$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa File: 3d0f2f83-fcef-3336-b059-f11f1b644441.roa (raw, json) Hash identifier: hKiSnIqkPh1rhUiCLlTqerkmTaCW0DJJvUvjDjOmrtg= Subject key identifier: F4:66:63:1B:CF:E3:FC:09:CD:A8:77:56:DD:92:F1:92:B6:B9:F1:8F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62908027580A97932A1D8F60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.34.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:80:27:58:0a:97:93:2a:1d:8f:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c17e2cf2-5eb4-40d6-bc9f-1b43984e8ff0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:8f:73:5c:b5:6e:1b:08:e3:97:58:10:94:f9: 95:f1:9b:00:5d:03:10:ca:c1:c9:93:ec:26:8d:af: cb:98:dd:31:fb:72:ec:a8:28:e7:47:76:f1:e7:72: f8:fc:1e:a9:1a:b0:7e:c6:2b:00:f3:6f:4f:57:65: d6:68:22:6f:3d:55:fb:63:cd:59:08:e3:d1:67:67: 2e:05:de:25:de:b0:db:e4:e1:a9:90:11:68:15:ec: 52:9b:e8:a6:59:57:6d:78:c2:a7:b8:42:f0:37:3d: 64:a2:5d:2e:41:d8:ca:ff:4f:a7:b1:bc:a7:05:b2: 48:d1:99:5e:a5:8f:2a:00:b6:a4:a9:00:18:7d:cc: 6c:20:fa:14:a4:48:4e:a7:aa:72:f7:ee:f6:c2:82: bc:cf:f9:f3:82:a1:41:df:35:22:cd:d1:a8:6d:d1: aa:8c:5e:70:9c:ad:0c:83:3a:94:62:5e:ae:1b:e1: 4c:f1:24:6e:59:0e:b1:c8:7e:18:70:49:ef:52:f7: 10:50:aa:ed:cd:f5:c0:36:26:c2:1b:e5:3e:9e:30: ab:c7:9d:e6:dc:1e:7c:a7:3d:69:e1:cf:2f:d7:98: b3:4d:e3:47:1e:1e:b6:f5:41:de:cd:99:5d:e2:cf: 88:17:66:31:07:72:83:d8:86:a3:30:7f:7d:8c:cf: ad:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:66:63:1B:CF:E3:FC:09:CD:A8:77:56:DD:92:F1:92:B6:B9:F1:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:44:00:c5:2f:b4:b2:a7:92:d6:8b:21:7d:b9:b8:a0:25:ab: ac:70:e6:b0:b5:af:fc:6d:d5:4c:44:b8:3b:1f:fc:cd:65:07: db:b7:8e:ef:4e:a6:3f:28:c5:9c:8b:63:bb:d1:f0:ec:5e:24: 29:66:6a:2d:32:d3:62:52:4d:5a:c1:f1:fd:19:ca:0c:9d:8f: b2:2f:b6:14:08:62:50:a0:fd:80:16:3a:72:2b:9e:6f:e3:c8: 9a:5a:28:2e:74:fb:f1:ba:67:4c:ef:0f:da:c0:c1:d2:42:95: ea:de:ae:de:74:6c:7f:03:08:55:83:84:b1:22:57:ff:e5:65: 6a:18:eb:fb:cc:e4:89:6f:f8:39:7e:e5:08:52:d0:72:bf:7b: 69:b4:11:f2:0a:61:d3:f5:08:c8:c4:d7:e4:0f:51:b6:57:6c: 95:11:a3:d3:92:03:2e:54:86:b7:68:54:d8:06:9b:de:bf:16: f7:6c:23:e7:eb:ec:3e:fd:fc:9f:2e:aa:2b:1e:e8:13:99:8d: 0a:92:72:07:18:c2:2a:e5:58:7b:74:45:76:51:ff:5a:b7:5d: 58:23:64:98:33:16:47:37:63:fd:61:bb:1e:59:3b:07:e1:2f: 14:2b:a4:43:78:b6:b9:60:09:ca:b3:2d:0c:86:66:46:ad:bf: 03:11:f5:ec -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIAnWAqXkyodj2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzE3ZTJjZjItNWViNC00MGQ2LWJjOWYtMWI0Mzk4NGU4ZmYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh49zXLVuGwjjl1gQlPmV8ZsAXQMQysHJk+wm ja/LmN0x+3LsqCjnR3bx53L4/B6pGrB+xisA829PV2XWaCJvPVX7Y81ZCOPRZ2cu Bd4l3rDb5OGpkBFoFexSm+imWVdteMKnuELwNz1kol0uQdjK/0+nsbynBbJI0Zle pY8qALakqQAYfcxsIPoUpEhOp6py9+72woK8z/nzgqFB3zUizdGobdGqjF5wnK0M gzqUYl6uG+FM8SRuWQ6xyH4YcEnvUvcQUKrtzfXANibCG+U+njCrx53m3B58pz1p 4c8v15izTeNHHh629UHezZld4s+IF2YxB3KD2IajMH99jM+t7QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPRmYxvP4/wJzah3Vt2S8ZK2ufGPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2QwZjJmODMtZmNlZi0z MzM2LWIwNTktZjExZjFiNjQ0NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFdEAMUvtLKnktaLIX25uKAlq6xw5rC1r/xt1UxEuDsf/M1lB9u3ju9O pj8oxZyLY7vR8OxeJClmai0y02JSTVrB8f0Zygydj7IvthQIYlCg/YAWOnIrnm/j yJpaKC50+/G6Z0zvD9rAwdJClerert50bH8DCFWDhLEiV//lZWoY6/vM5Ilv+Dl+ 5QhS0HK/e2m0EfIKYdP1CMjE1+QPUbZXbJURo9OSAy5UhrdoVNgGm96/FvdsI+fr 7D79/J8uqise6BOZjQqScgcYwirlWHt0RXZR/1q3XVgjZJgzFkc3Y/1hux5ZOwfh LxQrpEN4trlgCcqzLQyGZkatvwMR9ew= -----END CERTIFICATE-----Generated at Thu Jul 10 06:22:04 2025 by rpki-client