$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa File: 3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa (raw, json) Hash identifier: VIaQ0NatTN44hLb+Ks56H7JhHOnIw0JQfqfUJpxO1EA= Subject key identifier: E4:89:41:D8:04:49:30:5C:D3:E8:CA:73:11:28:5B:87:9E:6F:84:3F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909DB45E6642EAF3BCC020 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.38.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9d:b4:5e:66:42:ea:f3:bc:c0:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=9b8a179f-52b5-438f-8242-87efc98147f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:39:f9:c1:0b:48:95:00:5d:7f:5d:e1:20:fa: f1:c8:59:ce:9b:fa:0c:f0:d7:05:6f:41:43:23:d6: 88:b9:0a:12:7f:bc:a7:7d:7b:53:19:57:8c:f0:24: 6b:a4:e4:f1:e8:0e:1a:86:1d:36:6b:a3:06:19:80: 3b:6c:ef:ec:85:f0:54:d8:80:9a:df:26:f8:33:dc: 32:80:fe:46:fa:4c:6e:23:c0:61:c2:09:b1:4e:ae: cb:93:ef:b4:c8:8a:6b:cb:78:f1:e7:0e:10:45:9a: ca:2f:a1:d5:bc:8d:f0:6a:f6:ff:19:29:86:93:22: 2f:b8:8c:f5:1c:6e:c4:98:3f:03:30:7e:8c:97:27: 52:e9:e7:af:20:cd:64:05:a2:5c:aa:f3:2e:d9:c1: 44:36:9c:43:0d:2c:86:51:ac:d2:1b:28:27:56:60: 3f:66:ca:5f:05:b3:80:74:56:9e:f0:75:99:b2:29: 52:fc:f3:4f:dc:7b:71:a6:f7:4a:d3:6f:a5:e7:55: 4e:ce:fe:f7:c9:56:45:04:a6:5f:5b:9d:6a:26:1c: 89:01:06:87:74:a5:d9:b6:f0:87:9c:b2:a4:6e:1f: c8:b6:6c:89:e1:60:a0:0d:95:57:8a:b5:2f:65:e0: cd:7e:bc:b9:8e:dc:28:b7:c3:fa:2b:45:e9:f6:4e: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:89:41:D8:04:49:30:5C:D3:E8:CA:73:11:28:5B:87:9E:6F:84:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3ef18964-0b3f-3ff6-8463-8fda44463ef9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:6d:bc:24:a0:81:2e:82:40:a4:01:9f:0c:59:f9:0e:0a:86: be:54:68:ad:a8:68:54:7b:cc:12:41:83:86:0e:f0:34:0c:87: a0:34:00:41:ce:f7:96:a2:3e:fb:7a:a3:b0:08:f4:25:28:70: 5a:99:78:d8:20:b9:fb:b9:af:a2:2a:0d:a2:9f:74:2f:c3:ee: 55:98:49:56:61:47:ba:23:2d:fc:f7:2d:d6:99:f4:f5:9d:02: d2:78:7d:34:01:f6:5b:d9:07:32:7a:aa:ab:39:01:9d:78:ba: 97:e0:22:33:cb:8c:ec:91:85:25:dc:23:41:48:e9:ea:26:5d: 92:f7:c8:58:c3:aa:ff:f9:15:d6:d5:2c:03:00:ed:8f:1f:af: 61:56:40:38:5e:43:f8:11:19:07:d5:a1:42:9f:04:c7:9a:74: 08:f8:5f:a8:0e:49:aa:d2:56:56:9d:3f:aa:88:53:50:be:4d: 14:00:69:89:4c:8f:04:b5:c3:5d:fe:08:04:34:e8:d7:7e:c9: 91:3e:92:22:b6:51:66:af:ec:ef:8b:7b:04:5e:84:82:50:b4: 3f:ef:4a:d6:60:d4:4f:56:e3:78:c1:5d:95:75:3a:89:d9:82: a9:b7:d0:cf:dd:f1:ad:10:82:74:d4:a8:25:45:c8:16:99:1b: 10:a2:d1:6a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ20XmZC6vO8wCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk OWI4YTE3OWYtNTJiNS00MzhmLTgyNDItODdlZmM5ODE0N2YwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDn5wQtIlQBdf13hIPrxyFnOm/oM8NcFb0FD I9aIuQoSf7ynfXtTGVeM8CRrpOTx6A4ahh02a6MGGYA7bO/shfBU2ICa3yb4M9wy gP5G+kxuI8BhwgmxTq7Lk++0yIpry3jx5w4QRZrKL6HVvI3wavb/GSmGkyIvuIz1 HG7EmD8DMH6MlydS6eevIM1kBaJcqvMu2cFENpxDDSyGUazSGygnVmA/ZspfBbOA dFae8HWZsilS/PNP3HtxpvdK02+l51VOzv73yVZFBKZfW51qJhyJAQaHdKXZtvCH nLKkbh/ItmyJ4WCgDZVXirUvZeDNfry5jtwot8P6K0Xp9k4oKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOSJQdgESTBc0+jKcxEoW4eeb4Q/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2VmMTg5NjQtMGIzZi0z ZmY2LTg0NjMtOGZkYTQ0NDYzZWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD1tvCSggS6CQKQBnwxZ+Q4Khr5UaK2oaFR7zBJBg4YO8DQMh6A0AEHO 95aiPvt6o7AI9CUocFqZeNggufu5r6IqDaKfdC/D7lWYSVZhR7ojLfz3LdaZ9PWd AtJ4fTQB9lvZBzJ6qqs5AZ14upfgIjPLjOyRhSXcI0FI6eomXZL3yFjDqv/5FdbV LAMA7Y8fr2FWQDheQ/gRGQfVoUKfBMeadAj4X6gOSarSVladP6qIU1C+TRQAaYlM jwS1w13+CAQ06Nd+yZE+kiK2UWav7O+LewRehIJQtD/vStZg1E9W43jBXZV1OonZ gqm30M/d8a0QgnTUqCVFyBaZGxCi0Wo= -----END CERTIFICATE-----Generated at Thu Jul 10 02:25:36 2025 by rpki-client