9:d4:80: d9:74:52:aa:a0:cc:98:ad:fd:70:8e:30:e2:29:55: 50:a4:a2:2e:7f:21:9b:82:9b:01:53:29:0c:ba:98: af:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:9F:33:5F:57:47:E6:F9:A5:FD:C0:EB:3C:9B:30:E6:C8:10:C1:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/af9131e4-4c33-324d-822b-2890fa01e698.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 45:24:c7:fe:06:6b:e7:e5:ad:14:1f:70:c0:de:5e:8a:06:fc: 74:c7:6b:19:73:3b:56:20:e0:9a:52:57:54:99:d3:b5:33:5b: a1:ce:e7:f3:a1:17:f4:d0:1d:08:70:95:8c:12:db:b0:87:c6: 13:66:c5:06:2b:6b:0a:1d:57:c8:9a:4b:04:e3:40:05:87:1b: 0a:69:8f:7a:48:51:d7:41:ca:0e:df:62:d3:00:a3:58:c1:53: 71:87:43:66:a3:4f:93:29:4a:5e:7d:54:d3:9a:b6:d2:9a:67: d9:cd:a7:b4:7c:63:f2:27:0e:63:2c:46:c4:92:f5:8d:69:97: 37:92:a3:37:42:11:4e:17:88:6e:6e:1e:f8:c9:98:d0:2f:9f: a8:06:c6:f6:9c:cc:65:9b:44:32:35:16:3b:73:a0:6a:28:39: f6:70:22:3e:a8:9a:45:69:bf:c8:de:22:4d:d2:7a:b7:68:72: 81:14:d7:5b:38:eb:51:b4:62:e5:50:b1:de:03:56:85:f9:a1: 46:72:a4:d0:49:9d:5e:0a:24:16:8d:48:ae:30:55:d6:b7:e4: 4e:9f:51:ca:d5:ae:62:c6:96:08:1c:a2:16:46:9d:c9:81:08: 59:b2:b2:b6:23:36:7a:e6:ef:ed:12:5a:1f:7f:54:e9:78:dc: ca:0c:ab:56 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5SPafj9jCzDpc4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YmRmMmM3OTktZjg2NC00NGQ5LTgxNGUtY2M4ZmZhZTk5OTI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjiCE/EQ4dp+hkjt3/XFFBD3XN/LsKwj63LoQ bgHFiQVae7S4y1xLh8oZlbTTFtytsUNIrsZprcS0ttiEdVW0Hc4V7Z8wIi98Kp2t Z894gK9tI9pRmjxq1/qcZCWHQix8QfD+b384mdRjWfg0mWB32+N6+r2aLVAWBbtu mv+e6ZUXiml+wcLTEy58hnP/jihavBL3iT9h2gfcHpti/JcpMpIy6QrR4n4TEyql Zp+Rw2HPaQoD2OqK3jYl891ZlZDpmnRjpHf3N4wwPgMVQ2C3iEpCgD26OuLn6rsC RhDp1IDZdFKqoMyYrf1wjjDiKVVQpKIufyGbgpsBUykMupivUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNOfM19XR+b5pf3A6zybMObIEMHCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWY5MTMxZTQtNGMzMy0z MjRkLTgyMmItMjg5MGZhMDFlNjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEUkx/4Ga+flrRQfcMDeXooG/HTHaxlzO1Yg4JpSV1SZ07UzW6HO5/Oh F/TQHQhwlYwS27CHxhNmxQYrawodV8iaSwTjQAWHGwppj3pIUddByg7fYtMAo1jB U3GHQ2ajT5MpSl59VNOattKaZ9nNp7R8Y/InDmMsRsSS9Y1plzeSozdCEU4XiG5u HvjJmNAvn6gGxvaczGWbRDI1FjtzoGooOfZwIj6omkVpv8jeIk3SerdocoEU11s4 61G0YuVQsd4DVoX5oUZypNBJnV4KJBaNSK4wVda35E6fUcrVrmLGlggcohZGncmB CFmysrYjNnrm7+0SWh9/VOl43MoMq1Y= -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:31 2025 by rpki-client