$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa File: 62c08158-0e7c-3b09-b973-f35c8fe33560.roa (raw, json) Hash identifier: 6ejp+VJZgyGQI41oX+XyYvdZrGKjGYMYHbyQpygnMF8= Subject key identifier: D6:36:A0:70:E9:4C:FB:5D:D3:25:88:94:FF:40:8F:E6:12:F3:7E:F3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CB3B89CFAE1952120820 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cb:3b:89:cf:ae:19:52:12:08:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=3eb63e04-66d7-4b29-aefa-b238a3339916 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:b0:20:71:ff:6f:eb:63:4b:4d:26:52:1f:eb: 58:69:be:6f:b1:b5:0b:57:39:36:42:29:b7:84:9a: 0a:9a:5f:66:e9:93:57:60:41:a5:58:4f:fc:5a:24: eb:7f:a6:5c:99:57:6f:8e:f9:e4:27:63:ec:cb:fd: bd:f0:b3:96:55:c3:8f:0e:c0:3c:b6:71:1a:85:f1: 96:b1:b7:aa:95:13:98:df:71:5c:dd:72:62:8b:13: c7:ce:32:e4:60:20:53:7a:9b:b3:b0:7a:c0:8b:e6: 3d:9e:94:3d:9f:8e:29:39:e8:9a:ff:a8:b9:c9:47: 65:2b:31:7c:b7:7c:0d:b2:c3:09:7d:17:ce:61:5f: ab:08:07:89:bc:4c:4b:b2:5f:7f:15:71:c7:45:b3: 79:be:8f:8b:d7:7a:30:3a:41:02:ff:94:5d:31:96: 67:68:1c:c2:f7:4b:26:a3:c4:08:01:ef:59:83:e8: 1c:dd:53:89:41:c2:ba:1f:f0:1b:79:87:a4:de:9d: 4e:17:34:54:1e:b6:3c:28:2e:ab:71:6a:8d:6c:99: 60:da:65:3f:07:f7:6b:e8:ed:50:ed:ab:d3:90:e2: c8:0f:6d:4c:97:e9:fe:32:3a:d5:00:26:f9:81:6f: 32:51:de:22:cb:84:ab:bf:cd:ae:fa:c4:b8:36:7b: e4:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:36:A0:70:E9:4C:FB:5D:D3:25:88:94:FF:40:8F:E6:12:F3:7E:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/62c08158-0e7c-3b09-b973-f35c8fe33560.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5e:93:e7:8d:42:94:66:7f:06:d6:3b:08:6a:2a:35:48:62:be: 07:b6:44:11:7f:03:6a:36:47:07:ba:64:f9:e3:00:5b:58:ac: c8:06:2d:ea:2f:f7:e4:75:02:58:77:5e:aa:10:c6:c5:91:88: 1b:f5:b2:35:68:9a:8f:05:aa:93:e0:81:95:0a:91:29:61:e4: 5e:92:42:b3:56:07:5a:2c:7d:4c:7a:00:e2:50:27:4d:76:64: ec:80:f7:87:37:b3:d8:8c:94:4d:55:bd:b6:dd:aa:73:2e:55: 99:5d:48:34:43:ce:9c:d2:cb:af:e5:fc:a4:29:18:25:1c:fe: 70:1e:0f:95:af:a8:90:0f:99:6e:e0:8c:3b:9c:d7:2b:a7:fd: 53:2d:59:7f:db:59:69:5d:d4:6d:81:6b:2a:14:40:21:23:a3: 0e:f0:a9:f2:55:e8:12:2c:18:c8:fc:cb:30:93:a7:cf:3e:18: c3:73:18:1b:16:49:93:0a:5e:37:81:c2:99:9e:aa:40:d5:af: 8f:2a:af:14:0d:c3:9e:5e:fc:91:15:93:b8:7b:7d:46:d4:46: df:5c:1a:2b:cf:40:47:01:06:32:d0:41:23:f7:f4:0e:8b:f2: cd:d0:a9:eb:28:7d:4c:de:35:b3:5b:91:d8:cb:3b:55:11:c3: 36:c0:d8:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMs7ic+uGVISCCAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk M2ViNjNlMDQtNjZkNy00YjI5LWFlZmEtYjIzOGEzMzM5OTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrAgcf9v62NLTSZSH+tYab5vsbULVzk2Qim3 hJoKml9m6ZNXYEGlWE/8WiTrf6ZcmVdvjvnkJ2Psy/298LOWVcOPDsA8tnEahfGW sbeqlROY33Fc3XJiixPHzjLkYCBTepuzsHrAi+Y9npQ9n44pOeia/6i5yUdlKzF8 t3wNssMJfRfOYV+rCAeJvExLsl9/FXHHRbN5vo+L13owOkEC/5RdMZZnaBzC90sm o8QIAe9Zg+gc3VOJQcK6H/AbeYek3p1OFzRUHrY8KC6rcWqNbJlg2mU/B/dr6O1Q 7avTkOLID21Ml+n+MjrVACb5gW8yUd4iy4Srv82u+sS4NnvkxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNY2oHDpTPtd0yWIlP9Aj+YS837zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjJjMDgxNTgtMGU3Yy0z YjA5LWI5NzMtZjM1YzhmZTMzNTYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF6T541ClGZ/BtY7CGoqNUhivge2RBF/A2o2Rwe6ZPnjAFtYrMgGLeov 9+R1Alh3XqoQxsWRiBv1sjVomo8FqpPggZUKkSlh5F6SQrNWB1osfUx6AOJQJ012 ZOyA94c3s9iMlE1VvbbdqnMuVZldSDRDzpzSy6/l/KQpGCUc/nAeD5WvqJAPmW7g jDuc1yun/VMtWX/bWWld1G2BayoUQCEjow7wqfJV6BIsGMj8yzCTp88+GMNzGBsW SZMKXjeBwpmeqkDVr48qrxQNw55e/JEVk7h7fUbURt9cGivPQEcBBjLQQSP39A6L 8s3QqesofUzeNbNbkdjLO1URwzbA2J8= -----END CERTIFICATE-----Generated at Thu Jul 10 06:20:14 2025 by rpki-client