$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa File: 1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa (raw, json) Hash identifier: 1vGmbnnbMpwYxmW6AJCXx8TCfEIXSCL01+9olKxUCQo= Subject key identifier: 14:22:D1:9D:E4:13:EA:17:79:11:51:53:D7:92:F5:C4:71:B9:2A:01 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290C89A442FB3EECFF5EEC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.37.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c8:9a:44:2f:b3:ee:cf:f5:ee:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=8d0715c3-cda9-4e75-9b2e-ac5c30603d97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:ca:ac:94:64:75:a3:1a:5b:4d:a3:7e:70:85: 69:8f:b8:34:18:94:cf:3b:74:cf:87:a8:c3:1a:ac: 74:c1:2b:64:30:52:bc:e2:7f:5d:46:26:01:2e:e0: b7:fa:a3:81:32:06:66:2c:a4:a5:64:43:ea:69:d0: f0:02:80:03:9e:0b:f2:a0:61:7d:80:a3:a1:47:5d: 7f:43:04:07:aa:7f:40:bc:ef:41:10:95:bc:85:3d: d4:fe:d0:00:de:c1:8d:90:16:71:f0:ea:5f:63:8e: c9:fa:65:5c:77:01:72:ec:78:57:6f:ea:24:a8:50: 59:af:f2:37:b6:70:06:56:10:6e:30:6c:77:be:0a: 0a:f2:6f:90:c0:23:42:6d:ac:ed:89:70:5d:04:f9: 9b:79:53:83:14:43:bf:22:1d:18:91:60:87:e7:48: 09:9a:65:b9:13:50:39:23:a3:b4:1d:88:3c:43:1a: 43:7d:e2:1a:d1:b7:7c:3b:ea:a4:a9:6c:e0:4a:56: be:db:4d:97:50:56:bd:b0:10:93:9f:bc:3d:3e:70: 73:7b:22:0f:b7:de:bd:b3:dc:8e:ff:4a:5e:69:da: e8:af:0d:95:02:54:b1:3c:cd:12:08:da:90:33:5f: 39:e0:ef:91:51:ac:43:01:f2:de:d9:90:e5:fc:e0: 28:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:22:D1:9D:E4:13:EA:17:79:11:51:53:D7:92:F5:C4:71:B9:2A:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:e4:6b:a2:0c:bd:49:b2:e9:b0:34:45:e8:23:6f:c0:0f:01: da:ab:fa:3c:69:f6:3f:74:f7:92:51:92:39:b5:f0:a6:11:2c: 7e:d0:3a:09:e8:09:67:1d:29:a8:2a:42:99:64:28:d7:8f:d6: c0:10:7a:62:eb:72:3e:c7:80:70:11:24:93:6e:c4:e9:ad:40: bb:93:de:91:3a:d1:66:d1:ae:54:97:fa:6f:b8:96:05:38:ff: e3:69:86:77:70:ae:dc:27:a8:65:70:61:8c:5d:ae:e3:6a:da: 21:0a:41:8a:21:9d:10:05:c5:e1:7e:78:f6:93:b5:7a:ee:4d: 63:37:de:46:1f:82:15:5d:ed:ba:42:cd:14:c1:96:d7:37:fc: 08:ad:ee:29:6e:3a:47:75:04:fc:9a:d1:f5:a3:5b:f6:f7:25: 45:3b:2a:49:55:c1:87:cc:a2:0a:8f:42:5c:1d:c6:10:d4:1f: cc:28:46:0d:c2:df:3b:a7:ab:f8:84:87:fc:37:3c:10:6d:87: 01:c4:24:99:40:55:22:27:41:51:5f:ca:d4:44:37:07:d7:6e: 92:8f:ee:08:82:d4:2f:0a:c8:9b:fe:b0:ea:ba:63:fb:7b:de: a2:13:43:07:bf:54:44:1b:21:ad:39:99:82:36:88:28:07:74: a8:67:2a:4e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMiaRC+z7s/17sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OGQwNzE1YzMtY2RhOS00ZTc1LTliMmUtYWM1YzMwNjAzZDk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAosqslGR1oxpbTaN+cIVpj7g0GJTPO3TPh6jD Gqx0wStkMFK84n9dRiYBLuC3+qOBMgZmLKSlZEPqadDwAoADngvyoGF9gKOhR11/ QwQHqn9AvO9BEJW8hT3U/tAA3sGNkBZx8OpfY47J+mVcdwFy7HhXb+okqFBZr/I3 tnAGVhBuMGx3vgoK8m+QwCNCbaztiXBdBPmbeVODFEO/Ih0YkWCH50gJmmW5E1A5 I6O0HYg8QxpDfeIa0bd8O+qkqWzgSla+202XUFa9sBCTn7w9PnBzeyIPt969s9yO /0peadrorw2VAlSxPM0SCNqQM1854O+RUaxDAfLe2ZDl/OAo+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBQi0Z3kE+oXeRFRU9eS9cRxuSoBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWEwOGU4Y2QtNGY2ZS0z MTkwLThlMTEtMTdlNGQ5OGU5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH3ka6IMvUmy6bA0Regjb8APAdqr+jxp9j9095JRkjm18KYRLH7QOgno CWcdKagqQplkKNeP1sAQemLrcj7HgHARJJNuxOmtQLuT3pE60WbRrlSX+m+4lgU4 /+NphndwrtwnqGVwYYxdruNq2iEKQYohnRAFxeF+ePaTtXruTWM33kYfghVd7bpC zRTBltc3/Ait7iluOkd1BPya0fWjW/b3JUU7KklVwYfMogqPQlwdxhDUH8woRg3C 3zunq/iEh/w3PBBthwHEJJlAVSInQVFfytRENwfXbpKP7giC1C8KyJv+sOq6Y/t7 3qITQwe/VEQbIa05mYI2iCgHdKhnKk4= -----END CERTIFICATE-----Generated at Thu Jul 10 06:21:11 2025 by rpki-client