$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa File: 39708eac-3243-3a6a-88da-6bc7ae510463.roa (raw, json) Hash identifier: l4Y3NPyqlPZMFw4YZfT4mHB7diSUmP7xy2mGgV5y0Ds= Subject key identifier: 0E:BF:3C:C8:D7:63:C2:06:B7:F9:0F:56:21:70:54:D2:36:25:1E:13 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D35375925D6E49075840 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.33.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d3:53:75:92:5d:6e:49:07:58:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=b1f1fea7-fa6c-4211-bcbf-2867d1f214a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:90:cd:82:5d:70:69:98:30:71:91:0d:03:19: 54:74:09:63:96:77:5d:7c:9d:06:ad:92:15:a5:2a: 3c:78:48:95:c0:cc:83:e0:f7:b6:46:af:8f:e2:80: 80:7a:d2:01:02:3b:52:c6:db:d9:80:72:3f:78:b7: 8c:09:ab:2e:5d:ee:ac:a0:0e:b7:f3:61:23:9d:84: 31:16:d1:3c:82:44:6a:84:cc:ae:e4:ee:98:de:2d: 11:0b:74:09:0a:7e:6d:60:5f:13:fd:b5:15:06:ad: 88:2d:08:33:4c:7c:b2:1f:98:72:aa:c1:61:d6:8d: 51:1b:51:b8:eb:0f:d1:a7:2e:8a:a7:b9:a1:b9:c6: ab:9a:d7:85:01:4d:d8:45:51:d9:a6:d5:3d:61:b4: fd:89:91:12:b6:53:28:1e:df:6e:35:55:4e:01:46: 23:97:6b:7c:3c:b3:d0:70:86:fb:fa:88:fa:14:d0: fc:ec:b1:e8:fb:ea:89:5b:bd:64:e5:9c:18:e8:0e: 93:97:41:66:2e:f9:27:1d:2b:33:8d:97:96:94:ec: b8:bc:30:5c:2e:61:6c:46:e9:ee:62:b4:f5:17:66: 05:d4:f6:b2:6d:97:41:f3:cc:c4:99:03:45:6b:4e: 38:ee:ce:b8:49:c4:6b:84:ea:b6:d6:40:b3:aa:2f: 5f:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:BF:3C:C8:D7:63:C2:06:B7:F9:0F:56:21:70:54:D2:36:25:1E:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:1c:38:2a:f2:fc:2e:1b:dd:96:ab:63:1c:30:59:8e:a2:ed: 0f:dc:af:a6:93:0e:52:41:ab:76:b4:d0:db:40:ca:cd:ff:d5: d3:b0:5c:e4:78:d4:2f:0d:c6:62:38:61:98:d4:18:89:d3:21: 04:7f:cd:38:b3:af:07:9f:d7:76:2a:c8:69:87:de:2f:d3:4a: 30:24:18:82:da:b3:e1:66:3c:f5:ef:4e:21:8a:82:99:5f:39: 4d:e3:66:f0:d2:bd:30:0c:71:35:9a:89:d8:8f:7b:d8:7f:b5: c1:63:a9:d6:b1:f2:06:0c:8d:ff:1b:de:21:ff:15:dd:53:6b: 36:7e:e1:50:13:55:38:60:26:cf:b2:b4:41:3a:66:b3:f0:51: d4:02:8b:93:20:ec:5d:45:c7:bc:c9:5f:3e:65:33:8b:2b:d4: f5:a0:d0:75:1d:0a:bd:e0:67:ab:c0:1a:1a:d2:7d:04:f4:7c: f9:ce:f9:a5:da:35:ff:1c:d2:4f:c0:15:71:fb:03:bc:6b:46: ce:71:b3:d4:ad:42:47:17:60:02:63:fa:1d:ef:98:c7:01:f0: 1f:ec:a2:53:39:9a:0b:76:26:6f:4a:02:d2:cb:61:d8:41:52: a7:63:12:c9:b1:e2:51:74:17:53:6e:0f:6d:ab:8a:6b:f8:67: 98:6b:97:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNNTdZJdbkkHWEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YjFmMWZlYTctZmE2Yy00MjExLWJjYmYtMjg2N2QxZjIxNGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3ZDNgl1waZgwcZENAxlUdAljlnddfJ0GrZIV pSo8eEiVwMyD4Pe2Rq+P4oCAetIBAjtSxtvZgHI/eLeMCasuXe6soA6382EjnYQx FtE8gkRqhMyu5O6Y3i0RC3QJCn5tYF8T/bUVBq2ILQgzTHyyH5hyqsFh1o1RG1G4 6w/Rpy6Kp7mhucarmteFAU3YRVHZptU9YbT9iZEStlMoHt9uNVVOAUYjl2t8PLPQ cIb7+oj6FND87LHo++qJW71k5ZwY6A6Tl0FmLvknHSszjZeWlOy4vDBcLmFsRunu YrT1F2YF1PaybZdB88zEmQNFa0447s64ScRrhOq21kCzqi9fwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6/PMjXY8IGt/kPViFwVNI2JR4TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzk3MDhlYWMtMzI0My0z YTZhLTg4ZGEtNmJjN2FlNTEwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJgcOCry/C4b3ZarYxwwWY6i7Q/cr6aTDlJBq3a00NtAys3/1dOwXOR4 1C8NxmI4YZjUGInTIQR/zTizrwef13YqyGmH3i/TSjAkGILas+FmPPXvTiGKgplf OU3jZvDSvTAMcTWaidiPe9h/tcFjqdax8gYMjf8b3iH/Fd1TazZ+4VATVThgJs+y tEE6ZrPwUdQCi5Mg7F1Fx7zJXz5lM4sr1PWg0HUdCr3gZ6vAGhrSfQT0fPnO+aXa Nf8c0k/AFXH7A7xrRs5xs9StQkcXYAJj+h3vmMcB8B/solM5mgt2Jm9KAtLLYdhB UqdjEsmx4lF0F1NuD22rimv4Z5hrl54= -----END CERTIFICATE-----Generated at Thu Jul 10 03:26:00 2025 by rpki-client