$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: HCSO5P8qEan28TuxZmOe2tp0y8qNF2RKo29ahDUXDSQ= Subject key identifier: DF:F8:2A:2E:CC:C1:20:8C:C0:69:CD:07:B7:12:3C:5D:FD:81:EA:F4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62908878BA5D4E0A23596700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:88:78:ba:5d:4e:0a:23:59:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=671c21b0-7a28-45dd-8749-69f1c7074f28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:65:eb:7e:25:9f:87:9a:cb:13:d9:d3:73:8f: 1f:29:6e:ed:3d:1d:2f:a9:b9:6a:63:b5:bf:d0:b7: 71:38:10:89:e5:f8:00:13:8f:af:da:ba:2d:7a:26: 3b:69:5a:df:d7:9a:75:0b:42:2b:a3:a5:78:02:3b: 54:89:11:29:e6:6c:46:e3:b6:bf:d7:f5:cf:4c:13: 9d:97:dd:9c:01:46:46:76:95:4b:89:06:54:ed:23: 68:e2:28:6a:dd:24:63:a6:11:10:b5:1d:95:e1:02: 47:05:fa:e7:e4:54:7f:79:5b:d3:f7:b6:03:73:99: 54:82:2d:cf:06:20:7f:a2:81:aa:91:0e:54:4f:b0: fd:08:8b:a5:bd:02:ae:47:c5:d0:1d:8e:15:eb:1d: 5b:6e:cc:36:ea:8d:0d:5d:ea:d5:74:85:be:11:90: 2e:41:61:55:70:99:cb:b6:3e:68:58:1e:ed:7e:7c: 7d:4f:a3:44:a4:a1:49:f9:96:ba:2f:f4:49:76:a5: 9c:76:bc:1a:af:dd:65:9e:b5:78:27:8e:fd:96:b3: 26:21:ec:7f:a4:45:b8:75:f4:4a:47:a7:74:37:7c: 28:42:73:85:37:96:3a:e2:86:fc:ae:7f:68:b3:5f: f7:f9:0e:64:35:d4:b3:50:a8:8e:88:31:c9:06:76: 51:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:F8:2A:2E:CC:C1:20:8C:C0:69:CD:07:B7:12:3C:5D:FD:81:EA:F4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:b6:87:16:af:14:7c:2a:ba:fa:e0:91:93:0f:0a:33:5b:d1: b6:05:2f:4c:db:5a:c4:4d:e8:9f:b4:65:80:26:5d:78:0a:46: f5:e1:fe:61:cf:8a:d5:00:74:bc:00:8f:08:b5:7f:aa:7e:51: 7b:31:92:57:02:7e:2e:3d:8f:c1:8b:d6:cb:fe:24:d9:f1:e8: dc:00:2e:18:4c:09:c9:26:26:22:4e:bc:16:71:8c:0d:97:bc: bf:0c:36:2b:1a:b3:05:b9:15:f3:54:5f:2c:89:a8:07:b2:87: e8:b9:a3:4d:e6:20:55:e6:6d:71:b1:29:0c:b4:a8:ed:d6:87: 57:6a:9b:53:89:ff:f9:0f:3a:bd:ed:01:9f:e3:4e:7a:e3:f2: 90:a9:fc:96:9c:bc:ca:c1:e1:5d:46:db:92:a5:8b:75:cb:bd: 6b:e8:0b:cb:9f:6d:f9:5c:6f:01:b0:e8:5f:3a:7d:3e:d0:6e: 06:92:a0:0d:00:b5:47:bf:a8:73:e6:99:f1:b3:73:e4:9f:0e: 60:b3:61:55:de:4b:14:89:b2:96:1b:7b:12:c9:07:f3:c9:2b: be:77:13:05:7b:81:75:4b:ae:75:10:87:78:c9:72:c3:27:89: 30:d3:5e:f3:43:bf:1e:9d:29:79:26:3e:73:a6:c7:82:bc:27: 9e:77:78:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIh4ul1OCiNZZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NjcxYzIxYjAtN2EyOC00NWRkLTg3NDktNjlmMWM3MDc0ZjI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWXrfiWfh5rLE9nTc48fKW7tPR0vqblqY7W/ 0LdxOBCJ5fgAE4+v2roteiY7aVrf15p1C0Iro6V4AjtUiREp5mxG47a/1/XPTBOd l92cAUZGdpVLiQZU7SNo4ihq3SRjphEQtR2V4QJHBfrn5FR/eVvT97YDc5lUgi3P BiB/ooGqkQ5UT7D9CIulvQKuR8XQHY4V6x1bbsw26o0NXerVdIW+EZAuQWFVcJnL tj5oWB7tfnx9T6NEpKFJ+Za6L/RJdqWcdrwar91lnrV4J479lrMmIex/pEW4dfRK R6d0N3woQnOFN5Y64ob8rn9os1/3+Q5kNdSzUKiOiDHJBnZROwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN/4Ki7MwSCMwGnNB7cSPF39ger0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABy2hxavFHwquvrgkZMPCjNb0bYFL0zbWsRN6J+0ZYAmXXgKRvXh/mHP itUAdLwAjwi1f6p+UXsxklcCfi49j8GL1sv+JNnx6NwALhhMCckmJiJOvBZxjA2X vL8MNisaswW5FfNUXyyJqAeyh+i5o03mIFXmbXGxKQy0qO3Wh1dqm1OJ//kPOr3t AZ/jTnrj8pCp/JacvMrB4V1G25Kli3XLvWvoC8ufbflcbwGw6F86fT7QbgaSoA0A tUe/qHPmmfGzc+SfDmCzYVXeSxSJspYbexLJB/PJK753EwV7gXVLrnUQh3jJcsMn iTDTXvNDvx6dKXkmPnOmx4K8J553eEs= -----END CERTIFICATE-----Generated at Thu Jul 10 02:13:07 2025 by rpki-client