$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa File: 04a03306-2f12-3d10-806c-44f9debc1d75.roa (raw, json) Hash identifier: xtVbYF1TeU1+QF8tt20B/Q1p+fPEUscBckDTIU65COE= Subject key identifier: 4F:73:C1:9D:8A:70:F1:DD:D3:E0:F8:93:FB:D7:CF:CD:E7:2A:A7:10 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CC8BA47399D5DDCCA140 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.58.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cc:8b:a4:73:99:d5:dd:cc:a1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0006c10f-cbe4-47be-8534-cfe0cd724927 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3d:3e:7e:2f:7e:36:ac:c6:f7:08:ab:14:99: df:59:b6:8c:0e:66:f7:b0:de:6a:21:43:1c:c7:97: 59:77:b7:13:ce:a5:4c:b1:a7:2d:86:60:80:8d:58: c5:be:b5:fd:50:02:c5:9c:c4:89:59:6f:25:68:4e: d3:14:3f:60:18:30:b5:ce:f9:59:59:95:46:5c:d1: a5:c1:88:73:8d:07:f7:cd:df:66:94:d5:b6:42:59: 97:f4:6b:dc:7a:b3:ba:66:41:a2:16:aa:75:07:ad: 7b:26:20:03:e4:ae:52:66:97:b3:4f:a8:4e:7b:96: 7f:cb:b5:94:0b:42:5a:06:bd:08:dc:6c:a2:e0:6d: 1c:91:61:a9:c6:a4:cb:af:32:a3:88:b8:33:60:d6: fb:39:e4:ad:07:91:1b:f2:06:e4:25:fa:9f:af:43: 38:2e:bd:50:9a:cd:25:19:63:46:fe:52:fc:69:2f: df:52:66:79:41:8f:c6:cb:24:45:9d:85:e2:3c:c7: 54:86:23:52:30:c0:fb:21:65:5d:22:99:9f:6d:65: 9c:87:24:ee:e2:d3:48:31:ae:61:6b:d5:25:5e:6c: df:a6:82:8d:56:45:ea:46:bd:40:e2:02:fa:38:df: 96:11:09:c5:e3:0a:0f:63:20:c9:b3:3e:87:71:b3: 07:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:73:C1:9D:8A:70:F1:DD:D3:E0:F8:93:FB:D7:CF:CD:E7:2A:A7:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/04a03306-2f12-3d10-806c-44f9debc1d75.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8a:2a:b7:d8:b8:20:5b:46:43:33:f2:14:a0:e5:95:91:f2: 62:fd:94:9d:a7:a4:bf:e8:c6:0b:ce:89:ab:47:22:ee:11:18: e9:9b:f5:d8:eb:96:ac:7e:93:bc:18:98:80:95:d2:00:22:d1: 4c:45:35:e7:fa:98:57:e7:3d:02:e0:06:4a:62:c2:1c:c6:56: ab:65:5e:ad:7a:c9:e4:f3:35:2a:66:8b:37:15:d1:0e:34:c6: 65:34:2a:6e:21:b0:22:33:5c:f5:e7:ff:13:54:bb:68:d3:98: 52:53:99:07:71:f4:e8:51:c9:85:47:c0:11:e0:ed:72:a9:24: 00:c6:11:37:e3:8a:87:74:67:87:78:93:a5:5d:ca:47:ee:b1: 04:3d:f0:dc:88:9a:23:97:53:fc:53:23:a7:93:72:3f:06:66: e4:ba:bf:cb:ea:1f:65:4d:98:f3:a7:ac:76:c0:2c:0d:ce:26: 2a:a3:36:98:39:e9:9e:e2:43:3c:58:d4:e8:cc:ad:99:00:66: cb:95:bf:15:73:c5:7d:df:da:b1:21:a2:cd:1d:96:91:60:55: f4:34:48:94:03:d0:ed:5a:a9:da:c0:b9:b1:80:59:33:c6:c1: 61:7c:35:86:a2:4e:86:1c:7b:53:f4:e7:46:13:0e:e9:f9:c1: 52:70:0d:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMyLpHOZ1d3MoUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MDAwNmMxMGYtY2JlNC00N2JlLTg1MzQtY2ZlMGNkNzI0OTI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuj0+fi9+NqzG9wirFJnfWbaMDmb3sN5qIUMc x5dZd7cTzqVMsacthmCAjVjFvrX9UALFnMSJWW8laE7TFD9gGDC1zvlZWZVGXNGl wYhzjQf3zd9mlNW2QlmX9GvcerO6ZkGiFqp1B617JiAD5K5SZpezT6hOe5Z/y7WU C0JaBr0I3Gyi4G0ckWGpxqTLrzKjiLgzYNb7OeStB5Eb8gbkJfqfr0M4Lr1Qms0l GWNG/lL8aS/fUmZ5QY/GyyRFnYXiPMdUhiNSMMD7IWVdIpmfbWWchyTu4tNIMa5h a9UlXmzfpoKNVkXqRr1A4gL6ON+WEQnF4woPYyDJsz6HcbMHvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE9zwZ2KcPHd0+D4k/vXz83nKqcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDRhMDMzMDYtMmYxMi0z ZDEwLTgwNmMtNDRmOWRlYmMxZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDoAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECKKrfYuCBbRkMz8hSg5ZWR8mL9lJ2npL/oxgvOiatHIu4RGOmb9djr lqx+k7wYmICV0gAi0UxFNef6mFfnPQLgBkpiwhzGVqtlXq16yeTzNSpmizcV0Q40 xmU0Km4hsCIzXPXn/xNUu2jTmFJTmQdx9OhRyYVHwBHg7XKpJADGETfjiod0Z4d4 k6VdykfusQQ98NyImiOXU/xTI6eTcj8GZuS6v8vqH2VNmPOnrHbALA3OJiqjNpg5 6Z7iQzxY1OjMrZkAZsuVvxVzxX3f2rEhos0dlpFgVfQ0SJQD0O1aqdrAubGAWTPG wWF8NYaiToYce1P050YTDun5wVJwDY0= -----END CERTIFICATE-----Generated at Thu Jul 10 06:20:19 2025 by rpki-client