$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa File: bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa (raw, json) Hash identifier: ssCFycQDInhNqhm0AkSWfP8ETGSmUPCKL0lF4tacATQ= Subject key identifier: D7:21:B2:3E:A0:B6:3B:46:E6:AE:9C:29:F0:82:10:A1:BD:D6:13:CB Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B74952B74D3CC718FC600 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:74:95:2b:74:d3:cc:71:8f:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=3061c34a-7c5a-4b7e-8e74-7baa161702df Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:27:e9:ea:20:55:9b:c0:1c:ff:71:41:48:9d: 39:5d:de:f7:6f:08:c7:41:84:e0:78:55:c8:44:ac: d6:cf:c6:95:1f:0f:27:b1:be:5d:86:94:49:ce:d0: 3b:f4:7b:d1:95:04:37:1a:ea:c0:b8:a2:23:38:00: e2:98:0b:80:57:b4:5e:fe:cd:07:9c:af:f8:a4:2f: b9:f4:54:30:91:5f:8c:8a:ec:ba:66:68:73:c0:33: 84:6c:c6:a9:b6:df:a3:68:84:8d:9e:5b:dc:57:8d: 35:18:01:38:90:f1:b8:7f:32:01:ad:51:b0:e2:d5: 0f:d0:57:ae:fc:1d:d6:4c:0b:89:7f:1e:e5:70:02: 10:5d:d0:45:1a:da:22:fe:d6:93:3a:4e:10:e2:42: 21:5b:22:b2:03:a4:8c:2b:fe:36:ca:4e:35:0f:e7: 92:a3:c7:20:c6:71:8a:d6:34:64:e1:76:f6:6f:84: 56:92:37:b0:f9:92:31:b6:aa:f3:fc:35:47:b3:a4: b8:0a:21:9c:2d:3c:f2:d8:30:79:15:18:ba:60:7f: 95:20:2d:9a:42:ef:38:c9:dc:80:75:be:17:c6:7a: 3d:ad:00:82:d8:c1:db:63:e2:21:ca:bd:45:b9:47: 10:b3:05:94:3f:a3:92:2e:f8:5a:48:77:c2:ed:af: 0d:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:21:B2:3E:A0:B6:3B:46:E6:AE:9C:29:F0:82:10:A1:BD:D6:13:CB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:77:10:09:25:13:89:c8:62:9b:12:c2:a4:10:0a:8d:04:56: b9:16:96:be:23:b0:14:5c:70:e4:00:dd:54:d3:bd:0b:62:bd: a5:95:19:75:7e:0a:53:b2:ec:81:2d:03:e5:d6:87:1d:3c:5d: 42:20:0c:47:18:49:3d:a9:38:ac:5e:91:33:a4:99:3e:5f:4e: 56:46:aa:31:e6:9d:65:34:67:ca:da:9f:77:35:83:27:67:0f: 41:d7:0c:0c:5b:40:3b:6e:e5:59:7d:43:ef:4b:23:56:e1:7e: 70:61:e8:68:b6:9d:18:bd:93:69:8c:c1:e0:31:c4:f2:f0:ba: 83:24:df:cb:9b:c7:a1:db:b2:a2:23:92:ff:34:70:b3:3d:19: 8a:06:3e:ad:90:4b:e5:c3:43:46:86:be:1a:9d:cc:b1:df:41: 6d:44:1e:f2:cd:3d:96:80:a1:d1:61:e1:b5:be:b6:af:48:47: 5a:63:6d:79:12:f3:3c:64:6b:80:6d:a7:f1:b2:7b:16:ff:55: 20:36:40:82:e8:e8:93:03:69:08:a0:99:70:dc:8a:5f:92:2f: 3f:71:55:69:87:8a:4f:fb:10:b0:ca:f2:5f:e4:5f:ca:10:6a: aa:6f:97:fc:59:a7:f3:13:58:20:0e:d4:88:e8:28:86:71:ec: 9f:01:a1:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3SVK3TTzHGPxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MzA2MWMzNGEtN2M1YS00YjdlLThlNzQtN2JhYTE2MTcwMmRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgSfp6iBVm8Ac/3FBSJ05Xd73bwjHQYTgeFXI RKzWz8aVHw8nsb5dhpRJztA79HvRlQQ3GurAuKIjOADimAuAV7Re/s0HnK/4pC+5 9FQwkV+Miuy6ZmhzwDOEbMaptt+jaISNnlvcV401GAE4kPG4fzIBrVGw4tUP0Feu /B3WTAuJfx7lcAIQXdBFGtoi/taTOk4Q4kIhWyKyA6SMK/42yk41D+eSo8cgxnGK 1jRk4Xb2b4RWkjew+ZIxtqrz/DVHs6S4CiGcLTzy2DB5FRi6YH+VIC2aQu84ydyA db4Xxno9rQCC2MHbY+Ihyr1FuUcQswWUP6OSLvhaSHfC7a8NKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNchsj6gtjtG5q6cKfCCEKG91hPLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmQ3ZWEzM2ItMGU5Ny0z M2VhLWI1YjYtNGQwMmE3NTE2ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEd3EAklE4nIYpsSwqQQCo0EVrkWlr4jsBRccOQA3VTTvQtivaWVGXV+ ClOy7IEtA+XWhx08XUIgDEcYST2pOKxekTOkmT5fTlZGqjHmnWU0Z8ran3c1gydn D0HXDAxbQDtu5Vl9Q+9LI1bhfnBh6Gi2nRi9k2mMweAxxPLwuoMk38ubx6HbsqIj kv80cLM9GYoGPq2QS+XDQ0aGvhqdzLHfQW1EHvLNPZaAodFh4bW+tq9IR1pjbXkS 8zxka4Btp/Gyexb/VSA2QILo6JMDaQigmXDcil+SLz9xVWmHik/7ELDK8l/kX8oQ aqpvl/xZp/MTWCAO1IjoKIZx7J8Boe0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:38 2025 by rpki-client