$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa File: 4ab1410e-c41d-3b63-9e9b-64651e424f74.roa (raw, json) Hash identifier: fkWNWSFjxeqqAezRFwXZK1fiJjzbvH62I4CHSvmvQXA= Subject key identifier: EB:C8:87:08:30:4C:F9:39:8A:20:A9:F1:78:4E:FB:9A:DC:88:6B:64 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D479D33F23F9F292A380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.47.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d4:79:d3:3f:23:f9:f2:92:a3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=7664f63e-37f5-4d96-90da-79377e8f8a50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5d:a2:f4:5c:40:4b:d2:1a:a7:02:21:ad:d9: 67:04:9e:4e:02:c6:6e:8a:f5:a1:4a:ad:d7:22:e9: 4c:2b:48:6e:db:dc:93:d8:62:bd:8e:db:be:db:2f: 8c:28:5c:11:6c:f8:fa:fd:d7:d3:49:65:d6:f6:24: b7:ff:c4:11:3f:89:06:6c:6b:92:c7:4e:a9:e2:3c: c1:3e:6b:21:8f:0f:c4:b5:6f:d8:f6:fc:c0:0b:f4: 93:e3:72:ee:6f:ad:07:8a:a1:ca:a8:36:39:0b:e6: 26:de:90:ae:eb:3d:52:54:a5:60:28:04:4a:8e:89: 72:63:0d:c8:1c:f1:e2:ab:4a:56:ed:de:6d:78:9e: 1c:91:33:14:fb:23:3b:34:5c:73:be:13:b5:ca:d4: c1:f3:b4:66:a4:cf:86:29:0e:7f:49:35:dc:59:d6: 7c:76:e6:f4:07:1a:41:a1:91:c6:90:b6:95:58:5a: 28:fd:f8:af:96:14:76:ec:45:b3:df:19:74:5e:ee: 56:e0:de:2e:73:38:ff:fe:f6:03:52:69:68:5e:56: 1c:54:d5:28:8b:38:4f:e3:6c:6c:6c:04:67:f4:fb: 24:80:e7:51:11:e3:bc:86:93:02:9a:f2:17:0e:c9: 1f:5c:d6:76:a7:d9:24:28:e2:dc:48:10:10:53:72: 55:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:C8:87:08:30:4C:F9:39:8A:20:A9:F1:78:4E:FB:9A:DC:88:6B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:5b:08:35:f0:98:ff:4c:79:ca:77:27:f5:6e:3f:e0:b8:4d: b2:d9:95:8e:2c:dc:ee:c9:c2:19:b4:40:51:40:a7:80:09:71: f2:fd:14:0a:70:81:53:fa:a3:2c:86:67:5d:d8:6a:2b:99:f2: 38:95:34:96:fc:d0:df:af:2f:6e:bd:73:1a:00:b4:c4:b2:d5: 53:77:3b:c2:cb:6a:61:48:fb:9d:f3:e4:b8:b3:76:24:5c:2b: 1a:30:24:e6:21:a7:bb:0b:7d:63:6e:4e:40:a9:d7:52:b6:08: 69:63:10:db:8f:d9:d3:46:f8:5b:1d:a1:85:38:af:7c:f1:54: e3:d2:1a:f1:96:69:65:7e:28:db:84:c8:b7:e7:b3:c3:91:99: 8d:83:3e:a8:3f:f1:05:6f:18:31:eb:b4:24:82:76:9c:8c:dd: 5d:26:22:f8:eb:39:8a:4a:c0:29:5f:0b:c5:a5:f7:a4:1e:9d: ed:12:55:2c:f6:d0:8d:4b:2f:88:82:fc:75:f0:8c:7c:68:74: 3b:6f:44:65:20:ae:b2:14:c8:e8:21:8e:6e:f1:bd:3d:f1:59: ad:d1:bc:89:af:05:7a:be:e9:f1:8c:7f:97:27:95:ac:e9:04: bf:7b:bb:76:ba:00:51:ad:42:4b:f8:0a:75:df:0d:fb:31:ca: 72:1d:ab:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNR50z8j+fKSo4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NzY2NGY2M2UtMzdmNS00ZDk2LTkwZGEtNzkzNzdlOGY4YTUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwl2i9FxAS9IapwIhrdlnBJ5OAsZuivWhSq3X IulMK0hu29yT2GK9jtu+2y+MKFwRbPj6/dfTSWXW9iS3/8QRP4kGbGuSx06p4jzB Pmshjw/EtW/Y9vzAC/ST43Lub60HiqHKqDY5C+Ym3pCu6z1SVKVgKARKjolyYw3I HPHiq0pW7d5teJ4ckTMU+yM7NFxzvhO1ytTB87RmpM+GKQ5/STXcWdZ8dub0BxpB oZHGkLaVWFoo/fivlhR27EWz3xl0Xu5W4N4uczj//vYDUmloXlYcVNUoizhP42xs bARn9PskgOdREeO8hpMCmvIXDskfXNZ2p9kkKOLcSBAQU3JVSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOvIhwgwTPk5iiCp8XhO+5rciGtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGFiMTQxMGUtYzQxZC0z YjYzLTllOWItNjQ2NTFlNDI0Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHJbCDXwmP9Mecp3J/VuP+C4TbLZlY4s3O7Jwhm0QFFAp4AJcfL9FApw gVP6oyyGZ13YaiuZ8jiVNJb80N+vL269cxoAtMSy1VN3O8LLamFI+53z5LizdiRc KxowJOYhp7sLfWNuTkCp11K2CGljENuP2dNG+FsdoYU4r3zxVOPSGvGWaWV+KNuE yLfns8ORmY2DPqg/8QVvGDHrtCSCdpyM3V0mIvjrOYpKwClfC8Wl96Qene0SVSz2 0I1LL4iC/HXwjHxodDtvRGUgrrIUyOghjm7xvT3xWa3RvImvBXq+6fGMf5cnlazp BL97u3a6AFGtQkv4CnXfDfsxynIdqxw= -----END CERTIFICATE-----Generated at Thu Jul 10 02:09:03 2025 by rpki-client