$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: 75EkgIkUD8odMvFV9XH/9daSESqxuhksLj5W3v9iPsg= Subject key identifier: E4:E5:43:34:B6:E4:70:57:5E:1F:61:07:4B:0C:FE:B2:A5:03:2E:63 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B9A89CDA117B0DA653380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9a:89:cd:a1:17:b0:da:65:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=270cca09-da67-4672-ad2e-336feab537af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:7b:c2:e6:3e:c3:dc:f0:b6:30:cf:c5:0b:1f: 98:c4:8c:e9:b2:63:ca:19:02:e2:83:ba:4c:9f:54: fd:05:58:fc:e3:5c:e3:ba:d5:62:53:8d:0c:91:a8: bd:30:d0:5b:d1:62:68:d7:68:37:7b:bc:b3:d6:28: 17:78:1c:9e:26:61:a5:62:6d:6d:1e:83:ae:5c:7e: ad:6b:b2:6f:05:af:b5:ce:51:c7:e7:3d:2d:c5:86: 1c:93:82:2b:95:d5:84:cd:85:c5:4e:5c:4f:0d:0b: f9:6f:76:1a:f8:76:64:9e:c3:f3:42:56:7a:b3:0e: e0:b7:a4:c2:ee:88:cf:ea:91:ae:76:a0:f9:a7:6f: c1:33:33:37:55:12:05:ec:45:58:00:d7:90:b2:9a: a1:02:45:3b:d3:ec:9e:19:20:22:23:61:18:11:1e: 4c:b1:41:e8:76:44:9a:f7:65:eb:a1:d9:72:08:ed: 7d:81:27:8b:e9:44:17:17:e9:86:bb:7e:25:54:5d: a4:c0:7a:98:3b:ad:8e:a7:da:7f:a3:51:6c:fc:ca: 9b:4c:69:09:57:a3:a7:b5:92:04:d7:51:c8:0f:33: b9:53:3b:32:7e:e4:9d:79:cf:a7:68:b2:21:46:c7: 10:95:9b:d5:68:36:d9:e5:5c:f4:7c:16:dc:f8:e3: ca:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:E5:43:34:B6:E4:70:57:5E:1F:61:07:4B:0C:FE:B2:A5:03:2E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:1a:41:a3:a9:7c:21:4b:12:5e:84:bd:2d:fe:ca:1e:f9:4d: 9e:e6:c4:b1:d9:b8:dd:84:59:7f:d2:65:41:09:b5:9f:40:a4: 7c:48:22:88:5f:4b:ac:1f:5f:51:00:c7:de:44:71:9a:1e:8d: 68:e4:f1:a6:73:3d:2c:82:03:14:00:26:dc:94:15:a7:22:e4: 32:4c:1b:64:8e:81:08:2d:7f:73:fb:ec:cb:fb:ae:4f:f2:2a: 2c:66:74:56:f3:fb:ab:62:f0:61:4e:47:3d:f8:f3:d3:89:c6: 3b:d6:e0:b2:4a:95:35:66:36:8d:0b:a3:a2:7f:e9:0e:af:c7: 46:df:8f:e3:2f:42:b2:c3:e1:79:fc:ab:38:15:18:a9:58:6d: 40:31:70:bc:cd:4b:6a:72:8a:8c:0d:45:e6:0e:8c:e5:32:e5: 19:88:be:b7:52:64:a7:e9:3f:27:a4:8a:55:1b:d5:f7:eb:7b: c7:f2:a2:c5:61:a1:c4:2e:e7:3a:58:f5:29:29:d5:f3:0c:5a: fc:be:8a:6e:23:f4:53:b1:a6:92:e6:ee:ac:51:d9:ab:0a:04: 09:84:be:04:59:42:ca:63:74:0a:64:c8:b1:d8:0a:dd:34:d5: c0:55:50:27:c8:94:a4:22:c6:48:08:b8:ed:f1:df:a2:ea:5c: 14:92:9e:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5qJzaEXsNplM4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MjcwY2NhMDktZGE2Ny00NjcyLWFkMmUtMzM2ZmVhYjUzN2FmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4nvC5j7D3PC2MM/FCx+YxIzpsmPKGQLig7pM n1T9BVj841zjutViU40Mkai9MNBb0WJo12g3e7yz1igXeByeJmGlYm1tHoOuXH6t a7JvBa+1zlHH5z0txYYck4IrldWEzYXFTlxPDQv5b3Ya+HZknsPzQlZ6sw7gt6TC 7ojP6pGudqD5p2/BMzM3VRIF7EVYANeQspqhAkU70+yeGSAiI2EYER5MsUHodkSa 92XrodlyCO19gSeL6UQXF+mGu34lVF2kwHqYO62Op9p/o1Fs/MqbTGkJV6OntZIE 11HIDzO5UzsyfuSdec+naLIhRscQlZvVaDbZ5Vz0fBbc+OPKpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTlQzS25HBXXh9hB0sM/rKlAy5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsaQaOpfCFLEl6EvS3+yh75TZ7mxLHZuN2EWX/SZUEJtZ9ApHxIIohf S6wfX1EAx95EcZoejWjk8aZzPSyCAxQAJtyUFaci5DJMG2SOgQgtf3P77Mv7rk/y KixmdFbz+6ti8GFORz3489OJxjvW4LJKlTVmNo0Lo6J/6Q6vx0bfj+MvQrLD4Xn8 qzgVGKlYbUAxcLzNS2pyiowNReYOjOUy5RmIvrdSZKfpPyekilUb1ffre8fyosVh ocQu5zpY9Skp1fMMWvy+im4j9FOxppLm7qxR2asKBAmEvgRZQspjdApkyLHYCt00 1cBVUCfIlKQixkgIuO3x36LqXBSSno4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:26:06 2025 by rpki-client