$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa File: dd8077fc-d9c9-386e-b9d5-deab53026be8.roa (raw, json) Hash identifier: wnFKD15tzjNtP61CGkYCXfyrrYCOEzPy8x+l4L40ZOI= Subject key identifier: 57:0C:80:9E:C6:4B:0D:DD:C2:F6:12:62:7A:29:C4:D9:5C:E4:E5:2C Certificate issuer: /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Certificate serial: 010D0C9F4328584A9900C8D53D7D9BA6397F4B40 Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 5645 IP address blocks: 207.136.64.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Jul 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c8:d5:3d:7d:9b:a6:39:7f:4b:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=d88d0ac8-7904-434b-b4a0-644a43341b18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9f:af:53:96:4b:09:09:d6:bf:09:5a:ae:f5: 4b:f4:3f:fa:43:d8:60:40:f9:43:c7:7b:7a:d8:3e: 2d:d8:fa:20:5f:97:bb:a3:11:72:c0:6d:2d:be:33: fd:ab:52:ca:f7:9e:e0:2e:76:20:0b:cd:05:15:b4: 82:0a:3b:17:15:14:05:84:e7:ac:f6:2a:87:e4:18: c9:e7:54:a2:78:13:be:87:35:4d:3e:6f:c3:03:69: 00:4b:91:cf:54:bd:d6:41:03:3c:9b:b9:85:15:72: 2e:2e:d1:66:7f:94:4a:f1:48:6d:78:76:02:9d:31: d2:be:4c:95:fa:95:49:94:94:77:f3:ed:1f:86:a2: 59:1e:e7:b5:a7:05:05:98:4f:12:28:d1:cf:aa:32: 6a:94:c7:97:ca:f2:39:cd:6b:a1:79:7e:10:76:e9: b5:a9:f9:02:6f:95:e8:78:80:d6:8a:11:ba:a7:2d: 15:61:b9:51:e6:3f:b4:f6:cb:9f:57:8c:87:f7:81: 55:fd:50:2b:c0:65:a8:bb:0d:95:77:82:d8:1f:41: c9:7c:9c:ba:bf:61:e7:31:45:c3:00:6b:82:d8:86: 05:f9:11:95:66:0a:d5:cf:37:98:e7:0d:fd:26:9c: b9:ae:41:f8:7f:90:4c:2f:33:01:ca:32:14:77:6e: d6:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0C:80:9E:C6:4B:0D:DD:C2:F6:12:62:7A:29:C4:D9:5C:E4:E5:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/dd8077fc-d9c9-386e-b9d5-deab53026be8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl X509v3 Authority Key Identifier: keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer sbgp-ipAddrBlock: critical IPv4: 207.136.64.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:62:30:8b:35:e4:c9:91:9c:17:c9:ad:c8:3e:cb:01:e8:22: 54:e0:8b:81:e7:1e:e2:2e:ae:92:e4:ca:31:2e:95:35:5e:b5: 56:23:d1:e4:f1:a3:4f:e6:51:99:3c:6e:11:b4:20:d8:f9:c0: 4d:63:43:83:4a:41:93:91:44:f4:42:fc:7c:6e:33:f3:e0:bc: 4a:ee:67:0d:29:83:3a:d4:ed:04:dc:8f:80:d7:10:80:80:3b: 7f:86:39:45:d9:8a:a6:7c:42:6b:22:4b:c9:14:6b:d4:e1:bd: e5:6d:2d:d0:6d:18:ca:e4:d6:5c:e4:10:74:8c:37:75:a6:70: 99:09:e6:1a:02:53:d3:b4:77:25:fd:1d:19:b1:f3:54:34:6f: 97:dd:a2:f9:a9:13:3e:fb:be:71:86:13:18:21:3a:02:28:78: c6:9a:f3:c7:c1:d9:39:86:0a:74:4f:f9:22:b1:02:d7:1a:28: 8c:21:da:4e:2f:0f:18:58:1f:76:c1:c8:8a:9c:c4:54:ab:33: c8:f5:d6:dd:2e:28:50:d8:f5:81:1e:a2:6d:e6:b9:ce:2b:b2: 3d:8e:06:fd:7b:ed:77:c2:80:62:93:36:9e:24:4c:76:03:89: ac:c8:60:ea:82:3c:47:74:67:ce:1b:bd:01:bf:a6:c1:f6:fe: e4:88:b9:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMjVPX2bpjl/S0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi MWNjMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk ZDg4ZDBhYzgtNzkwNC00MzRiLWI0YTAtNjQ0YTQzMzQxYjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz5+vU5ZLCQnWvwlarvVL9D/6Q9hgQPlDx3t6 2D4t2PogX5e7oxFywG0tvjP9q1LK957gLnYgC80FFbSCCjsXFRQFhOes9iqH5BjJ 51SieBO+hzVNPm/DA2kAS5HPVL3WQQM8m7mFFXIuLtFmf5RK8UhteHYCnTHSvkyV +pVJlJR38+0fhqJZHue1pwUFmE8SKNHPqjJqlMeXyvI5zWuheX4Qdum1qfkCb5Xo eIDWihG6py0VYblR5j+09sufV4yH94FV/VArwGWouw2Vd4LYH0HJfJy6v2HnMUXD AGuC2IYF+RGVZgrVzzeY5w39Jpy5rkH4f5BMLzMByjIUd27WYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFcMgJ7GSw3dwvYSYnopxNlc5OUsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvZGQ4MDc3ZmMtZDljOS0z ODZlLWI5ZDUtZGVhYjUzMDI2YmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3 NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGz4hAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADtiMIs15MmRnBfJrcg+ywHoIlTgi4HnHuIurpLkyjEulTVetVYj0eTx o0/mUZk8bhG0INj5wE1jQ4NKQZORRPRC/HxuM/PgvEruZw0pgzrU7QTcj4DXEICA O3+GOUXZiqZ8QmsiS8kUa9ThveVtLdBtGMrk1lzkEHSMN3WmcJkJ5hoCU9O0dyX9 HRmx81Q0b5fdovmpEz77vnGGExghOgIoeMaa88fB2TmGCnRP+SKxAtcaKIwh2k4v DxhYH3bByIqcxFSrM8j11t0uKFDY9YEeom3muc4rsj2OBv177XfCgGKTNp4kTHYD iazIYOqCPEd0Z84bvQG/psH2/uSIuX0= -----END CERTIFICATE-----Generated at Mon Jul 28 22:12:30 2025 by rpki-client