$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa File: 2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa (raw, json) Hash identifier: ib/KabaIsPw0C48q4mScc9VjDKNcSRWCHDn+7q2rBcE= Subject key identifier: E4:CC:92:94:72:86:36:54:98:64:1E:84:42:05:81:5A:21:ED:84:05 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290C88E5922229B6C125700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.61.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:c8:8e:59:22:22:9b:6c:12:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=0b25e968-4045-4dfb-ab2d-ef502dc05297 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:c7:8c:2a:1d:01:02:cb:c5:7e:cc:70:d7:f9: 7d:74:9e:89:f9:84:20:f4:7d:24:9f:6f:01:86:e6: 51:bf:80:20:f0:59:61:56:fc:97:73:82:e5:b2:9e: ca:22:2f:79:23:a1:ce:54:d6:a4:81:01:c9:e0:e5: 2b:6e:89:67:68:e5:ce:73:b3:d6:ec:f5:f5:e5:ee: 9f:28:d2:12:02:a4:2c:6d:55:04:6a:2d:96:34:b2: 99:29:63:d4:06:23:06:33:2c:7e:2f:23:ab:d2:78: 1e:9d:ba:e5:91:62:f5:22:d3:ce:a5:da:86:af:ba: 1a:62:41:1e:39:af:9f:b8:76:cc:8e:43:02:eb:9a: fc:bf:d8:31:31:63:05:fe:08:a9:fb:c0:c7:a2:b5: 62:77:b7:11:3c:a7:ca:3a:9b:71:78:66:26:c8:d7: b2:44:92:27:42:06:2f:40:f0:4e:bc:39:51:86:24: 1e:b6:7b:35:c9:4f:40:26:58:74:20:9c:2f:b1:1b: 59:1a:45:96:da:e2:5d:1a:9f:c6:f5:5e:bb:33:ab: 45:2f:d8:85:8b:cd:e2:c6:11:4c:20:f9:dc:4d:aa: a5:1f:d7:1b:ee:e7:e7:d1:90:b9:0d:75:14:45:f7: 4a:8e:c5:90:5b:48:a7:b1:72:6d:61:f6:d4:dc:4b: 8a:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:CC:92:94:72:86:36:54:98:64:1E:84:42:05:81:5A:21:ED:84:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2f348aff-d1f0-3495-bcdc-90cf09c5f20c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.61.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b0:56:80:0c:04:2f:c3:09:e8:42:17:64:f7:98:f3:83:31: d4:a8:f3:89:b9:a2:2a:0c:f7:48:61:af:9e:53:17:68:7a:3e: c2:39:c5:f6:68:d3:6c:28:41:bd:d7:46:e4:7a:49:ad:c6:e4: 2d:e2:89:43:3c:13:e0:93:0e:13:95:a7:53:bb:65:7c:2a:ef: b3:1c:84:1b:3a:0f:4a:4a:a4:83:1b:5a:a6:45:c1:c0:dd:e2: 2d:4d:03:86:14:29:22:57:1b:bc:36:12:ad:ae:40:c0:d2:01: 69:32:fd:6a:58:7a:b8:78:2d:fe:19:cf:41:e1:c0:d9:8f:0a: 1e:50:51:20:e3:03:66:ef:78:16:75:65:29:16:20:5f:7b:2c: 68:52:54:9a:ad:17:d5:ce:61:72:2d:87:46:de:de:e9:a3:94: 5c:38:3b:73:87:06:cd:be:f2:81:67:cd:fd:be:2e:13:17:c8: 5e:9d:4b:6d:5a:1a:5d:42:8b:9c:2f:81:62:ab:fa:1f:0a:b9: 7f:f0:f9:5c:6a:4e:4c:4a:d9:da:ae:d8:15:03:d9:7c:f6:26: 7a:9b:72:6d:5a:76:c1:d2:7d:21:32:52:88:28:f0:18:f7:65: b9:fe:16:74:cb:04:94:7e:19:3f:ac:48:37:d4:9d:08:83:52: 73:9a:b0:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMiOWSIim2wSVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MGIyNWU5NjgtNDA0NS00ZGZiLWFiMmQtZWY1MDJkYzA1Mjk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8eMKh0BAsvFfsxw1/l9dJ6J+YQg9H0kn28B huZRv4Ag8FlhVvyXc4Llsp7KIi95I6HOVNakgQHJ4OUrbolnaOXOc7PW7PX15e6f KNISAqQsbVUEai2WNLKZKWPUBiMGMyx+LyOr0ngenbrlkWL1ItPOpdqGr7oaYkEe Oa+fuHbMjkMC65r8v9gxMWMF/gip+8DHorVid7cRPKfKOptxeGYmyNeyRJInQgYv QPBOvDlRhiQetns1yU9AJlh0IJwvsRtZGkWW2uJdGp/G9V67M6tFL9iFi83ixhFM IPncTaqlH9cb7ufn0ZC5DXUURfdKjsWQW0insXJtYfbU3EuKwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOTMkpRyhjZUmGQehEIFgVoh7YQFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmYzNDhhZmYtZDFmMC0z NDk1LWJjZGMtOTBjZjA5YzVmMjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD0gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmwVoAMBC/DCehCF2T3mPODMdSo84m5oioM90hhr55TF2h6PsI5xfZo 02woQb3XRuR6Sa3G5C3iiUM8E+CTDhOVp1O7ZXwq77MchBs6D0pKpIMbWqZFwcDd 4i1NA4YUKSJXG7w2Eq2uQMDSAWky/WpYerh4Lf4Zz0HhwNmPCh5QUSDjA2bveBZ1 ZSkWIF97LGhSVJqtF9XOYXIth0be3umjlFw4O3OHBs2+8oFnzf2+LhMXyF6dS21a Gl1Ci5wvgWKr+h8KuX/w+VxqTkxK2dqu2BUD2Xz2Jnqbcm1adsHSfSEyUogo8Bj3 Zbn+FnTLBJR+GT+sSDfUnQiDUnOasMs= -----END CERTIFICATE-----Generated at Thu Jul 10 06:30:22 2025 by rpki-client