$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa File: d68f8121-c948-33b4-a37c-8f46a2e590c6.roa (raw, json) Hash identifier: lgdf+FTmp1l+nQH68Xrge1TNjJR6huV0fo9UrEnkzAU= Subject key identifier: D4:AF:89:F4:7A:CF:0B:92:7B:36:2D:CF:1A:07:37:ED:04:19:C7:2E Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B91E6065D3845DD2B2E80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.140.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:91:e6:06:5d:38:45:dd:2b:2e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=112c39e2-85bf-4a2e-a15c-36d386d2f91c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:5a:78:38:65:2b:11:1c:29:28:c1:dd:a7:5b: 4a:18:ff:79:21:de:b3:f3:c7:33:e4:60:5c:11:86: 0e:18:79:be:65:f8:0d:d5:44:61:3e:50:05:36:22: 96:3b:81:7d:93:69:c4:26:56:82:d0:f0:22:30:d5: 3a:53:e5:7e:27:14:eb:cc:77:b8:25:8e:62:04:01: 1f:ca:1b:1c:b4:8b:2a:04:96:3c:05:45:3d:0d:1d: 37:28:2d:d9:48:f3:6c:f9:1e:f7:61:f0:41:fa:15: 08:f4:eb:59:fe:6e:bc:db:9a:30:96:fa:dc:e7:1c: 1b:d1:dd:48:51:85:02:6f:a0:13:b8:cd:b7:81:32: 72:87:60:d1:6a:b9:01:dc:79:0f:73:a5:ec:4b:de: d9:03:37:29:58:de:aa:57:c2:b4:4b:86:fb:cc:11: 5c:66:3d:fd:e5:f2:aa:89:b0:e6:25:db:b1:cd:a9: 95:c4:ad:c1:90:f4:67:06:87:f3:9c:30:52:3f:0b: 71:25:3e:18:9e:51:50:30:68:48:4c:87:ea:ee:49: 65:c8:1c:20:dc:e9:34:43:6f:f0:46:ae:c3:d8:9a: 99:a1:9b:90:5f:8e:96:3d:30:a8:0d:30:d0:79:74: 47:b8:56:d9:26:86:c7:42:fb:ff:2d:92:11:f2:8f: f9:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:AF:89:F4:7A:CF:0B:92:7B:36:2D:CF:1A:07:37:ED:04:19:C7:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d68f8121-c948-33b4-a37c-8f46a2e590c6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.140.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:24:22:a2:8d:6c:3e:c9:75:fa:d8:b5:ef:c9:77:c7:1e:39: c7:7b:f4:a7:89:ef:f5:50:53:8f:12:d8:dd:f1:90:df:62:b9: f4:c1:4e:9b:fe:36:d4:b3:e2:74:37:fc:8b:31:93:11:96:af: e6:13:b0:27:02:73:78:cd:c4:24:68:ef:10:18:25:d8:50:fb: 6e:2a:cb:ec:55:d9:68:29:90:b5:09:fd:15:cb:97:d9:a8:c8: 19:59:15:f3:18:9a:f4:7b:cb:68:c6:46:96:7a:29:58:9c:fb: 5f:55:38:2b:c7:4a:99:ad:3e:aa:6d:34:50:d2:42:8c:23:6c: 45:f8:15:b8:d2:74:a6:ab:b8:0c:71:c4:50:d5:e0:23:b1:01: 15:39:68:f5:8a:23:3a:34:ec:7a:b2:29:78:13:44:04:da:80: f7:2d:df:0b:72:fc:df:3c:3b:28:89:fb:49:8f:0d:b9:08:e4: e5:6d:64:ba:22:60:07:e5:cb:7d:ca:1b:75:7a:45:15:b6:37: fa:d5:55:f8:8b:f8:d9:67:15:1d:27:f3:44:95:04:4b:6a:57: 0a:e9:35:9d:50:d6:0b:ea:ba:9e:15:3a:0b:36:32:cb:25:d7: da:66:fe:1c:3c:9f:a8:96:36:84:dc:c7:4d:78:b1:50:c6:b9: df:d2:80:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5HmBl04Rd0rLoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MTEyYzM5ZTItODViZi00YTJlLWExNWMtMzZkMzg2ZDJmOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1p4OGUrERwpKMHdp1tKGP95Id6z88cz5GBc EYYOGHm+ZfgN1URhPlAFNiKWO4F9k2nEJlaC0PAiMNU6U+V+JxTrzHe4JY5iBAEf yhsctIsqBJY8BUU9DR03KC3ZSPNs+R73YfBB+hUI9OtZ/m6825owlvrc5xwb0d1I UYUCb6ATuM23gTJyh2DRarkB3HkPc6XsS97ZAzcpWN6qV8K0S4b7zBFcZj395fKq ibDmJduxzamVxK3BkPRnBofznDBSPwtxJT4YnlFQMGhITIfq7kllyBwg3Ok0Q2/w Rq7D2JqZoZuQX46WPTCoDTDQeXRHuFbZJobHQvv/LZIR8o/51wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNSvifR6zwuSezYtzxoHN+0EGccuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZDY4ZjgxMjEtYzk0OC0z M2I0LWEzN2MtOGY0NmEyZTU5MGM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACUkIqKNbD7JdfrYte/Jd8ceOcd79KeJ7/VQU48S2N3xkN9iufTBTpv+ NtSz4nQ3/IsxkxGWr+YTsCcCc3jNxCRo7xAYJdhQ+24qy+xV2WgpkLUJ/RXLl9mo yBlZFfMYmvR7y2jGRpZ6KVic+19VOCvHSpmtPqptNFDSQowjbEX4FbjSdKaruAxx xFDV4COxARU5aPWKIzo07HqyKXgTRATagPct3wty/N88OyiJ+0mPDbkI5OVtZLoi YAfly33KG3V6RRW2N/rVVfiL+NlnFR0n80SVBEtqVwrpNZ1Q1gvqup4VOgs2Mssl 19pm/hw8n6iWNoTcx014sVDGud/SgOA= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:57 2025 by rpki-client