$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa File: d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa (raw, json) Hash identifier: qlyv1sKEtd7Iz9H6skJbO0e7/SPWcpLrZ5HltGsMX6M= Subject key identifier: 96:8B:A2:40:40:87:DC:FA:66:B3:EA:99:05:EE:2E:0C:5A:EF:6B:77 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B71336E1D75A5A0104680 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:71:33:6e:1d:75:a5:a0:10:46:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=cfa10acb-351e-4dd1-a1ac-79e772b151ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:be:0b:13:a7:c7:6e:56:df:12:2c:2a:ff:a9: 01:df:79:cd:92:1c:29:28:57:ae:4f:96:ec:c8:1f: 12:68:c1:27:7f:ca:b6:2c:0f:3e:35:fb:cc:ac:60: a0:7d:4e:38:cf:3c:35:1a:9a:f8:a9:c7:12:53:fb: 4c:f3:11:ff:e0:ef:39:6f:fe:16:6f:8e:3a:cd:3d: 93:29:90:c4:8f:b9:d6:35:73:f2:8f:75:41:da:c3: c0:99:16:55:56:4c:90:48:63:92:6f:55:a4:70:37: 71:83:11:13:98:ae:aa:85:98:75:60:57:2a:c9:92: e0:24:87:74:46:fd:0a:23:7f:80:ec:8a:bd:cd:29: 9a:01:5c:28:a0:8b:f5:85:ee:c4:05:f2:c7:96:41: 88:d6:10:c0:81:5d:81:2a:1a:12:41:a3:85:bf:54: 38:40:3a:88:38:5e:3b:23:f3:90:5e:dd:0a:f3:ad: 84:33:13:a9:37:46:10:48:cd:07:5c:48:fd:42:d9: 07:92:7d:d6:16:dd:cc:9c:ae:5f:66:1b:a7:ad:1f: b7:a3:7d:03:12:cf:09:57:aa:a2:a2:7c:72:f3:66: 21:68:87:61:1b:e1:43:24:24:2c:46:78:cb:1e:aa: 2f:49:d1:91:6d:fa:c0:ec:fd:41:d0:27:fd:bb:1d: a5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:8B:A2:40:40:87:DC:FA:66:B3:EA:99:05:EE:2E:0C:5A:EF:6B:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 89:cc:83:ff:d9:78:56:e2:4f:98:40:d1:6a:cb:ef:f4:a8:b2: 80:b9:4c:59:0a:99:e9:ac:57:20:f0:00:74:46:6a:25:f2:16: bc:de:db:b0:d1:e2:89:85:d4:88:84:43:f6:33:5f:35:87:12: 42:98:54:f8:17:a8:b6:1b:ec:44:b9:e8:46:84:06:16:af:2a: 6d:00:23:5a:f9:89:01:ba:9f:ba:71:fd:cc:bc:f9:34:87:62: 65:85:bc:e3:d4:2a:b1:08:5c:1d:b4:98:77:f1:31:23:1e:1a: 62:69:2b:12:da:51:de:ed:3c:25:f0:68:d9:f2:58:6b:e2:5b: e7:19:a9:14:4d:bc:c2:51:5e:f5:08:ea:99:d3:9a:f6:02:78: 4b:24:52:95:24:35:f0:a1:a5:4b:29:19:b2:d6:11:1c:d6:c2: 64:65:12:b1:b7:05:ae:8e:c5:e4:5c:ee:1f:25:6a:bb:c9:0c: 4f:89:34:a0:fa:52:e6:9c:e1:f1:fd:f4:e9:87:34:45:56:58: 5a:36:3b:8d:09:e2:b9:75:a4:b7:40:b2:8a:73:d3:cd:76:00: 38:5c:b0:46:74:13:c6:69:0b:a7:80:33:a7:a8:2f:6e:25:0c: 0f:7d:31:a0:6d:14:89:e3:da:b1:02:b9:a2:86:d8:bd:4d:75: 6c:d6:85:75 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e3Ezbh11paAQRoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZhMTBhY2ItMzUxZS00ZGQxLWExYWMtNzllNzcyYjE1MWJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA074LE6fHblbfEiwq/6kB33nNkhwpKFeuT5bs yB8SaMEnf8q2LA8+NfvMrGCgfU44zzw1Gpr4qccSU/tM8xH/4O85b/4Wb446zT2T KZDEj7nWNXPyj3VB2sPAmRZVVkyQSGOSb1WkcDdxgxETmK6qhZh1YFcqyZLgJId0 Rv0KI3+A7Iq9zSmaAVwooIv1he7EBfLHlkGI1hDAgV2BKhoSQaOFv1Q4QDqIOF47 I/OQXt0K862EMxOpN0YQSM0HXEj9QtkHkn3WFt3MnK5fZhunrR+3o30DEs8JV6qi onxy82YhaIdhG+FDJCQsRnjLHqovSdGRbfrA7P1B0Cf9ux2lbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJaLokBAh9z6ZrPqmQXuLgxa72t3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZDJiODc5NDktZGJlNy0z MGNhLWJlYmYtYmRkNGI1YmE4MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAInMg//ZeFbiT5hA0WrL7/SosoC5TFkKmemsVyDwAHRGaiXyFrze27DR 4omF1IiEQ/YzXzWHEkKYVPgXqLYb7ES56EaEBhavKm0AI1r5iQG6n7px/cy8+TSH YmWFvOPUKrEIXB20mHfxMSMeGmJpKxLaUd7tPCXwaNnyWGviW+cZqRRNvMJRXvUI 6pnTmvYCeEskUpUkNfChpUspGbLWERzWwmRlErG3Ba6OxeRc7h8larvJDE+JNKD6 Uuac4fH99OmHNEVWWFo2O40J4rl1pLdAsopz0812ADhcsEZ0E8ZpC6eAM6eoL24l DA99MaBtFInj2rECuaKG2L1NdWzWhXU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:29:08 2025 by rpki-client