$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa File: 33de3db1-d0fe-39ef-89aa-f4ab70180372.roa (raw, json) Hash identifier: 0fB/Gt5SMlQcErUOG5ZVFc9qPRGxf/K2wawC9JiOG+I= Subject key identifier: D0:9D:DE:4A:02:0B:91:EB:3B:7C:0E:D0:F3:4A:3D:50:0C:98:0A:27 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290980ACFD91B8BF19CC180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.62.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:98:0a:cf:d9:1b:8b:f1:9c:c1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=5e5632d2-2f3b-47c0-af91-7d1f81ba9066 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:df:c4:4f:2b:af:75:a5:4b:2e:6d:1b:25:67: 90:9a:8d:de:b6:e9:a1:7b:fb:c7:8d:d6:18:f1:1e: ef:e4:f5:7e:f8:de:da:0f:d7:1e:53:69:4c:5a:5e: f9:95:6a:03:60:fc:9f:29:90:9a:c9:11:db:e6:f7: 1a:24:7f:a0:79:10:4e:39:e3:49:aa:9f:9c:29:80: 79:45:f6:11:ff:72:3f:c5:25:22:81:d8:c3:55:8f: b5:cd:7d:72:9b:e6:69:7a:ab:d5:8f:cf:fa:44:bb: 36:18:c3:49:a7:da:87:82:9c:0b:0f:c6:d9:4d:71: 66:06:71:2b:58:b7:bc:48:33:35:98:74:8d:5c:2e: f2:7b:cc:c1:1c:71:56:92:44:a8:45:f3:52:9f:5f: 17:3d:91:9b:29:fc:bd:9b:4c:26:de:10:d3:c4:53: ed:0e:af:81:a0:0e:0f:f5:83:88:cf:86:c8:6c:3d: b9:76:09:d0:ca:7e:c3:0e:1e:9c:4a:27:5e:db:e5: 08:cc:53:4a:a0:27:84:22:4b:8d:27:25:d9:3f:b6: 3e:32:da:0d:19:ce:e0:6e:1e:7e:9a:64:92:62:f3: 6e:e3:2c:48:26:65:7e:ac:1e:b6:58:14:38:1a:68: c8:cd:90:eb:ac:19:7d:fa:c1:20:30:e1:86:9e:25: 60:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:9D:DE:4A:02:0B:91:EB:3B:7C:0E:D0:F3:4A:3D:50:0C:98:0A:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/33de3db1-d0fe-39ef-89aa-f4ab70180372.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:6a:5f:d1:f4:73:16:bb:c0:ce:94:c6:fb:92:43:bb:5a:62: 3b:93:84:b8:d8:4d:c0:03:3d:ca:ac:ed:da:e6:3c:dc:7f:a2: 5b:82:d7:d1:81:2e:57:e0:23:b2:10:3a:d9:58:1e:ab:2f:87: 7b:22:8c:cd:22:d1:34:9d:5e:68:8f:68:70:72:a9:54:d4:15: 41:84:ea:2f:ab:c0:34:49:35:15:d6:32:55:39:f8:fc:92:16: 58:dc:27:ff:85:94:c4:b4:22:ff:76:9f:bc:03:dd:3a:4d:a4: a8:70:0a:d9:c7:58:1b:3a:42:d3:6d:cf:4f:6f:1f:1b:ae:26: dd:8d:28:f1:86:5c:c9:04:27:98:df:e0:52:aa:3f:c8:65:b5: bf:48:d9:0b:ef:ea:62:cc:ee:c8:1f:8c:45:8a:ce:62:37:72: da:77:23:6b:23:ae:a8:05:39:03:79:1e:cc:46:aa:35:60:eb: 2e:ea:f7:d4:d4:55:d2:14:ab:7c:98:41:9b:aa:91:09:87:52: fc:ad:aa:ca:73:28:f9:b4:f4:d5:61:cb:1a:b5:8f:86:27:e0: 9d:f7:53:1d:b2:5c:bb:7d:7c:b7:bb:6a:48:a0:b5:6c:7f:b8: 2f:1d:1c:13:b9:68:9b:b5:6f:d5:30:b8:dc:50:d7:ed:83:88: 93:a6:6b:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJgKz9kbi/GcwYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NWU1NjMyZDItMmYzYi00N2MwLWFmOTEtN2QxZjgxYmE5MDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgd/ETyuvdaVLLm0bJWeQmo3etumhe/vHjdYY 8R7v5PV++N7aD9ceU2lMWl75lWoDYPyfKZCayRHb5vcaJH+geRBOOeNJqp+cKYB5 RfYR/3I/xSUigdjDVY+1zX1ym+ZpeqvVj8/6RLs2GMNJp9qHgpwLD8bZTXFmBnEr WLe8SDM1mHSNXC7ye8zBHHFWkkSoRfNSn18XPZGbKfy9m0wm3hDTxFPtDq+BoA4P 9YOIz4bIbD25dgnQyn7DDh6cSide2+UIzFNKoCeEIkuNJyXZP7Y+MtoNGc7gbh5+ mmSSYvNu4yxIJmV+rB62WBQ4GmjIzZDrrBl9+sEgMOGGniVgCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNCd3koCC5HrO3wO0PNKPVAMmAonMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzNkZTNkYjEtZDBmZS0z OWVmLTg5YWEtZjRhYjcwMTgwMzcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD5AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFqX9H0cxa7wM6UxvuSQ7taYjuThLjYTcADPcqs7drmPNx/oluC19GB LlfgI7IQOtlYHqsvh3sijM0i0TSdXmiPaHByqVTUFUGE6i+rwDRJNRXWMlU5+PyS FljcJ/+FlMS0Iv92n7wD3TpNpKhwCtnHWBs6QtNtz09vHxuuJt2NKPGGXMkEJ5jf 4FKqP8hltb9I2Qvv6mLM7sgfjEWKzmI3ctp3I2sjrqgFOQN5HsxGqjVg6y7q99TU VdIUq3yYQZuqkQmHUvytqspzKPm09NVhyxq1j4Yn4J33Ux2yXLt9fLe7akigtWx/ uC8dHBO5aJu1b9UwuNxQ1+2DiJOma4I= -----END CERTIFICATE-----Generated at Thu Jul 10 08:59:22 2025 by rpki-client