$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa File: 5e58f758-d76b-3754-ab74-1dbca142d253.roa (raw, json) Hash identifier: xj4pqqLEea7yjV9nhsmk3unTmPLoj+fp73EVTKcBhYU= Subject key identifier: 36:FB:17:86:66:15:7C:32:7D:E7:57:66:EB:FE:29:A9:47:1E:52:43 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D1F4B5590D4F989D8740 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.49.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d1:f4:b5:59:0d:4f:98:9d:87:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=e6cc6f2f-cc3b-4075-90ae-1f96edd3bccb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:86:e5:3e:66:0a:06:25:ed:3e:53:cc:c7:0a: ca:a1:b3:44:8d:13:de:0b:49:7a:35:86:71:6f:b0: ff:76:c9:c4:26:0b:e8:74:9b:ae:6a:47:69:b8:77: fa:51:dc:fd:91:57:1c:f9:19:db:ef:e8:74:4c:3a: 13:9f:df:7f:4d:87:ce:88:a3:d2:31:80:c1:1e:f8: 2e:32:fd:19:04:ba:3d:5c:e6:e1:7f:41:c4:bd:89: b1:54:b7:fe:f7:63:40:75:b9:09:8f:e0:01:76:04: 6f:88:7d:0d:4b:bc:74:86:d5:4f:93:15:9b:f7:65: 8d:02:64:f5:ae:3a:29:1c:da:34:37:21:65:ea:86: 8a:ec:48:6c:80:39:36:ee:37:74:c9:15:88:72:b5: 38:54:8c:02:92:a4:67:2b:4c:40:1f:7c:f3:b8:66: 00:c2:54:28:cc:a3:73:82:61:fb:7c:c1:67:79:22: d2:4e:31:b7:a1:ec:a5:6a:d9:76:2a:bd:a6:94:52: 93:b9:f2:c6:0c:f5:37:d1:20:c1:04:54:db:7e:dd: 4e:28:51:40:f5:dd:d5:67:06:47:5f:d8:bb:a8:02: 42:ed:f6:71:7c:4e:fc:4a:cc:a5:83:6d:61:31:d6: a5:22:46:96:9e:26:d3:b5:03:30:0e:1e:94:af:1d: b7:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:FB:17:86:66:15:7C:32:7D:E7:57:66:EB:FE:29:A9:47:1E:52:43 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5e58f758-d76b-3754-ab74-1dbca142d253.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:0c:9f:62:e4:be:5c:a4:e5:55:23:4c:b2:28:d5:77:4c:4a: 8f:5e:cf:39:ff:2d:48:7c:52:a4:3c:b7:49:51:66:67:cd:01: f8:e2:72:c8:59:27:f0:93:be:d3:92:75:df:c7:ad:83:d8:48: dd:ff:75:ce:aa:c5:e9:c2:69:ca:6f:e7:f8:48:36:41:bc:64: 18:e9:b0:b0:f7:2c:bc:0b:25:4c:81:07:ef:88:73:2a:c8:92: 5a:73:51:f3:c4:b9:20:ea:45:65:c4:47:55:bd:8b:a8:d3:4c: 3d:99:01:ef:15:e5:fb:e9:d4:98:e6:24:9c:25:5e:71:63:a9: f8:bb:0b:c7:28:31:87:be:92:26:9e:3d:a1:80:ae:48:f9:65: 1d:49:45:bf:65:f5:f0:a8:df:85:8f:f3:1d:b1:a1:f9:e9:d3: 13:06:96:4e:06:29:7a:28:f5:b6:b7:d8:a1:74:e2:52:2a:06: 9d:a2:96:90:5c:b2:d4:30:ed:01:b5:49:3a:bc:b6:1b:9c:a2: 33:21:2f:ec:6c:02:41:94:a5:86:11:e4:24:a1:28:4d:68:fc: 96:40:4b:21:e6:8b:d9:d6:9b:47:e3:e9:e6:a1:73:05:c2:07: fe:ee:6a:dc:88:ae:aa:35:12:d3:28:a3:1b:a7:4d:d4:1d:6d: 5e:ba:d2:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNH0tVkNT5idh0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZTZjYzZmMmYtY2MzYi00MDc1LTkwYWUtMWY5NmVkZDNiY2NiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoblPmYKBiXtPlPMxwrKobNEjRPeC0l6NYZx b7D/dsnEJgvodJuuakdpuHf6Udz9kVcc+Rnb7+h0TDoTn99/TYfOiKPSMYDBHvgu Mv0ZBLo9XObhf0HEvYmxVLf+92NAdbkJj+ABdgRviH0NS7x0htVPkxWb92WNAmT1 rjopHNo0NyFl6oaK7EhsgDk27jd0yRWIcrU4VIwCkqRnK0xAH3zzuGYAwlQozKNz gmH7fMFneSLSTjG3oeylatl2Kr2mlFKTufLGDPU30SDBBFTbft1OKFFA9d3VZwZH X9i7qAJC7fZxfE78Ssylg21hMdalIkaWnibTtQMwDh6Urx23HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDb7F4ZmFXwyfedXZuv+KalHHlJDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNWU1OGY3NTgtZDc2Yi0z NzU0LWFiNzQtMWRiY2ExNDJkMjUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIMn2Lkvlyk5VUjTLIo1XdMSo9ezzn/LUh8UqQ8t0lRZmfNAfjicshZ J/CTvtOSdd/HrYPYSN3/dc6qxenCacpv5/hINkG8ZBjpsLD3LLwLJUyBB++IcyrI klpzUfPEuSDqRWXER1W9i6jTTD2ZAe8V5fvp1JjmJJwlXnFjqfi7C8coMYe+kiae PaGArkj5ZR1JRb9l9fCo34WP8x2xofnp0xMGlk4GKXoo9ba32KF04lIqBp2ilpBc stQw7QG1STq8thucojMhL+xsAkGUpYYR5CShKE1o/JZASyHmi9nWm0fj6eahcwXC B/7uatyIrqo1EtMooxunTdQdbV660mU= -----END CERTIFICATE-----Generated at Thu Jul 10 09:52:11 2025 by rpki-client