$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa File: 5657d890-d69b-3941-a691-028f30555b49.roa (raw, json) Hash identifier: lpS80DMtzj7h6EM0kFVVkMhPRIZ549BugnSWYygJqQo= Subject key identifier: A2:56:68:DF:C7:17:20:75:62:B0:E4:D6:C9:95:EB:B0:B2:08:F1:B2 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A629099979EFA91FE8C24B140 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.56.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:99:97:9e:fa:91:fe:8c:24:b1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=890ad4ad-ac43-47df-90a4-97dc64b2e5a7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:59:23:9d:1e:99:05:a6:4a:bb:e2:4c:f5:b2: 26:98:54:ba:f7:93:11:ec:1a:7c:6d:78:56:8d:c8: 0b:02:66:46:3c:6b:98:da:59:10:4b:56:e1:7f:77: c7:3f:6d:87:69:16:cf:41:bb:97:94:23:79:51:c3: 3a:16:05:11:7f:0e:da:c8:3f:0a:d6:7a:52:f0:59: c2:85:08:6c:81:79:ac:f5:7f:92:df:f3:6a:70:e5: 41:08:4e:40:75:d1:9b:12:9c:8a:9b:53:53:97:3f: 23:75:75:b0:4d:f6:2f:22:49:dd:69:42:c3:84:6b: 4a:69:4a:fe:40:ae:b9:6e:4c:93:47:eb:9f:95:e5: 46:4a:0e:ca:c9:66:6a:79:2e:6b:0c:23:e3:15:65: f9:09:59:c1:1e:5e:ba:47:89:36:12:05:46:7f:58: 63:bc:dc:57:ea:30:3a:85:06:a9:6d:4a:08:47:ca: 77:44:c9:0f:8c:ac:10:ae:8e:db:f6:83:49:28:88: 0b:e8:45:c1:b8:b3:d4:14:85:4c:a7:e8:0f:eb:60: 33:34:6c:8e:c7:01:b5:fc:d9:db:67:67:9f:de:25: ae:fe:91:e8:c0:66:03:a0:43:5e:ba:49:eb:d1:dd: c1:a7:64:1d:a5:31:df:6f:ca:16:b3:d2:43:44:c9: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:56:68:DF:C7:17:20:75:62:B0:E4:D6:C9:95:EB:B0:B2:08:F1:B2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5657d890-d69b-3941-a691-028f30555b49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:8c:40:fc:29:d2:b6:2b:78:2c:ab:58:fa:fb:fa:e4:fa:fc: fa:1e:f5:f5:59:23:fb:84:76:fa:7f:8a:0f:55:1a:8c:74:5c: fb:92:c9:18:4d:4e:29:73:ae:e4:64:56:12:b3:66:f9:e4:90: a0:8e:fa:6a:cc:c1:f0:f6:1a:41:cf:de:5b:3a:3d:59:8e:43: 69:2c:8d:08:0a:d0:d2:f9:d1:63:3f:47:3c:19:67:a3:a6:c6: 4a:79:e9:7b:4a:7e:83:ad:60:e2:e7:d3:7a:a1:65:d8:6e:d6: ed:99:4c:86:00:df:ec:c9:13:ab:4e:7b:9b:75:1c:5d:34:ae: 0b:aa:45:5e:a0:07:66:1b:9b:b5:db:c1:6a:c8:27:75:fd:46: bd:e5:84:50:ba:37:3e:d8:c7:6b:61:04:b8:4f:9b:f1:0c:64: c2:a5:c2:42:64:78:29:58:06:d3:76:d4:5f:99:46:3a:fe:03: 49:bf:ba:9a:10:c8:cd:e3:74:2a:19:ff:9d:21:1f:5a:fb:26: 91:e5:b4:ea:5b:19:f3:48:5d:bb:85:99:59:e1:c2:92:09:00: f1:01:7a:d4:52:93:03:58:3f:ed:4c:5e:8d:b9:0a:bd:c0:0e: 7a:56:b1:8f:51:f4:11:e9:fa:68:d8:ec:5d:ba:6b:ac:b6:37: 4a:36:d0:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJmXnvqR/owksUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODkwYWQ0YWQtYWM0My00N2RmLTkwYTQtOTdkYzY0YjJlNWE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+lkjnR6ZBaZKu+JM9bImmFS695MR7Bp8bXhW jcgLAmZGPGuY2lkQS1bhf3fHP22HaRbPQbuXlCN5UcM6FgURfw7ayD8K1npS8FnC hQhsgXms9X+S3/NqcOVBCE5AddGbEpyKm1NTlz8jdXWwTfYvIkndaULDhGtKaUr+ QK65bkyTR+ufleVGSg7KyWZqeS5rDCPjFWX5CVnBHl66R4k2EgVGf1hjvNxX6jA6 hQapbUoIR8p3RMkPjKwQro7b9oNJKIgL6EXBuLPUFIVMp+gP62AzNGyOxwG1/Nnb Z2ef3iWu/pHowGYDoENeuknr0d3Bp2QdpTHfb8oWs9JDRMm9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJWaN/HFyB1YrDk1smV67CyCPGyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTY1N2Q4OTAtZDY5Yi0z OTQxLWE2OTEtMDI4ZjMwNTU1YjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDjAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiMQPwp0rYreCyrWPr7+uT6/Poe9fVZI/uEdvp/ig9VGox0XPuSyRhN TilzruRkVhKzZvnkkKCO+mrMwfD2GkHP3ls6PVmOQ2ksjQgK0NL50WM/RzwZZ6Om xkp56XtKfoOtYOLn03qhZdhu1u2ZTIYA3+zJE6tOe5t1HF00rguqRV6gB2Ybm7Xb wWrIJ3X9Rr3lhFC6Nz7Yx2thBLhPm/EMZMKlwkJkeClYBtN21F+ZRjr+A0m/upoQ yM3jdCoZ/50hH1r7JpHltOpbGfNIXbuFmVnhwpIJAPEBetRSkwNYP+1MXo25Cr3A DnpWsY9R9BHp+mjY7F26a6y2N0o20Mc= -----END CERTIFICATE-----Generated at Thu Jul 10 02:09:50 2025 by rpki-client