$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa File: 1e781fae-e632-3ad2-897b-adff15914591.roa (raw, json) Hash identifier: 5Y2JGf6sXEY7oVmiZNTmFcQTFx3k7EsSUxU2npUpUMo= Subject key identifier: 33:E4:42:60:84:A5:C1:60:75:4D:63:D5:88:13:FA:35:41:28:BC:9A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290C9F16513793F023F6B20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.57.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c9:f1:65:13:79:3f:02:3f:6b:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=fd5c42db-9416-4e82-8256-5836237bcca8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8c:69:47:08:09:a2:16:1a:bb:92:97:ff:0a: 8a:a9:0f:c6:25:9e:a1:48:0b:10:be:67:f5:a9:4b: 6c:1f:55:56:fa:08:b2:b0:1f:1c:3b:68:e4:fc:46: af:18:b4:bd:e6:ce:8b:de:46:f6:4e:70:9f:93:7a: d1:f8:16:20:4f:1a:a0:90:8e:9b:f1:5f:85:57:7c: 5d:3f:b7:b9:71:4f:3e:ef:8f:2b:dc:ed:47:dd:f0: cc:6d:87:b3:46:3b:7f:70:9f:40:11:4a:53:6d:88: c2:0d:55:b0:be:a0:14:35:5b:ca:ce:7a:48:ed:76: b1:f7:e4:29:12:4b:a9:b9:e7:ee:d3:b8:cb:3b:b0: 99:50:d1:26:ca:b4:4b:b0:fd:a9:55:95:8c:d2:f0: bb:49:62:e2:ec:63:4a:5b:5d:fb:42:52:c2:d1:e8: 16:2d:d5:8b:25:39:8d:6e:7b:08:7b:b6:5f:77:15: 9e:d0:67:7d:df:6b:95:77:1c:78:fd:c1:fe:f5:ec: 6a:d4:cb:70:d5:3a:15:31:aa:5b:9f:0d:39:b4:74: 9e:20:29:00:4f:66:47:8d:d7:b4:f9:65:49:d1:17: 42:d6:e9:01:b7:ac:7e:6b:f1:b5:5a:33:a9:7c:dc: 3c:7c:e1:a2:1e:35:1e:8c:6c:48:b3:1a:93:fa:4f: da:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:E4:42:60:84:A5:C1:60:75:4D:63:D5:88:13:FA:35:41:28:BC:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2a:a9:bb:37:76:02:58:c7:91:b1:f2:f1:b5:79:e6:f6:2c:93: cf:b6:14:49:50:ac:d8:01:95:18:85:96:8c:97:7d:61:50:8b: 2a:cc:47:db:c6:8e:04:56:1f:0c:67:8c:d4:d9:44:85:63:bd: e0:f8:e4:b8:c2:a1:17:fc:1f:5c:a6:02:7e:ec:a2:1f:0a:0d: 90:31:22:99:e3:76:08:ff:74:69:a5:95:ff:20:39:69:89:c1: 82:68:85:10:eb:5f:f5:6f:c1:cf:89:88:47:0b:1c:d6:10:65: 40:e7:01:e9:e8:92:75:0b:ea:b9:d7:7d:37:17:8e:bd:24:38: 02:13:b9:f0:5a:b9:a8:07:12:29:33:c0:66:41:6b:60:88:55: d7:69:44:bc:a6:0c:58:46:8c:c3:cd:aa:21:93:c0:96:d5:f4: d1:7c:56:37:0f:00:e0:49:23:ef:94:e4:3a:38:0a:01:e1:45: 34:c6:4f:ac:c3:1f:b4:4b:a4:78:ed:7e:5b:a3:07:27:0c:ac: 33:f3:a2:10:db:ae:c1:88:16:f2:47:5c:98:07:55:fd:74:9d: 22:a3:c2:8c:cf:2c:7e:96:d7:7e:de:db:e6:d9:6b:9c:d5:3b: ec:ee:a1:37:8c:77:32:d3:45:7e:4a:bb:aa:f8:1d:2e:74:da: b9:3e:a7:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMnxZRN5PwI/ayAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmQ1YzQyZGItOTQxNi00ZTgyLTgyNTYtNTgzNjIzN2JjY2E4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqoxpRwgJohYau5KX/wqKqQ/GJZ6hSAsQvmf1 qUtsH1VW+giysB8cO2jk/EavGLS95s6L3kb2TnCfk3rR+BYgTxqgkI6b8V+FV3xd P7e5cU8+748r3O1H3fDMbYezRjt/cJ9AEUpTbYjCDVWwvqAUNVvKznpI7Xax9+Qp Ekupuefu07jLO7CZUNEmyrRLsP2pVZWM0vC7SWLi7GNKW137QlLC0egWLdWLJTmN bnsIe7ZfdxWe0Gd932uVdxx4/cH+9exq1Mtw1ToVMapbnw05tHSeICkAT2ZHjde0 +WVJ0RdC1ukBt6x+a/G1WjOpfNw8fOGiHjUejGxIsxqT+k/apwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDPkQmCEpcFgdU1j1YgT+jVBKLyaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWU3ODFmYWUtZTYzMi0z YWQyLTg5N2ItYWRmZjE1OTE0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACqpuzd2AljHkbHy8bV55vYsk8+2FElQrNgBlRiFloyXfWFQiyrMR9vG jgRWHwxnjNTZRIVjveD45LjCoRf8H1ymAn7soh8KDZAxIpnjdgj/dGmllf8gOWmJ wYJohRDrX/Vvwc+JiEcLHNYQZUDnAenoknUL6rnXfTcXjr0kOAITufBauagHEikz wGZBa2CIVddpRLymDFhGjMPNqiGTwJbV9NF8VjcPAOBJI++U5Do4CgHhRTTGT6zD H7RLpHjtflujBycMrDPzohDbrsGIFvJHXJgHVf10nSKjwozPLH6W137e2+bZa5zV O+zuoTeMdzLTRX5Ku6r4HS502rk+pxw= -----END CERTIFICATE-----Generated at Thu Jul 10 02:31:55 2025 by rpki-client