$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa File: f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa (raw, json) Hash identifier: qlej/S2julsA0EHOoEriwUIbLKh9QRJayuVzzyfJSWg= Subject key identifier: A3:DF:3A:5C:FD:90:E2:60:E5:B5:FE:BD:C6:E0:D6:54:02:9D:5C:DF Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B6FC61265BB7FD5D57D00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6f:c6:12:65:bb:7f:d5:d5:7d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=9411efa6-717c-4b4e-9983-e2aedf49cfd8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:19:76:cc:dd:73:0c:be:33:73:b4:b6:9d:38: e4:44:91:a7:eb:66:a5:cc:f7:80:e1:83:c6:b4:47: 7e:22:3c:41:b0:ad:fa:c3:62:8a:e3:b9:99:99:12: 6e:12:46:89:a8:33:fa:e8:8e:c6:78:73:43:58:1e: 79:e9:1a:68:14:78:43:fb:78:75:42:40:84:f4:20: bf:61:b7:c2:84:50:4e:56:aa:47:4e:31:b6:f5:ed: bb:a8:93:9b:33:0f:ad:0b:7f:e8:3e:28:43:b1:3b: f8:95:cd:81:be:6d:76:7e:44:4d:c0:fe:13:1d:09: 11:93:f7:f6:af:a8:d8:1f:d1:90:f8:db:e7:01:0f: cd:1e:57:6c:01:75:9b:28:f4:4f:ec:20:b7:23:84: bd:a0:af:fd:28:d4:c6:22:cb:af:51:9f:48:02:13: 2f:09:31:27:c5:cf:fc:d5:b5:34:aa:68:c7:77:20: 46:b5:0a:c6:2c:65:45:8a:82:73:b5:fd:4b:98:45: 81:b9:94:be:8d:03:ea:88:e7:f9:a3:67:be:9b:88: d0:50:e5:8d:dc:09:3b:20:5a:9b:62:81:9b:78:c9: a2:01:50:5b:61:b0:42:ca:e6:80:07:e2:ce:11:fc: 9f:82:f0:09:cc:b2:e9:ba:94:77:f9:f7:c3:c6:71: 38:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:DF:3A:5C:FD:90:E2:60:E5:B5:FE:BD:C6:E0:D6:54:02:9D:5C:DF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:89:6b:34:36:12:5c:62:32:da:f4:54:7c:49:a8:f1:b9:88: 33:a9:8c:40:a3:eb:ba:67:61:e3:26:4c:12:b4:d5:10:4c:fb: 0e:b6:45:69:46:03:57:6a:06:a1:6a:8a:36:59:9c:b3:87:8f: 0a:37:27:47:38:97:c4:47:41:b9:a8:d8:d9:44:be:d0:83:94: 44:94:93:5a:4d:1e:47:68:16:fe:4e:c6:24:89:8a:26:f9:1b: 0b:ab:3b:18:4d:dd:d8:39:33:3b:58:03:96:01:61:49:28:38: 29:76:fa:55:47:2c:07:4a:09:43:e4:b7:05:3b:65:1d:1c:37: ac:29:ac:1f:88:5e:8a:ea:2b:ee:b4:5b:e2:05:9d:5a:a1:e7: 82:eb:20:f8:26:79:7e:3d:af:a4:3c:3b:80:55:41:4c:39:f1: 30:8b:d3:c2:75:9d:d2:bb:f9:5c:af:3e:95:af:30:3c:39:a5: f3:f1:b7:ff:08:49:29:62:6f:bb:13:31:ad:e4:3a:4c:ee:97: bc:0b:cf:11:03:ba:11:e5:83:aa:e9:59:41:e2:0b:dc:56:4c: 0a:01:4f:51:20:30:83:50:2e:59:a8:39:72:b4:f3:0f:8a:d1: 52:11:98:99:22:5e:21:2b:b4:09:a7:d2:a4:82:1a:4d:fa:fa: bb:b7:06:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e2/GEmW7f9XVfQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk OTQxMWVmYTYtNzE3Yy00YjRlLTk5ODMtZTJhZWRmNDljZmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxl2zN1zDL4zc7S2nTjkRJGn62alzPeA4YPG tEd+IjxBsK36w2KK47mZmRJuEkaJqDP66I7GeHNDWB556RpoFHhD+3h1QkCE9CC/ YbfChFBOVqpHTjG29e27qJObMw+tC3/oPihDsTv4lc2Bvm12fkRNwP4THQkRk/f2 r6jYH9GQ+NvnAQ/NHldsAXWbKPRP7CC3I4S9oK/9KNTGIsuvUZ9IAhMvCTEnxc/8 1bU0qmjHdyBGtQrGLGVFioJztf1LmEWBuZS+jQPqiOf5o2e+m4jQUOWN3Ak7IFqb YoGbeMmiAVBbYbBCyuaAB+LOEfyfgvAJzLLpupR3+ffDxnE4ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPfOlz9kOJg5bX+vcbg1lQCnVzfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjIwYjIzNDMtM2JmZC0z YTNmLWI4MzUtM2VjZDRkYTllNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKCJazQ2ElxiMtr0VHxJqPG5iDOpjECj67pnYeMmTBK01RBM+w62RWlG A1dqBqFqijZZnLOHjwo3J0c4l8RHQbmo2NlEvtCDlESUk1pNHkdoFv5OxiSJiib5 GwurOxhN3dg5MztYA5YBYUkoOCl2+lVHLAdKCUPktwU7ZR0cN6wprB+IXorqK+60 W+IFnVqh54LrIPgmeX49r6Q8O4BVQUw58TCL08J1ndK7+VyvPpWvMDw5pfPxt/8I SSlib7sTMa3kOkzul7wLzxEDuhHlg6rpWUHiC9xWTAoBT1EgMINQLlmoOXK08w+K 0VIRmJkiXiErtAmn0qSCGk36+ru3Bkc= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:33 2025 by rpki-client