$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa File: 428c695f-b851-3ba7-bd48-9c9714ffd37a.roa (raw, json) Hash identifier: dgHVNEg+Ph9Aurlu1rEAGE8SVE8QuX8/GjsIG3M5Z2U= Subject key identifier: A8:CB:1E:AA:6B:55:A0:99:60:6E:D7:FF:43:01:85:A2:ED:71:48:B5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290986553C8B92C2B2F6EC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.37.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:98:65:53:c8:b9:2c:2b:2f:6e:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=2e7f456c-7ab5-4efc-b6e0-70c8a1b4303f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:da:d5:bc:67:15:b8:b8:2d:8b:b3:5c:0f:23: 22:03:b9:5c:9d:de:a8:4b:03:d7:c0:a1:56:8a:54: 94:7f:81:3d:0e:dd:ec:ee:2d:17:f1:de:f7:27:69: b8:a4:ae:40:70:16:5f:eb:fc:59:b7:c8:2e:58:35: a8:08:e6:45:ce:33:a8:1a:fd:7b:17:01:7c:86:a0: 24:85:24:27:f8:b2:66:fb:a4:48:75:fb:f3:2c:50: f5:5b:cc:4b:4a:a4:b9:e6:f3:54:09:cc:76:5d:70: da:ae:b7:9f:8f:8c:01:b3:d9:ab:2f:7c:5e:a9:d8: 83:b7:53:ea:5a:b1:0d:16:c7:a8:1c:bf:18:18:61: c0:5f:f1:31:5a:7d:5b:6e:e9:a2:67:3c:3f:64:de: cc:9d:60:e3:82:2b:24:ea:4f:e5:4f:88:1b:72:de: 6f:ba:28:ce:da:64:e2:50:a5:f7:03:fc:26:6d:c9: 30:bf:e1:db:43:f9:37:92:ed:c8:24:b5:b4:4e:06: b5:67:99:3f:27:7d:66:48:2d:45:06:fc:15:57:4e: 2e:07:d7:85:f7:36:20:e2:6d:ef:cc:7a:ab:4c:f5: 87:bb:98:cb:17:dc:cb:f1:0f:27:b2:37:2f:e0:39: 3e:a1:72:44:e1:66:4d:0d:9e:12:7e:a3:16:d5:5b: ca:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:CB:1E:AA:6B:55:A0:99:60:6E:D7:FF:43:01:85:A2:ED:71:48:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/428c695f-b851-3ba7-bd48-9c9714ffd37a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:40:43:e8:a9:e4:bb:e6:d7:cd:34:4d:58:43:9c:9e:ba:e3: da:85:77:ab:02:cc:79:8f:f1:ac:2f:20:88:8d:69:f9:a0:7e: 94:84:71:ea:78:9c:db:37:be:81:10:7a:c0:02:c6:61:d5:31: b3:4a:7e:aa:5d:a8:7d:fd:b3:53:67:02:50:ca:fe:92:8f:fd: 66:f5:e7:64:b9:ae:1c:50:23:18:aa:3e:91:5c:d4:86:d1:59: e9:6a:1f:87:32:04:52:37:8d:58:b3:30:ae:8e:69:8d:61:0b: 89:14:78:b4:ac:55:28:31:d7:12:95:36:34:d3:46:0c:28:6f: 81:d9:9a:c8:1a:f8:2d:7a:68:c8:11:a6:9e:bf:f7:ae:60:d3: 4a:a9:e5:15:70:6f:98:07:1b:a4:26:c7:f4:1c:15:ec:12:e2: 05:4f:25:bd:d8:a9:d4:b8:56:04:be:cc:7e:4d:31:aa:f0:ae: bf:96:68:87:fa:af:b6:14:4e:7e:00:b9:d2:a4:ce:09:e7:8d: 0c:65:e5:ef:de:0e:9e:ee:65:a2:20:a6:18:e0:54:cb:54:89: ae:8b:3d:f8:1e:18:b8:10:d3:e5:33:ca:1a:e4:e8:db:3a:85: 9b:61:7a:73:aa:53:10:ca:23:de:c0:f8:8c:0f:71:e2:66:c4: 44:d0:14:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJhlU8i5LCsvbsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MmU3ZjQ1NmMtN2FiNS00ZWZjLWI2ZTAtNzBjOGExYjQzMDNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhdrVvGcVuLgti7NcDyMiA7lcnd6oSwPXwKFW ilSUf4E9Dt3s7i0X8d73J2m4pK5AcBZf6/xZt8guWDWoCOZFzjOoGv17FwF8hqAk hSQn+LJm+6RIdfvzLFD1W8xLSqS55vNUCcx2XXDarrefj4wBs9mrL3xeqdiDt1Pq WrENFseoHL8YGGHAX/ExWn1bbumiZzw/ZN7MnWDjgisk6k/lT4gbct5vuijO2mTi UKX3A/wmbckwv+HbQ/k3ku3IJLW0Tga1Z5k/J31mSC1FBvwVV04uB9eF9zYg4m3v zHqrTPWHu5jLF9zL8Q8nsjcv4Dk+oXJE4WZNDZ4SfqMW1VvK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKjLHqprVaCZYG7X/0MBhaLtcUi1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDI4YzY5NWYtYjg1MS0z YmE3LWJkNDgtOWM5NzE0ZmZkMzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF9AQ+ip5Lvm1800TVhDnJ6649qFd6sCzHmP8awvIIiNafmgfpSEcep4 nNs3voEQesACxmHVMbNKfqpdqH39s1NnAlDK/pKP/Wb152S5rhxQIxiqPpFc1IbR WelqH4cyBFI3jVizMK6OaY1hC4kUeLSsVSgx1xKVNjTTRgwob4HZmsga+C16aMgR pp6/965g00qp5RVwb5gHG6Qmx/QcFewS4gVPJb3YqdS4VgS+zH5NMarwrr+WaIf6 r7YUTn4AudKkzgnnjQxl5e/eDp7uZaIgphjgVMtUia6LPfgeGLgQ0+Uzyhrk6Ns6 hZthenOqUxDKI97A+IwPceJmxETQFF0= -----END CERTIFICATE-----Generated at Thu Jul 10 02:02:34 2025 by rpki-client