$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa File: 5b456bf4-139a-3442-9f58-1b5e542b743e.roa (raw, json) Hash identifier: r17Ecmigb1lA2DWrfeIYLmyf0qEA+8kPnV69qamXIoY= Subject key identifier: A1:83:CB:2E:A1:21:F6:0A:18:90:46:C5:5C:10:92:BF:44:4C:B6:6C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CB04D095C82A9049EF00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.62.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cb:04:d0:95:c8:2a:90:49:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=f7f20bef-2f02-4290-9be8-b8e8eadfed66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:d9:69:e9:e8:1c:86:7c:7f:1b:39:cd:23:c1: 6d:c4:48:87:8d:7f:16:a5:68:a9:51:89:00:db:ab: 9d:f4:ba:cc:63:18:2c:a9:aa:b9:38:eb:ba:35:53: c8:bd:0b:57:13:6a:5e:b2:7b:dd:eb:49:1e:16:85: fa:61:0c:c6:dc:22:b9:3f:7e:8f:6c:f1:c9:81:2e: d5:d4:f5:13:0a:36:1c:b3:a9:49:1e:e2:cd:17:20: fa:c4:b0:f3:ff:3a:4b:34:43:d5:28:cb:15:a4:26: 40:4f:cc:9a:44:b3:20:57:8b:c1:d0:11:63:44:6c: 0f:a7:23:71:b0:4a:3f:ec:d3:3f:de:01:53:44:16: 25:d6:b3:32:ef:5a:43:a7:f4:e0:f8:00:39:ed:33: 2b:9f:2a:37:db:48:99:b0:32:28:f4:56:84:5b:8a: bc:0a:5d:4a:0e:e4:06:45:59:20:25:d2:33:5b:3b: c7:1d:3c:dc:1e:5f:49:61:a2:91:0a:8b:98:a2:05: 39:e5:d2:f3:b5:8c:d7:8a:ed:44:f7:09:f6:8d:0c: a1:cc:b6:fa:87:1d:b0:67:3e:db:30:8b:49:fb:f1: 29:bf:fd:0c:d5:40:b7:42:24:a5:a3:b1:be:c6:47: cc:de:42:f0:2c:86:8b:90:98:4c:cf:0a:87:ef:e7: 73:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:83:CB:2E:A1:21:F6:0A:18:90:46:C5:5C:10:92:BF:44:4C:B6:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:1b:22:83:35:75:f6:cb:7c:73:a2:35:fc:61:bf:8c:1f:7f: 99:6a:e0:e8:87:29:d0:49:35:a7:e6:13:38:b2:d1:5f:0b:17: 1d:09:3f:b7:52:ce:b8:b0:98:dc:95:62:9d:70:a1:aa:85:35: 17:cf:56:93:a9:8b:e5:1e:13:c4:a7:55:a2:cf:84:9b:2c:94: 56:1e:35:74:9d:4c:5a:7d:be:43:aa:a9:18:00:a1:f6:94:f0: b8:23:0c:6c:cc:f0:ee:44:5b:f3:43:2c:35:e9:41:05:f2:e4: 86:0d:7d:8a:d4:20:c1:da:ce:0b:2e:40:cf:e5:55:23:31:fb: dd:a7:ae:b0:3a:3e:d5:ae:80:06:c8:1c:3d:af:59:d4:12:5d: 3b:80:61:68:2a:67:94:1a:08:09:a2:f0:cb:e9:70:b0:bc:5f: 90:d3:7e:fc:e9:e9:cc:be:42:1f:f6:a2:22:65:b8:c1:4b:8a: 34:e7:36:ac:cf:d0:f7:c0:bf:11:17:45:2d:26:ee:1a:46:f6: 57:cd:70:c1:5c:4b:1d:f4:ca:1b:fd:a6:8b:9b:03:aa:74:15: 29:f2:49:ba:cd:a6:08:d5:88:ce:11:7c:c6:71:52:0a:2c:0f: 9e:d4:d8:2b:04:e4:c7:ea:b1:7e:ae:01:74:53:d5:bf:c8:3c: 5a:d8:12:01 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMsE0JXIKpBJ7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjdmMjBiZWYtMmYwMi00MjkwLTliZTgtYjhlOGVhZGZlZDY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dlp6egchnx/GznNI8FtxEiHjX8WpWipUYkA 26ud9LrMYxgsqaq5OOu6NVPIvQtXE2pesnvd60keFoX6YQzG3CK5P36PbPHJgS7V 1PUTCjYcs6lJHuLNFyD6xLDz/zpLNEPVKMsVpCZAT8yaRLMgV4vB0BFjRGwPpyNx sEo/7NM/3gFTRBYl1rMy71pDp/Tg+AA57TMrnyo320iZsDIo9FaEW4q8Cl1KDuQG RVkgJdIzWzvHHTzcHl9JYaKRCouYogU55dLztYzXiu1E9wn2jQyhzLb6hx2wZz7b MItJ+/Epv/0M1UC3QiSlo7G+xkfM3kLwLIaLkJhMzwqH7+dz5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGDyy6hIfYKGJBGxVwQkr9ETLZsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNWI0NTZiZjQtMTM5YS0z NDQyLTlmNTgtMWI1ZTU0MmI3NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEcbIoM1dfbLfHOiNfxhv4wff5lq4OiHKdBJNafmEziy0V8LFx0JP7dS zriwmNyVYp1woaqFNRfPVpOpi+UeE8SnVaLPhJsslFYeNXSdTFp9vkOqqRgAofaU 8LgjDGzM8O5EW/NDLDXpQQXy5IYNfYrUIMHazgsuQM/lVSMx+92nrrA6PtWugAbI HD2vWdQSXTuAYWgqZ5QaCAmi8MvpcLC8X5DTfvzp6cy+Qh/2oiJluMFLijTnNqzP 0PfAvxEXRS0m7hpG9lfNcMFcSx30yhv9poubA6p0FSnySbrNpgjViM4RfMZxUgos D57U2CsE5MfqsX6uAXRT1b/IPFrYEgE= -----END CERTIFICATE-----Generated at Thu Jul 10 01:27:44 2025 by rpki-client