$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa File: 11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa (raw, json) Hash identifier: b9LOp7S/b8Hal8WSYxVbwykKNuKt9pfPM/XFVH7wuew= Subject key identifier: 8C:7C:B1:84:B2:F3:7F:03:A8:A6:01:31:79:D6:68:24:4A:FC:19:C7 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A629096CDAC34AB98EA727400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.36.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:96:cd:ac:34:ab:98:ea:72:74:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=d503caac-86e9-4e0f-951c-8fd680d13fbf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:67:ac:28:4c:83:4e:a2:ff:ae:51:51:65:cd: fd:0e:db:ed:dd:1d:87:86:40:80:36:7f:1b:c2:d5: cb:27:dd:f1:f8:02:fe:81:84:93:de:c2:04:bf:59: cc:69:86:50:e5:f6:72:7e:97:ed:ca:a4:f3:7f:13: 65:a5:ec:54:b1:fc:b0:67:3c:90:fe:ac:05:7d:16: 12:b8:ea:25:0f:44:80:d1:04:31:90:ab:67:03:ec: 57:22:83:c7:c4:be:68:c8:cc:cf:a5:8f:f3:3f:34: 23:bc:2e:49:ae:6b:8c:a2:c7:3b:05:f8:af:7f:a9: 30:d2:60:62:15:57:29:32:74:01:40:df:49:14:22: 8e:30:02:2e:14:13:39:06:55:99:4c:69:6d:b3:4a: a5:29:f3:43:80:59:34:df:bd:38:0d:32:c0:b9:09: 4e:be:3c:2c:00:00:a8:9c:86:f8:51:78:df:97:ee: 87:4b:5a:e0:d8:fb:e3:73:0d:50:a4:66:ca:5a:64: be:d4:ee:13:97:02:21:f0:da:94:21:9a:96:ca:e8: ad:25:89:55:ba:03:a2:a5:6c:1a:d6:b4:f1:16:ec: e7:9b:ed:8c:29:7d:ff:7a:9a:9a:01:5f:73:91:92: bc:67:e2:9e:77:3e:68:88:1c:0d:21:0c:7f:6b:09: b7:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:7C:B1:84:B2:F3:7F:03:A8:A6:01:31:79:D6:68:24:4A:FC:19:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/11ff1cb6-2c22-32ea-a665-2ce57885e8d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:4d:2a:42:9f:f5:6b:de:e5:63:ed:6e:37:f8:9e:c6:d1:a0: 58:b9:b9:6e:b9:1c:5c:cb:07:8a:b3:f2:9d:6e:ac:53:ea:3f: b3:53:ac:57:b2:d0:58:19:22:4b:45:f6:5d:21:7b:db:e9:25: 72:60:2e:a1:33:53:2d:74:19:d8:0d:0b:b1:d2:bf:6a:0c:d9: 94:40:1b:a3:b2:44:32:a3:cf:22:ff:d3:46:f5:90:49:60:f3: 7c:c3:66:fb:fb:03:df:7b:44:9b:54:b9:75:b9:8c:3e:45:ae: e4:fc:40:f1:a8:cc:3b:8b:55:f7:26:42:86:e2:39:e5:22:16: d7:88:22:06:9b:48:9f:94:d0:65:05:c6:8f:1e:d3:20:03:67: ff:68:33:7a:65:29:4e:b2:0b:39:0e:1f:5b:f3:67:c8:e0:50: 72:60:a9:95:a2:74:aa:91:7a:80:58:24:e4:84:45:0b:76:e3: 55:1b:f8:3b:d8:98:51:cd:50:f3:16:92:48:e8:2e:33:58:cc: 9b:79:85:da:7e:7a:b0:ea:fd:b3:4a:39:e1:67:12:ca:c9:35: 59:3e:66:6b:a8:48:49:db:12:65:0a:e4:22:6e:18:4a:dd:a9: 05:7b:93:d9:d0:3f:6a:23:ea:77:da:42:7d:66:1f:2a:3c:4c: f7:01:e5:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJbNrDSrmOpydAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZDUwM2NhYWMtODZlOS00ZTBmLTk1MWMtOGZkNjgwZDEzZmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmGesKEyDTqL/rlFRZc39Dtvt3R2HhkCANn8b wtXLJ93x+AL+gYST3sIEv1nMaYZQ5fZyfpftyqTzfxNlpexUsfywZzyQ/qwFfRYS uOolD0SA0QQxkKtnA+xXIoPHxL5oyMzPpY/zPzQjvC5JrmuMosc7Bfivf6kw0mBi FVcpMnQBQN9JFCKOMAIuFBM5BlWZTGlts0qlKfNDgFk03704DTLAuQlOvjwsAACo nIb4UXjfl+6HS1rg2Pvjcw1QpGbKWmS+1O4TlwIh8NqUIZqWyuitJYlVugOipWwa 1rTxFuznm+2MKX3/epqaAV9zkZK8Z+Kedz5oiBwNIQx/awm3uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIx8sYSy838DqKYBMXnWaCRK/BnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTFmZjFjYjYtMmMyMi0z MmVhLWE2NjUtMmNlNTc4ODVlOGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIVNKkKf9Wve5WPtbjf4nsbRoFi5uW65HFzLB4qz8p1urFPqP7NTrFey 0FgZIktF9l0he9vpJXJgLqEzUy10GdgNC7HSv2oM2ZRAG6OyRDKjzyL/00b1kElg 83zDZvv7A997RJtUuXW5jD5FruT8QPGozDuLVfcmQobiOeUiFteIIgabSJ+U0GUF xo8e0yADZ/9oM3plKU6yCzkOH1vzZ8jgUHJgqZWidKqReoBYJOSERQt241Ub+DvY mFHNUPMWkkjoLjNYzJt5hdp+erDq/bNKOeFnEsrJNVk+ZmuoSEnbEmUK5CJuGErd qQV7k9nQP2oj6nfaQn1mHyo8TPcB5fM= -----END CERTIFICATE-----Generated at Thu Jul 10 01:22:59 2025 by rpki-client