$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa File: 3b17455d-ed9b-356b-93a3-021986d9b8c9.roa (raw, json) Hash identifier: oKj/bzsKV2BNdbWzzJPlm+glLf0Ke5TjSyTn7EY2hUs= Subject key identifier: 39:3C:FD:46:AF:54:39:EE:98:5D:D5:2C:05:2B:DA:D1:D7:D6:E9:5C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CADA8141593B99493E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.0.0/11 maxlen: 11 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ca:da:81:41:59:3b:99:49:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=8542e9ce-62fb-4ce9-8993-db7cf0786f9a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:4b:41:e6:a4:72:a9:f2:bc:fb:c9:cb:b5:9c: e7:87:2b:1e:fd:61:d0:43:b4:35:52:bd:c6:3d:79: 71:4e:ce:71:28:70:c2:18:26:21:dd:3e:32:6f:52: 09:bc:4b:89:31:7f:9b:68:e8:92:67:8c:c9:7b:8c: 8e:96:52:c2:1e:ee:5f:da:c5:13:23:00:8f:41:e2: 1b:1f:29:20:c4:b9:56:e3:8d:aa:a6:55:45:5e:66: 8c:3c:75:54:71:60:53:63:bc:f7:39:f8:0f:3f:ab: dc:05:96:f5:29:f6:74:82:6f:d5:f4:06:2f:f2:66: 8f:e3:c9:a3:38:03:2c:04:25:60:9a:66:b4:45:ba: 1f:34:ac:f0:02:72:10:39:be:ab:8b:3e:98:5e:35: 1e:9a:ce:41:9c:3d:71:e7:e3:aa:62:84:95:01:cb: c4:06:0a:6a:a5:66:4b:d6:59:85:44:e9:98:1e:d4: 9a:db:c7:c8:b2:bd:03:9f:d7:94:51:6c:82:34:0b: 31:68:83:f1:d3:6d:a1:ea:f9:a9:23:26:09:87:a7: 42:6a:5e:08:a6:cd:84:93:a8:57:75:62:56:41:fe: 00:fb:e3:42:06:12:26:ed:1d:62:6d:d4:a6:7d:0f: ac:20:63:9f:71:9f:cc:a7:cd:73:5a:f2:31:47:4b: 59:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:3C:FD:46:AF:54:39:EE:98:5D:D5:2C:05:2B:DA:D1:D7:D6:E9:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3b17455d-ed9b-356b-93a3-021986d9b8c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.0.0/11 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:d2:69:bd:fc:b2:fa:7d:14:27:10:4a:3d:71:5c:37:6a:d7: 2d:1c:fc:74:45:cb:f2:73:8b:6c:58:1a:ef:05:cc:d2:cc:2c: 9f:b3:92:8b:30:ef:a7:c9:81:57:38:c5:95:9b:a1:11:7e:3a: 80:39:bd:3c:06:23:22:b3:0b:d4:ce:5f:f9:d3:4d:7a:26:76: 74:70:86:05:42:3b:3f:dc:a6:8f:24:7f:78:69:67:49:75:45: e5:b6:60:47:62:86:5f:72:65:20:58:ab:81:9e:52:eb:04:9b: 11:7a:09:8c:76:b7:7d:7d:3e:3f:a9:a9:1f:24:75:e3:ff:66: 20:9c:e8:03:a9:4d:57:a8:7d:4b:c0:95:7a:1c:bf:09:b5:8d: 83:7b:56:f8:89:7e:f6:8f:51:37:01:c5:05:8a:bd:b4:0e:7b: 16:46:3a:30:59:06:e0:25:20:01:78:07:ba:36:1d:36:16:8b: 3e:a8:a9:59:13:5d:05:e3:08:18:a5:a6:1c:78:1c:74:cc:fe: d0:ae:dc:33:c6:f0:14:2e:48:75:d9:36:b3:a5:ef:3d:e2:16: 60:1d:6b:75:14:78:5b:b4:5b:a2:f2:47:8d:c8:ba:22:a5:07: c8:62:17:40:bd:a3:27:3a:5d:28:fa:95:df:99:f6:02:e7:d5: a9:de:f7:96 -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpikMragUFZO5lJPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODU0MmU5Y2UtNjJmYi00Y2U5LTg5OTMtZGI3Y2YwNzg2ZjlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUtB5qRyqfK8+8nLtZznhyse/WHQQ7Q1Ur3G PXlxTs5xKHDCGCYh3T4yb1IJvEuJMX+baOiSZ4zJe4yOllLCHu5f2sUTIwCPQeIb HykgxLlW442qplVFXmaMPHVUcWBTY7z3OfgPP6vcBZb1KfZ0gm/V9AYv8maP48mj OAMsBCVgmma0RbofNKzwAnIQOb6riz6YXjUems5BnD1x5+OqYoSVAcvEBgpqpWZL 1lmFROmYHtSa28fIsr0Dn9eUUWyCNAsxaIPx022h6vmpIyYJh6dCal4Ips2Ek6hX dWJWQf4A++NCBhIm7R1ibdSmfQ+sIGOfcZ/Mp81zWvIxR0tZjwIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDk8/UavVDnumF3VLAUr2tHX1ulcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2IxNzQ1NWQtZWQ5Yi0z NTZiLTkzYTMtMDIxOTg2ZDliOGM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMFiCAwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEAStJpvfyy+n0UJxBKPXFcN2rXLRz8dEXL8nOLbFga7wXM0swsn7OSizDv p8mBVzjFlZuhEX46gDm9PAYjIrML1M5f+dNNeiZ2dHCGBUI7P9ymjyR/eGlnSXVF 5bZgR2KGX3JlIFirgZ5S6wSbEXoJjHa3fX0+P6mpHyR14/9mIJzoA6lNV6h9S8CV ehy/CbWNg3tW+Il+9o9RNwHFBYq9tA57FkY6MFkG4CUgAXgHujYdNhaLPqipWRNd BeMIGKWmHHgcdMz+0K7cM8bwFC5Iddk2s6XvPeIWYB1rdRR4W7RbovJHjci6IqUH yGIXQL2jJzpdKPqV35n2AufVqd73lg== -----END CERTIFICATE-----Generated at Thu Jul 10 01:18:33 2025 by rpki-client