$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa File: 2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa (raw, json) Hash identifier: L6miMWWLky+xVQibHbJ/jgatjExx7NIrVE9muyVoe3s= Subject key identifier: 83:6B:9C:EB:23:20:F6:73:B5:F9:40:89:C5:4D:4B:74:4D:F0:4D:B5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62907DC9D66E9F934CAAF380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.50.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:7d:c9:d6:6e:9f:93:4c:aa:f3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=8255cc5a-74d3-45e0-9a8f-df30e2d7fb53 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:23:1a:af:5b:1a:78:ea:49:de:d9:95:48:95: 90:6e:15:39:e1:db:e5:a2:dc:c3:c1:f8:c2:cf:79: 62:3d:a6:1f:a5:3c:d7:c8:5a:66:d2:bd:7c:e3:4e: 66:1d:40:bb:bd:f6:66:04:49:44:13:a5:ca:2f:44: f3:88:92:c5:19:4b:01:b6:dc:1b:62:22:b4:39:6c: 7a:ee:5f:34:29:c4:29:58:4c:9b:67:ea:bf:37:8e: 8a:f0:fc:d9:00:b9:0d:84:14:12:59:31:1c:dc:99: a7:c1:79:9e:b8:95:f7:37:e9:6a:af:99:e5:03:bc: b8:37:63:d3:3f:ef:40:0f:61:a4:68:79:00:16:e2: 50:d4:b1:b6:f9:97:66:11:80:56:d1:7e:46:dd:ef: 71:7d:01:89:6e:3a:5b:29:51:61:de:7e:7a:3e:b0: f1:f9:a9:d0:8d:9c:41:8a:a3:73:17:a6:d4:32:21: 57:74:8a:9e:af:66:67:61:4d:e4:fb:ae:40:88:2d: 37:74:d2:66:25:a9:47:c8:5b:0b:07:ac:8d:f5:b4: 4d:50:90:a7:55:a2:3c:c9:3a:69:21:1d:80:cf:d3: 81:47:91:18:41:42:0f:6b:34:96:1e:02:87:6a:f2: 44:af:b4:df:f4:4b:7b:c0:f0:07:63:a1:2f:4e:98: 08:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:6B:9C:EB:23:20:F6:73:B5:F9:40:89:C5:4D:4B:74:4D:F0:4D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2d123a98-4847-3cf5-8f33-7508cd1d30c8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:52:0b:c7:a6:e7:1e:0d:45:40:ee:04:b2:aa:e8:c0:aa:3e: e7:7f:f4:5f:af:7e:71:9c:08:01:55:22:b2:9d:4a:65:16:3f: 83:c0:66:0c:08:4f:79:58:87:59:76:e3:c3:76:8b:73:0f:58: 7d:de:9d:b8:50:fa:da:f2:7e:ee:15:5e:22:07:9b:2e:4a:35: 7f:a5:07:f8:18:09:1f:11:7b:db:53:fb:a7:63:e0:73:30:60: 0d:f8:07:a6:d9:a7:0a:9f:18:2c:7d:27:9e:ae:8c:ee:03:d1: ad:67:3c:b6:42:fb:bc:c6:83:50:67:d8:14:70:b2:fe:59:5b: 65:74:7b:e3:e1:b3:7a:d6:50:ac:89:12:a3:fe:22:2b:c3:42: a5:f2:f4:66:9d:dc:6d:82:1c:49:8d:19:85:d5:80:b0:c1:3f: 46:9a:dc:8b:e3:cb:4b:12:ba:91:3b:f7:14:c5:6f:6c:78:4c: 35:a0:0e:27:4e:79:e1:59:00:c4:ee:9c:d3:55:36:08:f5:ed: 2f:c7:91:4e:dd:80:cf:a7:7f:31:c5:25:cc:93:36:cf:e8:a6: 34:7b:80:b1:b1:da:0d:5c:3f:b8:eb:3d:44:aa:28:fc:d3:58: 25:a7:6d:44:8d:f4:77:b8:2e:b2:93:61:ea:b8:28:77:91:dd: d4:52:58:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikH3J1m6fk0yq84AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODI1NWNjNWEtNzRkMy00NWUwLTlhOGYtZGYzMGUyZDdmYjUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyMar1saeOpJ3tmVSJWQbhU54dvlotzDwfjC z3liPaYfpTzXyFpm0r18405mHUC7vfZmBElEE6XKL0TziJLFGUsBttwbYiK0OWx6 7l80KcQpWEybZ+q/N46K8PzZALkNhBQSWTEc3JmnwXmeuJX3N+lqr5nlA7y4N2PT P+9AD2GkaHkAFuJQ1LG2+ZdmEYBW0X5G3e9xfQGJbjpbKVFh3n56PrDx+anQjZxB iqNzF6bUMiFXdIqer2ZnYU3k+65AiC03dNJmJalHyFsLB6yN9bRNUJCnVaI8yTpp IR2Az9OBR5EYQUIPazSWHgKHavJEr7Tf9Et7wPAHY6EvTpgI0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFINrnOsjIPZztflAicVNS3RN8E21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmQxMjNhOTgtNDg0Ny0z Y2Y1LThmMzMtNzUwOGNkMWQzMGM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5SC8em5x4NRUDuBLKq6MCqPud/9F+vfnGcCAFVIrKdSmUWP4PAZgwI T3lYh1l248N2i3MPWH3enbhQ+tryfu4VXiIHmy5KNX+lB/gYCR8Re9tT+6dj4HMw YA34B6bZpwqfGCx9J56ujO4D0a1nPLZC+7zGg1Bn2BRwsv5ZW2V0e+Phs3rWUKyJ EqP+IivDQqXy9Gad3G2CHEmNGYXVgLDBP0aa3Ivjy0sSupE79xTFb2x4TDWgDidO eeFZAMTunNNVNgj17S/HkU7dgM+nfzHFJcyTNs/opjR7gLGx2g1cP7jrPUSqKPzT WCWnbUSN9He4LrKTYeq4KHeR3dRSWCc= -----END CERTIFICATE-----Generated at Thu Jul 10 08:56:23 2025 by rpki-client