$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2616aa61-7483-3055-98dd-74954d4d3ec6.roa File: 2616aa61-7483-3055-98dd-74954d4d3ec6.roa (raw, json) Hash identifier: sB9nEzi/gnQVLAumBhTAmbo6W8wF63V87hHi0HRNUhs= Subject key identifier: CD:D9:9C:8C:7E:16:3A:FB:42:EA:5E:3F:72:19:10:7B:8C:46:B9:36 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290972B79C463DD289E1800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2616aa61-7483-3055-98dd-74954d4d3ec6.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.62.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:97:2b:79:c4:63:dd:28:9e:18:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=2ca2a105-3684-434a-abe9-af19b50a55fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:32:d7:e7:67:47:74:19:39:d5:7d:48:35:5d: 17:25:28:1f:7c:d0:b9:4e:94:ad:e8:09:15:e2:d3: d2:7c:a9:09:3d:58:cd:0e:70:f1:8c:ff:a1:13:51: 1d:52:99:0c:eb:91:38:ec:91:06:27:0a:ba:64:de: cc:b1:77:48:9e:95:a7:9d:13:62:1e:05:9c:63:cb: ea:eb:fa:43:56:4e:54:6d:b0:0b:03:72:95:49:57: 52:30:fe:f3:6a:37:65:5f:28:67:a3:0f:73:b9:7a: 7a:08:b4:74:35:4f:6b:15:43:b3:9f:1a:f8:86:9b: f8:d2:aa:f1:8b:b0:d9:ee:e9:04:c9:02:1b:c5:05: ce:66:70:70:f8:07:05:5e:46:cb:d3:8b:16:46:78: e2:c2:63:e8:a2:48:75:09:0d:59:dc:64:9e:09:c4: f9:0a:2d:69:a5:93:06:1a:7b:43:d9:76:20:53:f1: 67:a6:25:ef:1c:fb:4b:fa:dd:b4:61:13:45:b6:a7: dd:5a:2d:b2:e5:29:43:31:e5:42:17:12:c9:6e:8e: 3f:db:6d:7f:3c:97:52:c7:ae:46:dd:de:6c:97:1f: 60:77:de:64:0c:6d:97:5b:44:b1:d5:2e:2d:6d:bc: 5e:24:f7:b4:c1:58:4c:34:ed:15:64:cf:3c:c4:c2: 7e:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:D9:9C:8C:7E:16:3A:FB:42:EA:5E:3F:72:19:10:7B:8C:46:B9:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2616aa61-7483-3055-98dd-74954d4d3ec6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:c1:0f:f5:28:79:74:22:9c:fb:cc:e2:5c:69:77:3b:00:57: 0a:1c:0c:d0:26:65:af:9d:23:42:c2:91:f7:f5:ec:ae:f0:87: 24:e3:90:93:a9:2a:89:ed:fc:2b:b6:9a:de:65:45:b9:19:9d: 30:cc:83:05:46:84:7c:9a:69:e2:57:c0:ef:9a:2a:20:8f:12: b0:5a:7a:de:77:00:c0:1a:b8:ed:6b:11:8b:92:a1:a6:36:fe: 2c:84:7f:a1:5b:36:a6:07:cf:b4:40:9c:1b:22:15:54:ed:86: c8:2b:d9:d1:f9:89:d1:57:6d:5e:41:d9:76:5c:49:1f:15:cd: df:78:22:31:2e:d2:8f:07:d5:4e:c1:c4:a8:26:ea:9f:5c:0d: 51:63:0b:1b:8c:af:c8:31:6f:4d:56:d7:e3:ed:bd:f4:15:29: 6c:2a:29:ac:bf:ad:82:47:58:1f:82:ca:95:d0:35:0b:41:8f: 2c:a7:40:fb:89:5e:58:64:c6:29:12:32:85:20:4c:a1:78:81: 0e:45:eb:3a:57:18:07:e9:b4:40:9a:85:82:71:4a:df:24:2f: cf:d0:a0:09:f0:93:be:d8:fa:e0:ad:3b:9c:46:9f:1a:67:b0: 26:ca:31:3e:d1:dd:6b:d9:4f:56:c9:19:7b:70:12:26:50:8e: 82:7f:ae:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJcrecRj3SieGAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MmNhMmExMDUtMzY4NC00MzRhLWFiZTktYWYxOWI1MGE1NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjLX52dHdBk51X1INV0XJSgffNC5TpSt6AkV 4tPSfKkJPVjNDnDxjP+hE1EdUpkM65E47JEGJwq6ZN7MsXdInpWnnRNiHgWcY8vq 6/pDVk5UbbALA3KVSVdSMP7zajdlXyhnow9zuXp6CLR0NU9rFUOznxr4hpv40qrx i7DZ7ukEyQIbxQXOZnBw+AcFXkbL04sWRnjiwmPookh1CQ1Z3GSeCcT5Ci1ppZMG GntD2XYgU/FnpiXvHPtL+t20YRNFtqfdWi2y5SlDMeVCFxLJbo4/221/PJdSx65G 3d5slx9gd95kDG2XW0Sx1S4tbbxeJPe0wVhMNO0VZM88xMJ+1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM3ZnIx+Fjr7QupeP3IZEHuMRrk2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjYxNmFhNjEtNzQ4My0z MDU1LTk4ZGQtNzQ5NTRkNGQzZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD4wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGXBD/UoeXQinPvM4lxpdzsAVwocDNAmZa+dI0LCkff17K7whyTjkJOp Kont/Cu2mt5lRbkZnTDMgwVGhHyaaeJXwO+aKiCPErBaet53AMAauO1rEYuSoaY2 /iyEf6FbNqYHz7RAnBsiFVTthsgr2dH5idFXbV5B2XZcSR8Vzd94IjEu0o8H1U7B xKgm6p9cDVFjCxuMr8gxb01W1+PtvfQVKWwqKay/rYJHWB+CypXQNQtBjyynQPuJ XlhkxikSMoUgTKF4gQ5F6zpXGAfptECahYJxSt8kL8/QoAnwk77Y+uCtO5xGnxpn sCbKMT7R3WvZT1bJGXtwEiZQjoJ/rg8= -----END CERTIFICATE-----Generated at Thu Jul 10 02:56:24 2025 by rpki-client