$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa File: 128a74c3-e6aa-3d06-ac4a-655a48640308.roa (raw, json) Hash identifier: r/ENynB/zBMZMMbEWKQEXN82fkdqVAy4sUdwhajWX+o= Subject key identifier: 03:C6:1E:4B:C6:4A:2E:CC:4C:D2:1A:9F:6E:7C:B1:9D:8E:BD:E0:30 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A629097D5A88DA98F8FA53C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.33.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:97:d5:a8:8d:a9:8f:8f:a5:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=950c1153-aa62-4a65-9f89-ec7a2523860c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:ac:c1:50:d7:a3:c0:50:9a:d4:04:5d:73:82: 76:da:59:7e:09:51:82:6b:d9:1c:d0:5d:39:be:3d: 1a:75:12:54:d0:98:68:0a:36:0c:c9:1e:16:7a:42: 5e:af:03:27:38:b8:fb:a9:0c:f2:fd:0a:44:83:eb: 2a:0d:6e:7a:ea:03:80:05:1f:de:29:57:d1:65:6d: 35:f4:e9:3b:68:12:db:5b:d1:6d:6f:a0:bd:f6:c3: 44:d2:12:36:82:22:00:3e:fa:ef:5b:42:88:b1:05: eb:58:73:07:5f:c6:ce:90:71:43:fc:86:5c:59:ec: 96:2b:9f:8e:a8:08:1e:51:25:e8:f3:82:28:42:b1: 9a:9a:51:e2:8c:36:ef:0a:bc:b0:dc:08:12:df:8c: 6e:ef:89:8a:d0:dc:d5:5f:5d:21:bd:19:79:40:82: 64:d7:38:19:ff:7c:0b:61:a3:05:f7:3b:bd:17:c2: 29:7a:74:a0:a8:a4:ee:db:7c:ec:fd:95:5a:d2:32: 6e:73:d0:64:10:a9:78:e4:7d:65:1c:e8:4c:0b:5c: 8e:81:fb:d0:4b:3d:a3:63:a2:11:6c:89:eb:b5:19: 68:e7:07:a4:7f:14:5f:68:f8:24:f2:ef:5d:63:13: 17:cf:c5:d7:a6:63:c4:65:70:88:e4:2a:11:01:cb: 33:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:C6:1E:4B:C6:4A:2E:CC:4C:D2:1A:9F:6E:7C:B1:9D:8E:BD:E0:30 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/128a74c3-e6aa-3d06-ac4a-655a48640308.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:a8:5f:1e:2b:f3:9e:f3:c5:b1:d5:db:e3:65:dc:71:79:a5: d6:f2:99:1d:eb:e0:f4:d1:95:00:39:d6:e0:cc:d7:0e:ce:e6: c1:e8:6c:8c:4a:c1:ac:d1:57:32:72:91:8b:74:15:19:c9:27: c1:2c:5b:9e:22:e2:da:b0:cc:34:e4:30:3c:d6:bd:df:00:00: 62:26:ce:11:a9:0d:ce:ed:e1:a1:b8:9d:83:74:61:ed:d2:c9: 40:d0:92:b3:fb:33:17:67:13:e1:8a:41:79:0e:87:76:ea:dc: 47:b4:c3:e3:c5:a7:e4:49:44:cc:55:65:ff:b8:ce:92:8b:15: 93:e4:c3:53:bc:e7:c3:52:f4:17:30:6b:5c:7d:d1:8b:99:13: 3b:29:8f:b9:1a:3a:b1:15:05:83:be:ad:e1:70:51:9e:3d:eb: 60:05:c3:9a:29:85:b6:62:e8:31:f0:15:25:60:a9:b3:62:52: 57:5a:c8:cf:87:aa:85:3e:e5:19:7d:17:f7:40:7a:6f:6a:9a: 9c:3d:73:d2:5b:97:e5:33:68:4c:c3:6e:8b:fa:b4:d4:d8:24: 17:69:a5:ca:84:32:3a:bd:23:f5:aa:5c:58:08:56:e5:d6:5d: e5:d3:30:dc:b9:61:f0:7c:31:f4:d2:f5:b5:7b:94:e4:67:81: 1c:b4:27:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJfVqI2pj4+lPAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OTUwYzExNTMtYWE2Mi00YTY1LTlmODktZWM3YTI1MjM4NjBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnazBUNejwFCa1ARdc4J22ll+CVGCa9kc0F05 vj0adRJU0JhoCjYMyR4WekJerwMnOLj7qQzy/QpEg+sqDW566gOABR/eKVfRZW01 9Ok7aBLbW9Ftb6C99sNE0hI2giIAPvrvW0KIsQXrWHMHX8bOkHFD/IZcWeyWK5+O qAgeUSXo84IoQrGamlHijDbvCryw3AgS34xu74mK0NzVX10hvRl5QIJk1zgZ/3wL YaMF9zu9F8IpenSgqKTu23zs/ZVa0jJuc9BkEKl45H1lHOhMC1yOgfvQSz2jY6IR bInrtRlo5wekfxRfaPgk8u9dYxMXz8XXpmPEZXCI5CoRAcszfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAPGHkvGSi7MTNIan258sZ2OveAwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTI4YTc0YzMtZTZhYS0z ZDA2LWFjNGEtNjU1YTQ4NjQwMzA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCFgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIqoXx4r857zxbHV2+Nl3HF5pdbymR3r4PTRlQA51uDM1w7O5sHobIxK wazRVzJykYt0FRnJJ8EsW54i4tqwzDTkMDzWvd8AAGImzhGpDc7t4aG4nYN0Ye3S yUDQkrP7MxdnE+GKQXkOh3bq3Ee0w+PFp+RJRMxVZf+4zpKLFZPkw1O858NS9Bcw a1x90YuZEzspj7kaOrEVBYO+reFwUZ4962AFw5ophbZi6DHwFSVgqbNiUldayM+H qoU+5Rl9F/dAem9qmpw9c9Jbl+UzaEzDbov6tNTYJBdppcqEMjq9I/WqXFgIVuXW XeXTMNy5YfB8MfTS9bV7lORngRy0Jw4= -----END CERTIFICATE-----Generated at Thu Jul 10 02:25:33 2025 by rpki-client