$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa File: b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa (raw, json) Hash identifier: q6v7psmtPhzZRF9MTqgLGkv2g5bnJOw54jc2DkZ7f5Q= Subject key identifier: 7A:C9:FE:09:F5:CC:CF:4C:F3:7F:BA:84:14:44:34:6D:D4:B8:C7:9B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B64351C7CF7A8E76A6B00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:64:35:1c:7c:f7:a8:e7:6a:6b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=a2fe1567-30a4-4553-bc13-fb8567a4a964 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a8:f7:08:c9:29:28:aa:60:4d:25:a7:d4:9b: 76:9d:0e:b4:9d:8d:2c:22:a0:e9:a1:7a:5d:42:5a: e4:08:1a:32:92:c6:17:3f:a2:54:81:2a:ab:84:e2: fa:ca:e4:df:6f:d9:43:36:4a:56:aa:d3:7f:0c:0e: 91:a1:e7:28:b5:dd:f0:0b:8e:72:3c:6e:56:b2:34: 01:03:69:d8:f3:ed:78:c7:7c:a1:30:30:1b:ec:60: 45:37:2c:61:81:9c:66:1a:99:ba:f6:e0:27:3d:1c: b2:5f:92:a2:14:9b:e4:c5:9f:66:b9:ce:db:b9:1d: 9c:41:45:c8:6d:55:b9:3a:2d:ec:f3:f4:61:db:32: 17:66:be:ca:a2:cd:c7:d8:1e:de:cc:bc:1f:6e:c7: b1:be:fa:61:e6:3e:04:fc:65:42:a7:29:1b:76:a1: 68:1c:2e:b7:12:f4:aa:48:38:e8:93:54:1a:2b:ec: bd:f3:1c:29:bf:d1:f3:56:bc:28:55:70:5b:e8:bd: 57:34:1d:e4:28:7b:89:52:57:e7:24:8a:8e:35:47: c4:cb:97:73:27:1e:e2:ce:ba:d2:f9:53:b1:e5:cd: eb:6d:33:9f:29:ae:8c:ee:10:c2:86:dc:ce:5f:87: 16:bb:a7:cd:fa:85:8a:47:35:88:3f:54:87:2e:33: bf:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:C9:FE:09:F5:CC:CF:4C:F3:7F:BA:84:14:44:34:6D:D4:B8:C7:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:c1:e7:e9:7c:19:6c:0b:de:37:34:7a:52:87:4f:40:4d:a4: 1c:11:7f:f3:ed:11:3d:0b:36:c3:4f:6e:7f:49:ee:44:a3:c9: f7:73:f2:e4:dc:8a:7d:fc:97:10:dd:ee:b6:6c:c3:e2:25:c7: e4:9b:ec:93:5f:29:8d:66:c0:8a:40:1c:f5:fc:2e:9e:8a:9e: fb:8b:45:55:d5:c4:e7:37:40:b8:d5:8b:e5:ea:a4:ab:c5:e7: 41:90:9d:76:15:9f:b5:d8:67:c9:65:57:f1:93:b1:c3:c2:03: f7:f9:fc:af:d0:84:6d:3e:a0:bc:43:ee:ab:be:df:05:10:eb: 20:66:bf:3b:50:d9:ec:c3:88:de:86:6f:59:38:fa:83:b7:78: 45:70:2b:f2:3d:aa:0c:96:1e:11:34:58:c5:1d:5a:97:43:04: d3:25:f9:f0:0f:f6:23:fd:22:7e:c0:a7:de:01:98:79:94:a2: 6f:38:59:46:c6:e8:b8:68:a1:1d:dd:da:2c:ea:75:b8:95:64: 91:c6:25:bd:10:4f:96:ef:85:df:41:53:f0:30:c2:d5:79:dc: 5d:a2:9d:d1:fd:1f:d7:b4:dd:30:ec:72:59:56:bf:6a:c4:c0: 58:2e:a9:cd:6a:fb:13:5e:c1:74:bd:42:d3:03:95:dc:b0:7b: fc:54:12:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2Q1HHz3qOdqawAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk YTJmZTE1NjctMzBhNC00NTUzLWJjMTMtZmI4NTY3YTRhOTY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuqj3CMkpKKpgTSWn1Jt2nQ60nY0sIqDpoXpd QlrkCBoyksYXP6JUgSqrhOL6yuTfb9lDNkpWqtN/DA6Roecotd3wC45yPG5WsjQB A2nY8+14x3yhMDAb7GBFNyxhgZxmGpm69uAnPRyyX5KiFJvkxZ9muc7buR2cQUXI bVW5Oi3s8/Rh2zIXZr7Kos3H2B7ezLwfbsexvvph5j4E/GVCpykbdqFoHC63EvSq SDjok1QaK+y98xwpv9HzVrwoVXBb6L1XNB3kKHuJUlfnJIqONUfEy5dzJx7izrrS +VOx5c3rbTOfKa6M7hDChtzOX4cWu6fN+oWKRzWIP1SHLjO/VQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHrJ/gn1zM9M83+6hBRENG3UuMebMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjY0NGMwZGItY2ZlMi0z MThhLTljODktMmE3YmVmNWU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABjB5+l8GWwL3jc0elKHT0BNpBwRf/PtET0LNsNPbn9J7kSjyfdz8uTc in38lxDd7rZsw+Ilx+Sb7JNfKY1mwIpAHPX8Lp6KnvuLRVXVxOc3QLjVi+XqpKvF 50GQnXYVn7XYZ8llV/GTscPCA/f5/K/QhG0+oLxD7qu+3wUQ6yBmvztQ2ezDiN6G b1k4+oO3eEVwK/I9qgyWHhE0WMUdWpdDBNMl+fAP9iP9In7Ap94BmHmUom84WUbG 6LhooR3d2izqdbiVZJHGJb0QT5bvhd9BU/AwwtV53F2indH9H9e03TDscllWv2rE wFguqc1q+xNewXS9QtMDldywe/xUEvA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:45 2025 by rpki-client