$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa File: ecf5042d-a001-3491-a272-514979cae084.roa (raw, json) Hash identifier: qDQzuoj79JllTPLszFolYzBLmL+kp0gu9qmLGyD9TKU= Subject key identifier: 87:14:14:C6:DC:F1:39:AB:A5:97:C6:E2:62:B2:D9:A6:09:93:4D:F7 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B91F5B6EED0D85222616C Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.152.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:91:f5:b6:ee:d0:d8:52:22:61:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=ff2953f0-a8a5-4331-8c12-6977b152a098 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:16:f2:a5:fb:2e:01:5a:7c:40:90:8d:a4:f4: 26:41:21:48:ef:8f:65:b4:dd:ca:de:e3:e1:08:eb: 01:e0:1e:c2:20:99:19:2d:c2:3f:3a:87:23:02:7d: b3:b4:54:7e:14:ae:de:65:f1:fa:8d:bb:d3:1a:1b: a3:8f:57:52:0e:86:59:a8:0c:77:ce:9f:a4:29:0a: 27:21:e7:6f:2f:de:bd:29:2c:d0:57:5b:aa:c0:c4: e4:c5:e2:c0:91:12:7a:0a:e6:09:34:88:0d:23:74: 43:64:cb:58:18:d4:34:27:9f:3e:f2:03:38:5b:4e: ff:41:3c:8f:78:1f:3f:db:cc:f4:c0:3e:0e:c4:94: ae:04:2b:0c:3c:f7:b7:22:03:17:97:16:2a:7b:ed: a9:9c:96:17:8f:09:12:c2:47:1f:c9:72:6e:72:a0: bc:df:7f:b6:d2:37:b0:43:20:c2:4a:53:b3:b0:4b: 5b:0d:10:24:63:c8:8c:d8:4f:d9:6f:eb:55:0a:94: 2e:c9:aa:47:a2:0f:71:46:e7:30:48:36:5b:09:a2: 5e:81:e1:94:ca:e9:24:4a:17:69:1d:32:bd:32:6b: eb:34:d1:13:b7:1f:66:b6:58:ee:0e:30:b0:e8:3a: cf:03:f4:ef:11:6e:7d:76:c8:0c:46:22:29:79:a8: 1e:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:14:14:C6:DC:F1:39:AB:A5:97:C6:E2:62:B2:D9:A6:09:93:4D:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecf5042d-a001-3491-a272-514979cae084.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:c6:46:ca:b3:d3:3b:67:89:73:f5:43:e1:99:65:ce:d0:1c: 35:6a:7d:28:6f:37:15:d6:06:cd:88:a3:02:e7:ae:f7:34:78: 1f:67:10:50:fb:04:66:2a:0e:b0:c8:8a:76:35:98:04:71:4c: 50:53:2a:2d:cd:71:9e:ae:97:b8:ee:f5:60:ac:27:c1:0b:fc: 0e:f7:ad:08:6a:6c:a8:49:b2:25:b1:0a:04:01:dc:31:6f:39: 2f:d3:e0:ef:ad:f2:7b:0b:2e:f9:be:d3:4c:fa:08:ce:b1:6e: 3c:9d:96:7d:4c:98:91:0d:2f:97:91:62:a6:cb:3c:ae:ec:bb: 37:ef:13:09:69:9e:78:7b:56:27:d8:5d:bb:4a:ea:94:6d:e3: 5e:1d:fa:81:b0:64:59:22:c9:4b:66:d9:5a:26:f0:6f:60:ce: 55:cf:58:0b:67:82:0f:93:47:13:57:2c:28:e5:f1:48:9c:18: 1e:1b:0a:28:55:01:91:f5:28:57:18:ca:9c:da:d4:65:09:1c: 05:89:8a:f3:ac:f2:6a:59:59:12:84:94:f2:ca:3d:2d:3c:7d: d5:4e:ec:b3:97:27:91:2b:84:ca:32:f4:05:97:2d:e2:78:28: 83:b1:ef:68:c7:35:69:0d:43:93:dc:89:2b:87:ae:1d:01:bf: f4:5c:f8:1e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5H1tu7Q2FIiYWwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmYyOTUzZjAtYThhNS00MzMxLThjMTItNjk3N2IxNTJhMDk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0xbypfsuAVp8QJCNpPQmQSFI749ltN3K3uPh COsB4B7CIJkZLcI/OocjAn2ztFR+FK7eZfH6jbvTGhujj1dSDoZZqAx3zp+kKQon IedvL969KSzQV1uqwMTkxeLAkRJ6CuYJNIgNI3RDZMtYGNQ0J58+8gM4W07/QTyP eB8/28z0wD4OxJSuBCsMPPe3IgMXlxYqe+2pnJYXjwkSwkcfyXJucqC833+20jew QyDCSlOzsEtbDRAkY8iM2E/Zb+tVCpQuyapHog9xRucwSDZbCaJegeGUyukkShdp HTK9MmvrNNETtx9mtljuDjCw6DrPA/TvEW59dsgMRiIpeageKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIcUFMbc8TmrpZfG4mKy2aYJk033MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNmNTA0MmQtYTAwMS0z NDkxLWEyNzItNTE0OTc5Y2FlMDg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD/GRsqz0ztniXP1Q+GZZc7QHDVqfShvNxXWBs2IowLnrvc0eB9nEFD7 BGYqDrDIinY1mARxTFBTKi3NcZ6ul7ju9WCsJ8EL/A73rQhqbKhJsiWxCgQB3DFv OS/T4O+t8nsLLvm+00z6CM6xbjydln1MmJENL5eRYqbLPK7suzfvEwlpnnh7VifY XbtK6pRt414d+oGwZFkiyUtm2Vom8G9gzlXPWAtngg+TRxNXLCjl8UicGB4bCihV AZH1KFcYypza1GUJHAWJivOs8mpZWRKElPLKPS08fdVO7LOXJ5ErhMoy9AWXLeJ4 KIOx72jHNWkNQ5PciSuHrh0Bv/Rc+B4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:23 2025 by rpki-client