$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa File: 0d35164e-0555-3d38-a332-e25e49271a03.roa (raw, json) Hash identifier: VjU/UOl1CvRCV0cYCcSCaBc897Mssi4Oo5GsqdXtFxU= Subject key identifier: CC:94:A6:26:8A:98:F5:E5:49:3B:F4:B6:BB:09:48:05:8E:7B:40:87 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D053DC0B28838C443800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.46.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d0:53:dc:0b:28:83:8c:44:38:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=1ab3e41f-499d-4a7e-a2e8-c3a0efcf7b52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:bc:3e:84:6b:eb:53:10:1f:66:f5:e6:b0:83: 41:08:1d:02:94:c7:2e:c4:80:ef:b2:c0:a6:df:5e: 7e:46:50:77:1f:d1:9c:b1:3f:9e:4a:d6:a0:54:05: 45:3f:26:25:72:d6:97:67:04:06:4b:33:36:66:c8: b6:5b:9d:ca:d7:f3:27:7d:36:cb:2c:06:07:31:c3: 7c:db:67:9d:bd:d3:21:61:b3:3e:c9:05:db:95:12: 11:b4:81:75:69:7f:c1:36:10:57:ba:43:e6:f2:86: 75:c4:45:9a:c2:94:de:44:eb:a4:fe:c8:e4:53:26: cd:85:08:45:fb:1f:7f:fb:e8:5c:f4:4b:b3:01:cb: b2:c9:67:aa:f9:4f:d0:69:bd:49:25:d5:b3:fb:51: 78:00:e4:a2:fd:bf:0b:43:d8:69:d8:ee:fe:85:63: ed:60:e2:10:95:08:a7:c1:aa:3a:22:af:74:53:e4: d3:80:97:b7:58:68:c2:ad:18:cb:3f:50:96:b3:cc: 61:1d:11:ef:8a:93:c1:c1:4c:c7:53:c6:a5:d1:a4: 95:84:f2:0e:a6:ee:a4:e9:ed:50:7d:72:96:28:16: 8d:80:0d:31:df:82:9b:34:61:7a:a0:de:ee:41:50: 6d:46:6a:cc:3f:9c:a1:b7:1f:f8:57:66:e8:7b:8c: 99:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:94:A6:26:8A:98:F5:E5:49:3B:F4:B6:BB:09:48:05:8E:7B:40:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7c:73:bc:14:04:60:f9:a6:d4:98:07:06:6a:f8:1c:db:1b:73: 13:f4:a8:7e:d3:e5:4b:e3:2e:b3:33:06:ef:25:b9:58:d8:49: 6b:b3:de:3e:58:1d:ba:7f:8e:cf:66:0a:eb:f9:cd:91:97:de: b7:93:72:7c:cf:83:d5:b5:bc:97:13:b1:94:2f:0c:5c:58:54: cc:03:8d:fd:6a:23:c6:bc:24:da:76:0b:f2:e1:f3:5b:e9:b7: 48:6c:9c:93:94:9b:30:87:72:19:b2:84:18:68:a4:82:40:8b: ce:b2:ac:79:1a:51:b5:67:fb:15:f4:d0:1e:5e:eb:cd:5a:c4: f7:9d:ec:be:3c:2f:16:cd:19:9b:3b:94:80:cd:82:81:d1:45: 47:41:29:ed:07:8e:84:c5:00:2f:42:be:11:cb:06:f9:49:fd: b9:f6:92:bf:e8:35:41:db:72:dd:d0:f6:85:14:d4:08:4c:60: 53:23:10:51:bc:8c:3b:6e:3a:a2:34:98:fb:d3:46:88:3a:a0: c2:a3:25:9b:6e:75:37:66:7a:0f:81:30:d5:f4:dc:59:52:0d: 7c:f6:68:26:6a:f7:ff:ae:19:64:75:47:35:05:4a:52:ff:25: f8:d8:96:53:1b:6f:3f:71:49:04:f1:d4:7c:be:85:db:ee:6a: 9a:a1:60:67 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNBT3Asog4xEOAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MWFiM2U0MWYtNDk5ZC00YTdlLWEyZTgtYzNhMGVmY2Y3YjUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbw+hGvrUxAfZvXmsINBCB0ClMcuxIDvssCm 315+RlB3H9GcsT+eStagVAVFPyYlctaXZwQGSzM2Zsi2W53K1/MnfTbLLAYHMcN8 22edvdMhYbM+yQXblRIRtIF1aX/BNhBXukPm8oZ1xEWawpTeROuk/sjkUybNhQhF +x9/++hc9EuzAcuyyWeq+U/Qab1JJdWz+1F4AOSi/b8LQ9hp2O7+hWPtYOIQlQin wao6Iq90U+TTgJe3WGjCrRjLP1CWs8xhHRHvipPBwUzHU8al0aSVhPIOpu6k6e1Q fXKWKBaNgA0x34KbNGF6oN7uQVBtRmrMP5yhtx/4V2boe4yZDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMyUpiaKmPXlSTv0trsJSAWOe0CHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGQzNTE2NGUtMDU1NS0z ZDM4LWEzMzItZTI1ZTQ5MjcxYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHxzvBQEYPmm1JgHBmr4HNsbcxP0qH7T5UvjLrMzBu8luVjYSWuz3j5Y Hbp/js9mCuv5zZGX3reTcnzPg9W1vJcTsZQvDFxYVMwDjf1qI8a8JNp2C/Lh81vp t0hsnJOUmzCHchmyhBhopIJAi86yrHkaUbVn+xX00B5e681axPed7L48LxbNGZs7 lIDNgoHRRUdBKe0HjoTFAC9CvhHLBvlJ/bn2kr/oNUHbct3Q9oUU1AhMYFMjEFG8 jDtuOqI0mPvTRog6oMKjJZtudTdmeg+BMNX03FlSDXz2aCZq9/+uGWR1RzUFSlL/ JfjYllMbbz9xSQTx1Hy+hdvuapqhYGc= -----END CERTIFICATE-----Generated at Thu Jul 10 01:24:32 2025 by rpki-client