$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa File: 0032e347-6e3a-3cea-940c-039940ff7a70.roa (raw, json) Hash identifier: UJbRDX+ARK10oxxm24MAFxTQMcwrn31oPyGub9Hxyy4= Subject key identifier: CD:DC:E5:A7:5D:C7:AE:82:E7:2A:F5:41:41:63:A8:08:89:91:53:79 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CF10BD819C444E892A30 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cf:10:bd:81:9c:44:4e:89:2a:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ffe59cdc-ea6a-4afc-b0af-1675018ed071 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:47:7d:a4:da:28:e5:18:e1:a4:80:86:41:a5: 21:40:a4:ab:7d:c7:84:f8:22:fc:23:6d:75:6e:6f: bc:50:ca:b2:d9:f9:d9:f6:2a:a0:06:12:95:11:e9: f0:a9:64:52:60:73:da:99:51:5e:d5:c5:e0:55:0e: f9:5a:60:a4:d8:c4:a9:98:27:eb:bc:64:b6:db:c4: 6b:0e:25:c3:17:98:e2:35:c2:19:3d:10:c8:83:b5: 32:c8:81:72:80:e5:4c:10:57:74:90:62:15:d3:35: 4b:7a:c1:db:48:a1:38:5e:e9:40:0d:8d:17:b5:2d: 98:6f:76:16:e8:37:97:6c:40:50:ae:52:2d:55:48: 05:bd:6b:5a:5d:41:20:43:e9:ea:eb:c6:cb:59:84: 0c:db:d8:21:79:a6:70:58:95:b9:ac:64:ec:84:be: 69:dc:45:39:0f:aa:39:22:3e:c6:4b:f2:f1:87:23: eb:48:e5:f4:ac:82:52:20:c0:55:ec:cf:e4:8c:70: ca:c4:42:d5:9b:31:3b:dc:33:d9:b0:fc:5f:10:d3: 16:e5:2d:be:7e:6d:71:5b:fd:2f:5c:4c:9c:d1:54: 74:4d:d1:a2:b3:c4:a2:f8:ca:ad:5b:f0:13:66:d5: 7f:60:ca:5e:43:ea:ac:60:b8:6b:d3:a6:13:64:a9: 82:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:DC:E5:A7:5D:C7:AE:82:E7:2A:F5:41:41:63:A8:08:89:91:53:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0032e347-6e3a-3cea-940c-039940ff7a70.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:d5:4d:ec:cd:25:bb:a8:09:da:dc:70:ee:cd:91:d7:43:35: 4a:ba:ee:ea:6f:ec:0d:ec:79:a6:60:1e:b0:76:a4:10:ba:46: 92:9a:35:5c:30:b7:81:73:87:70:e0:90:f3:e8:3c:5d:06:7c: 9a:85:b6:31:60:f6:30:ce:60:e0:f4:07:d1:4b:49:6d:06:6f: b6:6e:1d:0f:5f:76:dc:86:04:18:0b:5f:52:fe:7e:b3:4f:ae: cd:80:0b:f9:96:a8:83:7b:5e:21:8b:f0:d3:79:ba:cf:64:68: d7:57:b5:da:8e:15:f7:15:1d:3a:22:7a:62:4d:fd:19:1c:88: d3:2b:ce:87:7b:c4:54:c9:40:cf:39:3f:14:41:d9:6b:ab:a8: 22:a7:3e:7c:36:04:34:be:6c:e9:c5:90:12:59:e5:60:a3:82: fb:30:e8:c0:8b:8c:ad:9a:3f:3e:b4:77:32:ee:11:65:a8:35: 97:8d:70:77:a7:41:63:6e:96:70:46:31:aa:2f:a9:2c:ca:55: 1d:d3:03:8d:95:e4:c6:e9:fb:e8:f1:2a:b3:98:eb:17:f8:88: 6c:4b:3d:5b:75:26:a6:0b:3d:d0:ad:8f:78:ee:f4:9a:d4:19: 4d:70:17:4a:ef:a6:55:e3:7c:9e:e0:3e:50:c0:d1:cf:a5:28: 74:65:08:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM8QvYGcRE6JKjAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmZlNTljZGMtZWE2YS00YWZjLWIwYWYtMTY3NTAxOGVkMDcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkd9pNoo5RjhpICGQaUhQKSrfceE+CL8I211 bm+8UMqy2fnZ9iqgBhKVEenwqWRSYHPamVFe1cXgVQ75WmCk2MSpmCfrvGS228Rr DiXDF5jiNcIZPRDIg7UyyIFygOVMEFd0kGIV0zVLesHbSKE4XulADY0XtS2Yb3YW 6DeXbEBQrlItVUgFvWtaXUEgQ+nq68bLWYQM29gheaZwWJW5rGTshL5p3EU5D6o5 Ij7GS/LxhyPrSOX0rIJSIMBV7M/kjHDKxELVmzE73DPZsPxfENMW5S2+fm1xW/0v XEyc0VR0TdGis8Si+MqtW/ATZtV/YMpeQ+qsYLhr06YTZKmC8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3c5addx66C5yr1QUFjqAiJkVN5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDAzMmUzNDctNmUzYS0z Y2VhLTk0MGMtMDM5OTQwZmY3YTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXVTezNJbuoCdrccO7NkddDNUq67upv7A3seaZgHrB2pBC6RpKaNVww t4Fzh3DgkPPoPF0GfJqFtjFg9jDOYOD0B9FLSW0Gb7ZuHQ9fdtyGBBgLX1L+frNP rs2AC/mWqIN7XiGL8NN5us9kaNdXtdqOFfcVHToiemJN/RkciNMrzod7xFTJQM85 PxRB2WurqCKnPnw2BDS+bOnFkBJZ5WCjgvsw6MCLjK2aPz60dzLuEWWoNZeNcHen QWNulnBGMaovqSzKVR3TA42V5Mbp++jxKrOY6xf4iGxLPVt1JqYLPdCtj3ju9JrU GU1wF0rvplXjfJ7gPlDA0c+lKHRlCLY= -----END CERTIFICATE-----Generated at Thu Jul 10 01:11:25 2025 by rpki-client