$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa File: ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa (raw, json) Hash identifier: Lb0TYSX9xft+bQWbTJ4S4ekA15myyB0xtEFUySeYX4Q= Subject key identifier: E7:3F:0C:AF:5D:51:C7:1F:8A:92:35:5B:57:0D:9A:01:4C:70:B4:BE Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B9BC4BF4E71BD34706B80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.150.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:9b:c4:bf:4e:71:bd:34:70:6b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=1d43443e-14d4-483c-8db8-5ef300ed43e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:5a:86:07:ad:d5:38:48:31:43:c4:c8:c0:e5: dd:37:11:12:68:20:39:c1:31:a2:a4:5f:d7:8b:be: 60:f7:b1:1e:74:b5:30:0a:e5:a3:a9:45:7c:a7:ba: 32:86:00:8c:91:75:7c:56:dd:ff:b6:3d:a6:6c:00: 11:ec:86:e4:79:bd:a5:33:a7:4e:c0:ae:86:a7:12: 34:66:90:54:56:ec:06:6c:dc:a6:d4:f4:99:41:d2: af:58:e1:6d:13:bf:31:77:67:88:ad:be:e3:c2:0e: 9e:3e:fc:5b:3e:0e:87:28:30:20:61:bd:57:0c:cd: 3d:47:9d:8d:72:69:81:69:0c:8f:1b:a0:1a:b3:0e: d1:79:79:dd:79:3c:f2:21:25:ce:75:71:49:c5:00: fc:9b:8e:59:4a:5f:9a:cb:03:3b:5c:cb:bb:1f:7d: a7:6c:d5:b8:62:86:c4:eb:1b:15:8e:42:99:44:dd: dd:32:5f:07:0a:6c:0e:b0:25:63:0c:e9:d6:48:43: ae:69:da:2c:7d:bd:02:5a:52:0b:ec:75:75:56:bf: ce:76:88:ec:52:d6:67:f0:ad:b7:8c:65:00:f3:db: 8c:ba:59:89:18:93:8e:13:3d:df:68:b8:1c:85:d6: 4b:3b:ad:0b:95:bb:4b:a7:0c:39:7b:5f:ef:c8:28: 71:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:3F:0C:AF:5D:51:C7:1F:8A:92:35:5B:57:0D:9A:01:4C:70:B4:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ed3faa39-c5aa-3561-b0bf-ae989e5344e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.150.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:c5:9f:38:61:ea:41:f3:cc:a7:af:76:5d:e5:97:07:e9:a1: 24:e8:30:c0:f5:ec:fe:54:7c:d8:8a:58:10:a3:fd:85:f9:9d: ed:aa:8b:c7:95:b7:09:10:3e:39:00:d8:90:f1:f3:4e:a3:36: 62:af:31:a2:4b:38:97:3d:ad:f0:1c:ea:5e:f3:b6:13:a6:a5: 89:3d:5e:b1:b2:a9:2d:1e:6c:b0:d2:a7:8a:43:e7:77:bd:65: 28:7c:99:a1:48:28:2a:81:73:6b:0d:5f:80:e3:a8:92:34:eb: 33:bd:56:2d:fa:0e:04:36:f5:41:7c:75:67:ba:bf:67:a9:8f: d1:db:b1:ed:d0:a8:a8:3f:1d:ac:08:51:97:9f:d1:d8:09:0b: b2:1d:41:9e:23:d6:72:bf:3a:6e:87:a7:b9:2f:b4:71:38:3a: d8:dc:9c:fb:fd:bc:bf:82:f1:7d:46:9f:50:fb:4e:26:6c:73: fd:4a:b0:ea:01:f6:cd:a2:b3:19:4e:bb:88:26:e4:3c:b0:d1: f8:4c:76:bc:2a:6e:55:58:8b:52:6e:4d:cb:dd:d1:79:25:d9: a8:ba:af:a5:e8:ea:76:45:c1:e9:01:10:11:ff:44:83:78:fd: e7:6b:b8:1b:5d:0c:f5:c5:73:aa:1a:2a:1d:18:b3:5f:9e:15: eb:e8:5a:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e5vEv05xvTRwa4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk MWQ0MzQ0M2UtMTRkNC00ODNjLThkYjgtNWVmMzAwZWQ0M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplqGB63VOEgxQ8TIwOXdNxESaCA5wTGipF/X i75g97EedLUwCuWjqUV8p7oyhgCMkXV8Vt3/tj2mbAAR7Ibkeb2lM6dOwK6GpxI0 ZpBUVuwGbNym1PSZQdKvWOFtE78xd2eIrb7jwg6ePvxbPg6HKDAgYb1XDM09R52N cmmBaQyPG6Aasw7ReXndeTzyISXOdXFJxQD8m45ZSl+aywM7XMu7H32nbNW4YobE 6xsVjkKZRN3dMl8HCmwOsCVjDOnWSEOuadosfb0CWlIL7HV1Vr/OdojsUtZn8K23 jGUA89uMulmJGJOOEz3faLgchdZLO60LlbtLpww5e1/vyChxYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOc/DK9dUccfipI1W1cNmgFMcLS+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWQzZmFhMzktYzVhYS0z NTYxLWIwYmYtYWU5ODllNTM0NGU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHFnzhh6kHzzKevdl3llwfpoSToMMD17P5UfNiKWBCj/YX5ne2qi8eV twkQPjkA2JDx806jNmKvMaJLOJc9rfAc6l7zthOmpYk9XrGyqS0ebLDSp4pD53e9 ZSh8maFIKCqBc2sNX4DjqJI06zO9Vi36DgQ29UF8dWe6v2epj9Hbse3QqKg/HawI UZef0dgJC7IdQZ4j1nK/Om6Hp7kvtHE4OtjcnPv9vL+C8X1Gn1D7TiZsc/1KsOoB 9s2isxlOu4gm5Dyw0fhMdrwqblVYi1JuTcvd0Xkl2ai6r6Xo6nZFwekBEBH/RIN4 /edruBtdDPXFc6oaKh0Ys1+eFevoWtg= -----END CERTIFICATE-----Generated at Mon Jul 21 07:30:22 2025 by rpki-client