$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json) Hash identifier: TOtn8vOI9c+Ay4FN02rPV0V19sgcyk5D6FTufdSwvAk= Subject key identifier: 06:E5:AB:14:49:5B:E0:B4:3E:BE:28:1D:C2:32:91:CE:1C:90:CA:58 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62907F0E07F13B201F6F0B80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.57.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:7f:0e:07:f1:3b:20:1f:6f:0b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=cd6b09ea-0d5a-4eae-a712-13fff60ebf35 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:8e:74:10:57:fd:69:7e:ff:11:22:cd:6d:13: 5b:54:da:9d:1d:d6:56:52:2e:5d:f8:f9:71:92:40: f0:99:a7:a4:65:a8:96:46:6c:63:d1:50:e0:1d:81: 8f:3f:a5:0d:82:5f:39:3a:58:51:a0:99:56:37:86: 7f:c7:4b:aa:16:b0:77:c5:6c:80:aa:5f:f6:9e:54: 84:39:a6:77:3e:b3:5e:32:fc:af:1b:dc:ba:b6:81: 1d:21:f8:73:80:0a:9e:be:b1:c7:cf:92:74:a5:2f: b3:1d:fd:4d:cf:a6:c1:04:62:b6:2d:a8:c3:0d:96: dd:ef:e2:50:5f:2f:34:f5:8b:e9:b1:cc:e9:cd:6e: 90:de:18:41:c7:17:df:13:3c:41:69:50:c2:fa:85: eb:47:57:a5:d0:94:ed:4a:6b:88:cc:1f:1a:46:a8: 41:49:61:e1:0b:de:62:a2:aa:08:93:d2:82:d2:7f: ab:d8:82:43:7d:33:4b:f8:3b:1c:bf:31:55:54:45: 6b:65:69:83:50:8e:18:fa:8c:ef:fb:28:3d:7c:3e: df:3d:4a:79:b9:18:c2:e9:96:1b:77:8c:9f:30:ed: 91:29:fa:b5:2e:8f:a5:87:9b:39:e6:e9:93:79:5e: 9b:93:0f:61:e7:ae:af:f6:f5:8b:f5:9e:d5:f9:b9: cf:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:E5:AB:14:49:5B:E0:B4:3E:BE:28:1D:C2:32:91:CE:1C:90:CA:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:9e:39:f1:4e:f0:fc:28:ab:e4:55:0c:df:e3:05:0d:18:5d: 61:da:24:0e:c2:e1:2f:92:7a:64:01:57:69:1b:1c:ae:86:56: d9:33:a3:01:7c:f0:f3:fb:5f:09:0d:0a:a7:64:8f:e4:fe:27: 57:ca:c0:5d:68:b2:57:04:8e:e1:0d:5a:b6:c0:5e:45:ae:92: a7:fd:44:4d:e4:b3:83:ce:60:06:ea:7c:e4:56:6a:f9:4a:30: 0e:b6:13:13:9d:0d:ed:85:fb:35:42:3f:7b:de:aa:4d:8d:aa: 51:aa:de:a4:16:a3:da:9f:8f:0b:22:fa:14:44:0c:9b:0c:54: 57:c9:25:54:cb:ea:a1:f2:95:be:79:5e:f9:ca:f4:8f:0a:ec: 3b:1c:88:70:7c:d3:98:18:10:31:69:72:08:6a:09:e4:75:fd: 74:ee:63:73:41:e5:2c:fd:fb:c3:12:c5:45:e7:77:e6:13:4a: 6d:7c:db:ca:32:74:cf:08:5b:8c:51:7d:17:bd:af:7b:77:01: b6:8c:f0:5a:d8:9c:6c:9f:16:5e:53:f4:d5:60:63:1c:db:84: 34:1a:e5:25:7f:28:78:82:84:f6:5a:fd:29:4f:8a:c5:e8:4d: 3e:c9:46:61:d3:51:3e:9d:54:a8:4a:46:3d:1d:88:a9:e0:65: 1c:44:be:37 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikH8OB/E7IB9vC4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2Q2YjA5ZWEtMGQ1YS00ZWFlLWE3MTItMTNmZmY2MGViZjM1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxo50EFf9aX7/ESLNbRNbVNqdHdZWUi5d+Plx kkDwmaekZaiWRmxj0VDgHYGPP6UNgl85OlhRoJlWN4Z/x0uqFrB3xWyAql/2nlSE OaZ3PrNeMvyvG9y6toEdIfhzgAqevrHHz5J0pS+zHf1Nz6bBBGK2LajDDZbd7+JQ Xy809YvpsczpzW6Q3hhBxxffEzxBaVDC+oXrR1el0JTtSmuIzB8aRqhBSWHhC95i oqoIk9KC0n+r2IJDfTNL+DscvzFVVEVrZWmDUI4Y+ozv+yg9fD7fPUp5uRjC6ZYb d4yfMO2RKfq1Lo+lh5s55umTeV6bkw9h566v9vWL9Z7V+bnPqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAblqxRJW+C0Pr4oHcIykc4ckMpYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjg0MGI4ZTktNjlhYi0z YThmLWFiODUtZjgzZDg1MmIwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHGeOfFO8Pwoq+RVDN/jBQ0YXWHaJA7C4S+SemQBV2kbHK6GVtkzowF8 8PP7XwkNCqdkj+T+J1fKwF1oslcEjuENWrbAXkWukqf9RE3ks4POYAbqfORWavlK MA62ExOdDe2F+zVCP3veqk2NqlGq3qQWo9qfjwsi+hREDJsMVFfJJVTL6qHylb55 XvnK9I8K7DsciHB805gYEDFpcghqCeR1/XTuY3NB5Sz9+8MSxUXnd+YTSm1828oy dM8IW4xRfRe9r3t3AbaM8FrYnGyfFl5T9NVgYxzbhDQa5SV/KHiChPZa/SlPisXo TT7JRmHTUT6dVKhKRj0diKngZRxEvjc= -----END CERTIFICATE-----Generated at Thu Jul 10 06:26:33 2025 by rpki-client