$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa File: bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa (raw, json) Hash identifier: C4pqdhbg7NJ7bX64JT7TtW3oCRj9UOHD3HV4NxKR7tQ= Subject key identifier: 69:77:77:72:46:B5:0C:B0:9D:15:98:BF:FA:0B:F6:72:9E:4E:88:92 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B72A6C1A815DA4AB33300 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:72:a6:c1:a8:15:da:4a:b3:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=530a4677-323e-43fe-b5f4-5129aecf57da Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:2d:22:1a:04:2c:6e:17:1c:7a:52:66:ef:02: da:a4:a8:70:f3:b8:be:3a:87:92:b2:d3:6b:8e:71: 0f:8f:67:2d:97:9d:35:7c:b3:cc:83:62:9c:52:56: 07:08:f3:33:a8:97:9c:83:a5:47:1b:88:97:58:d2: 77:1c:ad:97:0d:49:fb:a8:aa:18:ba:66:e3:0d:0c: 91:33:cd:4e:d3:d2:26:83:5b:1b:70:bc:b3:8f:76: fc:48:77:90:68:21:94:07:0f:ff:42:d4:ef:ba:92: 1a:04:a1:0a:08:72:e9:09:03:71:b6:32:b5:87:ae: 70:cb:77:5c:07:ed:45:fa:82:e8:0a:0e:cb:e1:cd: 8e:4f:08:51:2e:6f:9a:ba:81:bc:c0:e7:de:a2:49: c1:b3:5f:69:aa:be:0f:d4:55:ae:e5:4e:c4:57:cb: 62:c8:94:4d:0a:b1:46:a6:07:53:eb:13:91:41:a5: c8:ee:03:c7:5d:e2:bf:84:36:3a:e6:37:21:c8:49: b1:0c:5e:f6:79:bf:95:60:6a:54:68:cc:b0:0d:5a: f4:33:dc:5b:d8:0c:ef:b3:f6:52:a2:d8:c5:fe:fd: c2:6c:02:6e:bd:ed:5d:5d:63:c9:8f:1a:f0:7b:f0: ce:a7:2f:5a:51:db:d9:aa:65:fe:07:84:a3:33:cb: d0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:77:77:72:46:B5:0C:B0:9D:15:98:BF:FA:0B:F6:72:9E:4E:88:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e6:28:ba:54:92:dc:a0:cc:92:93:5b:d2:53:62:79:29:84: 87:78:96:d3:ee:de:f6:12:5e:25:05:53:01:6d:86:ac:f1:b3: c7:12:b7:bf:61:49:54:ed:de:d9:09:5e:f3:bd:1e:fd:76:f6: cd:ee:ed:81:42:8a:ae:d1:ae:b6:ba:79:34:4f:4a:2d:98:95: 39:cb:a6:bc:de:cf:df:22:33:2a:02:0a:92:dc:bc:32:99:e1: 07:5a:f2:41:d8:8e:67:dd:44:18:f4:57:be:35:a3:1d:7f:62: 71:7b:40:c8:0d:d4:09:c3:72:75:13:76:e7:2c:55:b6:e4:25: 3b:b2:e2:89:f7:f8:d2:86:60:11:13:82:96:8a:c3:7d:3e:31: 00:1d:aa:1a:a2:90:7a:8d:1e:59:aa:fc:10:b7:8c:b4:60:21: 96:14:2d:f0:b4:ba:30:70:12:4c:ec:e4:3e:c1:f5:3f:f2:6d: ef:1f:7e:28:36:11:71:12:14:d9:9d:29:76:ee:dc:3b:f7:f2: 5f:34:b7:84:19:7e:93:1b:df:ea:87:f8:0b:71:96:05:96:75: 15:b4:5a:b5:b0:2f:30:40:dd:db:9d:38:1e:11:6a:f2:b5:15: aa:9a:d6:36:73:0a:6a:a8:29:58:bd:51:2b:5a:12:18:69:07: 76:48:d4:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3KmwagV2kqzMwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NTMwYTQ2NzctMzIzZS00M2ZlLWI1ZjQtNTEyOWFlY2Y1N2RhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyS0iGgQsbhccelJm7wLapKhw87i+OoeSstNr jnEPj2ctl501fLPMg2KcUlYHCPMzqJecg6VHG4iXWNJ3HK2XDUn7qKoYumbjDQyR M81O09Img1sbcLyzj3b8SHeQaCGUBw//QtTvupIaBKEKCHLpCQNxtjK1h65wy3dc B+1F+oLoCg7L4c2OTwhRLm+auoG8wOfeoknBs19pqr4P1FWu5U7EV8tiyJRNCrFG pgdT6xORQaXI7gPHXeK/hDY65jchyEmxDF72eb+VYGpUaMywDVr0M9xb2Azvs/ZS otjF/v3CbAJuve1dXWPJjxrwe/DOpy9aUdvZqmX+B4SjM8vQrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGl3d3JGtQywnRWYv/oL9nKeToiSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmZiYTEwNGMtYjUyNy0z NDg3LTliY2QtM2NkMTE3M2IxZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLmKLpUktygzJKTW9JTYnkphId4ltPu3vYSXiUFUwFthqzxs8cSt79h SVTt3tkJXvO9Hv129s3u7YFCiq7Rrra6eTRPSi2YlTnLprzez98iMyoCCpLcvDKZ 4Qda8kHYjmfdRBj0V741ox1/YnF7QMgN1AnDcnUTducsVbbkJTuy4on3+NKGYBET gpaKw30+MQAdqhqikHqNHlmq/BC3jLRgIZYULfC0ujBwEkzs5D7B9T/ybe8ffig2 EXESFNmdKXbu3Dv38l80t4QZfpMb3+qH+AtxlgWWdRW0WrWwLzBA3dudOB4RavK1 Faqa1jZzCmqoKVi9UStaEhhpB3ZI1BM= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:48 2025 by rpki-client