$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa File: 299bcb5b-09bf-3065-927b-7c024222515a.roa (raw, json) Hash identifier: g/nfBEu/sQPJ4+HkKk/1/e4JRbpJ0EYqYkPWGXDgpfQ= Subject key identifier: 1A:F1:D8:03:EF:58:0B:4C:E6:FF:7B:CE:CB:78:68:76:D5:1F:D8:BE Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CAE66D12EB8AFCA983A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.53.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ca:e6:6d:12:eb:8a:fc:a9:83:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=df69cd88-07b3-42ae-a1be-924c370eb7a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3d:17:1d:19:a8:22:db:cb:a3:86:29:42:57: 56:08:98:6a:f1:91:c1:e1:38:e0:6d:23:58:f8:df: 82:53:62:17:15:3a:74:de:04:f4:dd:2d:7a:89:84: 34:cb:4a:3b:aa:4b:fa:87:84:68:b6:62:27:ca:59: 4b:ca:c4:e0:e6:60:54:29:07:2c:bb:08:7f:3c:33: ac:44:18:f2:f3:78:18:53:55:75:2b:0b:c2:c2:35: 3f:4f:d3:cc:51:e3:6f:bf:02:26:7b:1e:03:8a:c4: 81:f1:ed:99:0d:df:11:7f:fd:0a:0b:e8:74:06:27: fb:81:35:42:6b:86:72:64:96:84:26:94:35:77:fc: ba:14:fd:0e:a5:6d:aa:d2:19:b3:b6:35:cf:91:40: b4:1e:e8:c5:23:1f:c9:74:00:56:e5:fb:7e:96:42: 9d:ae:74:77:e6:5f:32:1e:01:27:f3:91:47:d0:2d: 07:0a:be:fc:4b:a9:b0:10:0a:b9:64:1f:3c:9e:9d: ff:d8:14:0a:d6:d3:7f:b4:f1:5d:3e:00:6f:49:1b: 04:5c:28:ab:f6:34:a8:be:2f:f5:4a:1e:f4:9b:18: 52:22:29:e8:79:84:63:12:7a:dd:32:7d:1d:25:26: a5:ac:b8:cd:a0:84:cb:ae:d2:91:82:da:18:3b:6f: a2:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:F1:D8:03:EF:58:0B:4C:E6:FF:7B:CE:CB:78:68:76:D5:1F:D8:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:4c:b1:a5:f4:3d:15:d1:7c:56:13:a1:42:9b:76:0d:45:7d: 1e:7b:39:df:86:0b:d8:73:e4:5a:ba:cd:c6:a6:bd:d7:af:57: dc:a0:9a:e3:41:b1:17:e6:81:30:1f:9a:9c:89:72:59:aa:87: 6e:76:9b:64:87:38:54:33:74:dd:77:7f:5c:f1:35:86:23:36: 1b:82:30:c3:f4:79:55:95:59:6a:c9:87:d1:5c:5e:29:29:b2: f3:2a:78:02:a0:7d:75:af:63:d1:64:8d:19:43:69:56:40:b8: 72:d3:dc:6f:11:f6:23:86:03:68:60:00:fd:df:25:70:3b:25: fd:36:a2:2c:d6:b6:2e:54:fd:80:79:3b:ef:3a:d0:cb:63:8a: 82:9c:d6:4d:9c:97:2c:68:6d:d7:69:99:4f:be:8a:29:d5:c7: c6:98:8b:15:d6:2f:74:f2:38:58:20:d0:79:ab:b0:ce:e4:aa: 8b:3e:00:ed:7c:42:86:28:50:6b:48:4b:73:f4:6e:d3:26:59: ea:14:8e:78:3f:55:a8:fd:c1:4f:d8:91:75:1b:9a:71:ab:e7: 83:49:31:1b:08:15:61:35:e8:1b:a4:7e:0d:e1:2e:a6:7b:ae: 72:de:57:19:13:e0:34:aa:a3:e0:19:3b:35:90:6e:b2:31:47: 76:8c:03:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMrmbRLrivypg6AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZGY2OWNkODgtMDdiMy00MmFlLWExYmUtOTI0YzM3MGViN2EzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD0XHRmoItvLo4YpQldWCJhq8ZHB4TjgbSNY +N+CU2IXFTp03gT03S16iYQ0y0o7qkv6h4RotmInyllLysTg5mBUKQcsuwh/PDOs RBjy83gYU1V1KwvCwjU/T9PMUeNvvwImex4DisSB8e2ZDd8Rf/0KC+h0Bif7gTVC a4ZyZJaEJpQ1d/y6FP0OpW2q0hmztjXPkUC0HujFIx/JdABW5ft+lkKdrnR35l8y HgEn85FH0C0HCr78S6mwEAq5ZB88np3/2BQK1tN/tPFdPgBvSRsEXCir9jSovi/1 Sh70mxhSIinoeYRjEnrdMn0dJSalrLjNoITLrtKRgtoYO2+imQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBrx2APvWAtM5v97zst4aHbVH9i+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjk5YmNiNWItMDliZi0z MDY1LTkyN2ItN2MwMjQyMjI1MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIRMsaX0PRXRfFYToUKbdg1FfR57Od+GC9hz5Fq6zcamvdevV9ygmuNB sRfmgTAfmpyJclmqh252m2SHOFQzdN13f1zxNYYjNhuCMMP0eVWVWWrJh9FcXikp svMqeAKgfXWvY9FkjRlDaVZAuHLT3G8R9iOGA2hgAP3fJXA7Jf02oizWti5U/YB5 O+860MtjioKc1k2clyxobddpmU++iinVx8aYixXWL3TyOFgg0HmrsM7kqos+AO18 QoYoUGtIS3P0btMmWeoUjng/Vaj9wU/YkXUbmnGr54NJMRsIFWE16Bukfg3hLqZ7 rnLeVxkT4DSqo+AZOzWQbrIxR3aMA/E= -----END CERTIFICATE-----Generated at Thu Jul 10 03:11:33 2025 by rpki-client