$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa File: e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa (raw, json) Hash identifier: G4ZAkZ6BGlBdDvfe+UtiDwTrGN1HfPbqYLmDmBowj1c= Subject key identifier: 60:21:41:E7:EE:F3:CD:35:A4:EA:F1:79:93:98:3E:93:10:53:88:C4 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B6EE5A50FF22C281AEF80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6e:e5:a5:0f:f2:2c:28:1a:ef:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=d72f34aa-93d2-47b3-8265-45fc5344b23e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:b1:5c:15:8f:36:05:67:84:c2:0d:a4:d2:e8: 7e:af:d1:0e:e1:45:3b:76:6f:55:d1:b1:4f:12:a4: 9a:78:40:a6:14:aa:c2:eb:71:8a:ad:a5:de:ea:b6: 2a:db:f1:6c:b3:60:ae:21:f1:b1:3a:23:47:5a:90: b4:f9:8a:6a:a8:7d:f4:f9:9e:bf:47:c0:fc:0d:e3: df:4c:4b:2c:c1:71:31:ee:68:b6:98:28:90:9d:bf: 83:4c:e1:13:df:10:4f:c8:a0:9c:c2:d4:f7:e6:21: 54:c9:78:ef:8f:b8:5b:c5:21:a2:96:26:5d:50:10: b5:a7:e2:1b:b3:60:7b:b9:27:9c:2e:a6:db:5b:c8: a9:83:58:71:27:7a:68:0a:a2:05:cf:14:9f:ca:01: b0:d9:ae:c0:a5:8f:22:62:f9:e5:16:99:4e:9a:a4: 4a:b7:46:2c:d2:28:c5:e1:79:e7:92:54:01:17:4a: 24:1c:64:be:d4:4f:64:f8:35:43:65:49:81:3a:ee: 82:ac:fd:48:3c:33:99:da:d8:c6:1e:9a:02:3c:31: e6:5e:24:64:8a:e7:31:ea:d0:8e:e3:8a:a9:e5:21: f4:e9:d3:de:77:35:73:4e:b3:a8:27:89:ab:66:32: aa:1a:71:51:e7:57:91:45:28:25:96:11:71:cd:9e: 6e:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:21:41:E7:EE:F3:CD:35:A4:EA:F1:79:93:98:3E:93:10:53:88:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/e52ec2c9-cf59-3c7c-a157-b8cb355f885f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:8d:f1:f0:31:2d:58:05:b2:24:f6:c5:f7:8d:18:35:e6:ca: 2e:67:24:dc:6f:da:62:dd:02:34:02:f2:6b:71:d4:e4:7c:e7: 55:11:a1:68:0b:05:b3:3b:50:d2:7b:19:8c:ab:91:63:90:2e: 95:f2:83:69:15:ed:fb:63:12:0e:5b:a7:5d:58:6f:ef:a8:8b: bc:c3:09:13:a4:3d:c6:50:f7:bb:0f:c5:d2:02:ae:80:64:3f: f4:b7:01:81:94:5b:06:f5:21:c9:29:0c:6b:96:fb:a8:d3:63: 1c:e2:15:5a:e2:5f:0c:d6:13:47:c4:35:04:99:ff:05:8d:f9: af:dc:91:18:d8:99:cc:cf:70:b4:7a:1a:d5:4a:8c:ee:9d:fb: 05:83:56:a2:93:7d:00:c6:28:fd:cb:00:45:79:58:95:aa:70: d3:cb:7b:49:2d:63:c4:8d:c4:d3:58:f7:9c:5c:e7:6a:11:41: 10:95:81:7a:7c:b6:85:2c:a4:14:76:f1:86:f0:9a:c9:50:c9: 6d:71:77:2b:91:87:8e:bf:1e:a8:99:30:f4:34:ed:da:be:e4: a2:c1:72:2b:a8:36:03:de:e7:ad:32:4a:6e:07:4a:8f:00:4c: af:12:74:3b:47:e4:20:99:e6:b1:ad:33:c8:d9:d3:03:55:3d: 76:67:a6:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e27lpQ/yLCga74AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDcyZjM0YWEtOTNkMi00N2IzLTgyNjUtNDVmYzUzNDRiMjNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67FcFY82BWeEwg2k0uh+r9EO4UU7dm9V0bFP EqSaeECmFKrC63GKraXe6rYq2/Fss2CuIfGxOiNHWpC0+YpqqH30+Z6/R8D8DePf TEsswXEx7mi2mCiQnb+DTOET3xBPyKCcwtT35iFUyXjvj7hbxSGiliZdUBC1p+Ib s2B7uSecLqbbW8ipg1hxJ3poCqIFzxSfygGw2a7ApY8iYvnlFplOmqRKt0Ys0ijF 4XnnklQBF0okHGS+1E9k+DVDZUmBOu6CrP1IPDOZ2tjGHpoCPDHmXiRkiucx6tCO 44qp5SH06dPedzVzTrOoJ4mrZjKqGnFR51eRRSgllhFxzZ5u0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGAhQefu8801pOrxeZOYPpMQU4jEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZTUyZWMyYzktY2Y1OS0z YzdjLWExNTctYjhjYjM1NWY4ODVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuN8fAxLVgFsiT2xfeNGDXmyi5nJNxv2mLdAjQC8mtx1OR851URoWgL BbM7UNJ7GYyrkWOQLpXyg2kV7ftjEg5bp11Yb++oi7zDCROkPcZQ97sPxdICroBk P/S3AYGUWwb1IckpDGuW+6jTYxziFVriXwzWE0fENQSZ/wWN+a/ckRjYmczPcLR6 GtVKjO6d+wWDVqKTfQDGKP3LAEV5WJWqcNPLe0ktY8SNxNNY95xc52oRQRCVgXp8 toUspBR28YbwmslQyW1xdyuRh46/HqiZMPQ07dq+5KLBciuoNgPe560ySm4HSo8A TK8SdDtH5CCZ5rGtM8jZ0wNVPXZnpnw= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:38 2025 by rpki-client