$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa File: 0be371a6-479e-3c51-a61d-3d40223861af.roa (raw, json) Hash identifier: tPKmZ9VQuXrnjRjs5ox+zDfEHecSFhKoUyRGvOHdbvI= Subject key identifier: A0:8C:B8:58:BC:58:47:48:C2:32:86:D7:46:1D:7E:6B:67:E3:F4:8F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CD4ED200C35AA4605180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.38.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cd:4e:d2:00:c3:5a:a4:60:51:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=4337dfca-8910-4d9a-a62f-12cd487cf17a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:95:12:f2:f3:3e:6d:6f:89:ae:0c:69:26:23: fe:80:cc:cd:6a:6b:48:41:71:45:0f:b8:ed:52:d3: 66:10:ec:af:b6:f3:80:f8:91:b7:fa:f4:e5:a3:fa: 12:cf:79:60:e9:88:8e:25:33:94:84:b4:60:d7:df: 9e:e8:54:d4:e3:47:f8:5a:d0:e7:60:68:9b:83:5e: ef:29:77:90:0c:73:26:b4:c8:d2:53:eb:fb:48:0f: c7:c1:8f:ab:9d:0b:f6:f6:e2:33:2f:ad:30:06:67: 8a:49:c2:46:09:50:61:40:be:82:26:74:b2:59:a0: 68:62:b4:1f:ab:9f:7b:bb:55:7a:cc:e0:01:1a:75: 1f:c5:e7:bf:32:00:92:bd:dd:19:77:55:0e:7e:10: 61:fb:8d:be:a2:59:1e:b9:2c:d7:cd:b9:7a:f7:1d: 82:83:06:52:c5:76:31:1e:ae:ae:0f:52:f4:06:e5: de:30:1e:be:30:ae:82:3f:31:86:a7:87:10:fc:92: a0:17:f0:0c:8e:9f:1e:40:30:84:36:5c:01:e5:95: 05:b2:75:37:6f:07:74:d2:ee:53:60:f3:43:1a:93: 85:81:65:59:b2:cb:3e:d4:d6:ea:88:55:58:86:a0: 8a:26:06:b6:18:78:f7:70:f5:81:07:fe:04:e8:2f: de:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8C:B8:58:BC:58:47:48:C2:32:86:D7:46:1D:7E:6B:67:E3:F4:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:0c:61:c6:c0:28:c1:6f:8b:5d:83:59:4f:d8:46:22:22:b9: 63:fd:c0:3b:eb:27:27:01:28:7e:20:c9:85:1c:b4:5e:f8:1b: dd:96:9a:6b:e6:18:8d:36:0d:60:70:23:49:bf:af:7a:c5:95: 78:80:89:e2:dc:47:24:98:98:49:37:cf:d3:69:60:50:37:03: 8c:60:3b:b7:48:f0:0f:b9:7d:2c:ac:8c:e3:84:c4:0d:67:a3: 3c:41:f3:f6:72:26:f5:49:de:9d:64:c0:1a:4c:e4:58:3d:61: f1:36:f9:7f:24:ec:22:7c:61:c5:9b:34:5f:81:10:99:7f:2e: 3d:6f:28:a5:7e:12:01:33:a8:84:91:43:bf:47:60:4c:b8:58: dc:0c:90:fd:87:10:75:1b:ae:f2:8a:3d:62:37:76:8d:32:01: 33:54:f5:14:ec:a1:97:e5:b4:b4:c0:71:e1:ef:f7:df:21:d3: ce:2b:44:96:fd:1c:08:bd:87:0d:fb:04:be:a8:ab:d3:9a:35: 0f:36:bc:3d:9a:c9:5f:ae:96:0f:a7:96:b1:f3:7c:04:71:f5: 6b:5c:cf:1e:88:06:b6:9a:5d:9e:8d:5a:1f:27:80:76:92:89: 06:24:80:16:7d:d7:68:70:90:9f:6e:44:83:15:0d:fe:fc:64: 33:9f:c5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM1O0gDDWqRgUYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NDMzN2RmY2EtODkxMC00ZDlhLWE2MmYtMTJjZDQ4N2NmMTdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpUS8vM+bW+JrgxpJiP+gMzNamtIQXFFD7jt UtNmEOyvtvOA+JG3+vTlo/oSz3lg6YiOJTOUhLRg19+e6FTU40f4WtDnYGibg17v KXeQDHMmtMjSU+v7SA/HwY+rnQv29uIzL60wBmeKScJGCVBhQL6CJnSyWaBoYrQf q597u1V6zOABGnUfxee/MgCSvd0Zd1UOfhBh+42+olkeuSzXzbl69x2CgwZSxXYx Hq6uD1L0BuXeMB6+MK6CPzGGp4cQ/JKgF/AMjp8eQDCENlwB5ZUFsnU3bwd00u5T YPNDGpOFgWVZsss+1NbqiFVYhqCKJga2GHj3cPWBB/4E6C/eeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKCMuFi8WEdIwjKG10Ydfmtn4/SPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGJlMzcxYTYtNDc5ZS0z YzUxLWE2MWQtM2Q0MDIyMzg2MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoMYcbAKMFvi12DWU/YRiIiuWP9wDvrJycBKH4gyYUctF74G92Wmmvm GI02DWBwI0m/r3rFlXiAieLcRySYmEk3z9NpYFA3A4xgO7dI8A+5fSysjOOExA1n ozxB8/ZyJvVJ3p1kwBpM5Fg9YfE2+X8k7CJ8YcWbNF+BEJl/Lj1vKKV+EgEzqISR Q79HYEy4WNwMkP2HEHUbrvKKPWI3do0yATNU9RTsoZfltLTAceHv998h084rRJb9 HAi9hw37BL6oq9OaNQ82vD2ayV+ulg+nlrHzfARx9Wtczx6IBraaXZ6NWh8ngHaS iQYkgBZ912hwkJ9uRIMVDf78ZDOfxfM= -----END CERTIFICATE-----Generated at Thu Jul 10 01:59:58 2025 by rpki-client