$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa File: cfa83893-71b6-3e5f-84ca-567698627079.roa (raw, json) Hash identifier: EGDJR4f4tz0xJpFBlR06etM+JfbichAsT6FAeFiLC3g= Subject key identifier: 4D:6C:8B:E2:D2:B5:02:84:48:D8:12:A3:02:07:5E:5E:52:7D:2F:F0 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B6A3117C1ACE4658C6900 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6a:31:17:c1:ac:e4:65:8c:69:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=65afdd7a-4548-47a9-a677-010f2d230e06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b9:fa:71:a4:97:8b:d5:29:ff:7b:81:52:92: 15:25:be:0c:45:d9:22:eb:9c:50:93:b3:b9:53:1c: 54:e1:b7:cd:b9:07:53:13:41:9d:be:5f:58:1f:aa: 2a:3b:92:b8:89:d6:54:64:3f:eb:9d:51:83:86:99: 4f:cd:8f:ae:6a:99:7f:28:ea:1c:37:66:8f:e7:34: 19:22:41:00:76:50:4f:ac:36:7d:04:c8:3c:4f:f0: fc:b6:12:fb:e3:87:0c:74:93:8c:4d:12:84:76:c7: cf:06:fe:40:85:a0:60:be:f5:f2:f2:7c:61:90:d7: 45:05:44:3c:1d:25:83:79:ea:56:36:5e:e3:f7:86: bb:ee:47:7e:a2:d0:42:71:ae:81:c3:d1:ca:dd:26: ed:d0:52:42:4a:c9:4b:2d:0c:f5:58:b0:b3:a5:a0: 2f:43:58:6a:ea:f3:61:af:38:bb:da:55:e4:1b:fa: 35:00:48:27:10:28:c8:75:e8:3d:ec:0e:1f:1e:7f: 0b:0e:95:e9:56:05:7a:bc:ac:eb:17:6b:c2:fa:8c: f3:f8:02:31:f0:f7:2f:fe:e7:7d:6a:3c:f1:67:86: 3e:28:13:32:a5:1a:6d:7b:8e:0a:66:bb:bb:1b:36: 3c:bb:39:06:4d:32:fa:6b:ca:57:e2:8a:fb:43:2d: 1c:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:6C:8B:E2:D2:B5:02:84:48:D8:12:A3:02:07:5E:5E:52:7D:2F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:b8:b0:de:dc:85:f4:5b:53:b6:6f:9f:f0:8a:54:34:35:6c: 62:0b:b0:fc:16:d4:dd:1d:cb:4e:77:c1:6e:31:d9:77:a3:ac: 17:64:ba:c3:1c:1f:36:8d:35:df:7a:c8:55:14:cf:f7:bf:c8: 67:71:2e:7b:4f:49:1c:b4:79:b4:a6:cc:7c:c0:c9:0e:ec:9e: 4f:a6:71:8b:9b:8d:23:1b:dd:00:03:53:59:ad:bc:1e:59:c7: 12:7a:a8:e9:d8:51:cc:f2:e2:30:c7:bc:fc:1b:31:c5:19:07: 4b:4b:0c:e7:96:ca:b3:e1:55:42:67:18:73:0a:c5:d0:1d:ea: e2:de:45:09:dc:c6:a0:8c:e1:10:0a:0c:47:48:cf:58:b2:11: 20:6c:85:29:29:2a:15:21:a5:f3:33:5d:ad:ef:be:b3:95:cb: cc:6c:bd:fa:bf:b2:56:5b:af:18:89:d6:1a:24:02:df:ea:ca: e0:73:9b:b4:7a:99:85:e1:4c:39:2c:e3:8d:a3:4b:4d:a5:87: 20:bb:32:a5:1e:1a:8c:35:57:30:2b:9e:b6:04:ef:81:40:ed: d4:17:62:18:f2:da:f4:9c:2e:f1:11:39:01:a4:cb:0c:94:fa: 0f:f7:a4:9f:4b:16:5c:3c:22:d6:89:d9:f9:6a:dc:c4:e9:78: 4f:4f:84:d2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2oxF8Gs5GWMaQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk NjVhZmRkN2EtNDU0OC00N2E5LWE2NzctMDEwZjJkMjMwZTA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLn6caSXi9Up/3uBUpIVJb4MRdki65xQk7O5 UxxU4bfNuQdTE0Gdvl9YH6oqO5K4idZUZD/rnVGDhplPzY+uapl/KOocN2aP5zQZ IkEAdlBPrDZ9BMg8T/D8thL744cMdJOMTRKEdsfPBv5AhaBgvvXy8nxhkNdFBUQ8 HSWDeepWNl7j94a77kd+otBCca6Bw9HK3Sbt0FJCSslLLQz1WLCzpaAvQ1hq6vNh rzi72lXkG/o1AEgnECjIdeg97A4fHn8LDpXpVgV6vKzrF2vC+ozz+AIx8Pcv/ud9 ajzxZ4Y+KBMypRpte44KZru7GzY8uzkGTTL6a8pX4or7Qy0ceQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1si+LStQKESNgSowIHXl5SfS/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvY2ZhODM4OTMtNzFiNi0z ZTVmLTg0Y2EtNTY3Njk4NjI3MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAG4sN7chfRbU7Zvn/CKVDQ1bGILsPwW1N0dy053wW4x2XejrBdkusMc HzaNNd96yFUUz/e/yGdxLntPSRy0ebSmzHzAyQ7snk+mcYubjSMb3QADU1mtvB5Z xxJ6qOnYUczy4jDHvPwbMcUZB0tLDOeWyrPhVUJnGHMKxdAd6uLeRQncxqCM4RAK DEdIz1iyESBshSkpKhUhpfMzXa3vvrOVy8xsvfq/slZbrxiJ1hokAt/qyuBzm7R6 mYXhTDks442jS02lhyC7MqUeGow1VzArnrYE74FA7dQXYhjy2vScLvEROQGkywyU +g/3pJ9LFlw8ItaJ2flq3MTpeE9PhNI= -----END CERTIFICATE-----Generated at Mon Jul 21 12:23:23 2025 by rpki-client