$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa File: 2a6696a7-932c-33f0-8980-bef83d9fb70c.roa (raw, json) Hash identifier: T2PCqXzz4q7DVBnyU4m58p9DGQBWsGoZd/Bnp0bMNLc= Subject key identifier: 28:23:E1:EB:27:58:68:84:E5:E5:31:40:59:DF:CC:B8:2D:2E:60:0B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290C7E1F6E49EB084548080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.35.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c7:e1:f6:e4:9e:b0:84:54:80:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=a09636cc-4913-4e13-8bb7-5bae408e9cc4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3f:93:19:06:ef:c8:8f:95:ef:cd:72:0e:8c: ce:83:28:bf:5f:b8:3c:27:a9:e1:4f:4e:0c:23:0c: fa:5c:ea:59:57:0f:97:5f:41:c1:46:ec:23:3a:04: 19:f4:82:65:cd:42:e5:f1:63:6f:33:50:75:e2:1a: d2:50:05:22:47:b4:97:fe:6a:59:50:da:b2:41:f5: fc:b0:93:7e:4e:8d:f8:b7:59:75:bb:b8:9c:9c:34: 35:5e:8e:3c:61:18:eb:fe:b7:69:ec:41:d3:de:94: 73:09:53:08:e8:37:2c:1d:68:a3:13:86:22:56:00: 61:dd:19:6c:01:66:68:8d:4e:d2:bb:c8:56:08:ab: 98:7d:4e:90:df:4a:15:bd:ef:22:fe:cf:75:e4:5d: 5f:22:eb:b0:d7:6f:81:89:a1:af:75:93:d8:46:8a: 2b:9f:22:c3:69:46:f5:e5:4b:68:99:31:e0:f5:c5: d4:0e:46:cf:6d:83:c8:9a:d5:fe:ff:7e:b7:5d:72: 61:74:d7:a6:08:14:0f:83:d7:1d:82:31:35:40:8a: c7:94:06:57:fa:26:9b:97:cf:77:5f:25:d8:fe:0d: 03:27:dd:b8:33:aa:0b:bd:3f:19:4b:d0:e7:89:c6: cc:40:8a:28:60:cf:b8:84:9c:a5:a1:ec:6a:e7:f5: a3:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:23:E1:EB:27:58:68:84:E5:E5:31:40:59:DF:CC:B8:2D:2E:60:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2a6696a7-932c-33f0-8980-bef83d9fb70c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:de:24:c8:fa:aa:43:03:6f:32:5e:c4:4a:bf:d3:f9:df:53: 36:6d:cb:18:e8:c5:b2:5d:18:7e:3b:b8:09:da:16:aa:68:f2: cf:21:23:0a:de:81:a2:62:fb:dc:e5:35:ed:d3:dc:58:9f:f0: c2:62:32:c9:ae:a0:c9:c9:9a:07:cf:2c:9a:6f:7a:42:f6:c1: 6b:46:bb:18:11:75:0c:71:a5:43:96:1e:ad:19:c8:30:e2:19: 99:6c:d9:4e:d5:5c:b1:b8:81:b8:73:f3:57:3e:35:a9:d6:b6: 01:2e:48:76:0d:c5:5e:47:13:0e:de:ea:81:d5:05:52:5b:54: fa:5b:a9:c1:cf:f0:66:43:da:9e:67:d6:be:6a:08:9a:db:d6: 5c:6f:34:b4:df:bd:e5:43:27:56:7f:05:c5:a2:b7:eb:00:ee: 9e:48:b8:f0:d1:43:75:dc:78:93:be:23:d5:71:09:63:a8:d0: 2e:fc:d2:8d:2f:b5:2d:22:bf:cd:a8:15:21:e1:7a:b7:6b:49: db:31:d9:29:1b:89:63:57:26:a4:6b:7c:60:c2:31:5f:e6:07: 5d:05:05:16:7c:d3:5a:eb:8f:65:73:45:4c:3a:0e:90:dd:92: 6e:16:85:3b:cb:24:7b:fe:6c:99:ce:14:e2:f0:40:bb:84:61: 2a:d9:5f:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMfh9uSesIRUgIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YTA5NjM2Y2MtNDkxMy00ZTEzLThiYjctNWJhZTQwOGU5Y2M0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgz+TGQbvyI+V781yDozOgyi/X7g8J6nhT04M Iwz6XOpZVw+XX0HBRuwjOgQZ9IJlzULl8WNvM1B14hrSUAUiR7SX/mpZUNqyQfX8 sJN+To34t1l1u7icnDQ1Xo48YRjr/rdp7EHT3pRzCVMI6DcsHWijE4YiVgBh3Rls AWZojU7Su8hWCKuYfU6Q30oVve8i/s915F1fIuuw12+BiaGvdZPYRoornyLDaUb1 5UtomTHg9cXUDkbPbYPImtX+/363XXJhdNemCBQPg9cdgjE1QIrHlAZX+iabl893 XyXY/g0DJ924M6oLvT8ZS9DnicbMQIooYM+4hJyloexq5/WjZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgj4esnWGiE5eUxQFnfzLgtLmALMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmE2Njk2YTctOTMyYy0z M2YwLTg5ODAtYmVmODNkOWZiNzBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGzeJMj6qkMDbzJexEq/0/nfUzZtyxjoxbJdGH47uAnaFqpo8s8hIwre gaJi+9zlNe3T3Fif8MJiMsmuoMnJmgfPLJpvekL2wWtGuxgRdQxxpUOWHq0ZyDDi GZls2U7VXLG4gbhz81c+NanWtgEuSHYNxV5HEw7e6oHVBVJbVPpbqcHP8GZD2p5n 1r5qCJrb1lxvNLTfveVDJ1Z/BcWit+sA7p5IuPDRQ3XceJO+I9VxCWOo0C780o0v tS0iv82oFSHherdrSdsx2SkbiWNXJqRrfGDCMV/mB10FBRZ801rrj2VzRUw6DpDd km4WhTvLJHv+bJnOFOLwQLuEYSrZX9A= -----END CERTIFICATE-----Generated at Thu Jul 10 06:23:44 2025 by rpki-client