$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6bd5bd46-d446-3c99-90e4-84a0be26dacd.roa File: 6bd5bd46-d446-3c99-90e4-84a0be26dacd.roa (raw, json) Hash identifier: V7qN1EKsmA4ct9GT5RfTC6HM/7uaLReyJpF3f7ppsvY= Subject key identifier: BE:AD:09:FC:C7:15:7D:ED:57:64:86:77:B7:21:8B:BC:56:E7:C0:12 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D30BEA457DD73A3F9200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6bd5bd46-d446-3c99-90e4-84a0be26dacd.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d3:0b:ea:45:7d:d7:3a:3f:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c299b449-c793-4edb-84f3-ebfbd150a065 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:79:f2:c8:6a:4f:d6:b2:ba:28:a0:ca:3d:24: 95:e5:62:4b:17:0c:3a:b2:d2:ba:ef:a2:d9:5e:a1: 97:ce:c4:f2:13:54:2a:c4:4a:7d:99:18:d7:4f:30: 9e:7a:42:bc:d5:ed:b7:46:17:70:c9:b4:44:03:62: 68:fe:b5:8f:cf:b5:f4:01:a8:6a:27:cd:79:f8:74: d1:42:17:97:a6:c1:56:2e:8a:1a:08:2c:b1:e7:48: 4a:4f:4b:3d:f0:ca:e3:d7:f4:ba:b6:7a:85:a7:fa: 78:5d:bc:8f:5a:29:f3:39:9d:14:c9:58:f1:56:f2: 99:7c:d3:af:34:ae:16:12:19:93:12:65:b1:c0:79: f7:d7:29:fe:e6:6d:19:ce:49:ee:f1:57:14:e0:7c: d6:d1:d1:50:bf:3d:86:9d:ce:8f:79:5e:65:0e:f7: 8a:56:cd:f7:b1:83:1d:a5:dd:ae:ab:83:0f:0a:ec: 97:39:88:1c:41:84:a3:1e:4b:fd:07:83:ef:53:94: c5:4f:c1:9b:4a:e5:e8:f5:69:3b:de:e0:d1:c0:66: 53:fb:ff:d9:5c:88:8f:95:fd:11:7e:8c:17:1d:88: 3a:67:9a:9f:95:9c:c9:11:00:83:3e:95:a0:bb:f9: 54:25:9b:10:e6:93:14:b5:cc:bc:f9:82:16:98:7c: 67:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:AD:09:FC:C7:15:7D:ED:57:64:86:77:B7:21:8B:BC:56:E7:C0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/6bd5bd46-d446-3c99-90e4-84a0be26dacd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:b0:da:48:d6:86:25:9b:a0:07:ab:8f:e4:56:2e:60:1e:c5: 70:32:76:b8:5b:d4:c1:b5:6b:40:b4:1a:81:ca:43:7e:69:8f: 67:20:d6:cb:89:eb:f1:be:94:2b:2b:56:6b:56:bd:a5:4c:c7: 94:31:8a:8c:c7:7d:50:24:7a:86:cc:29:35:08:24:25:09:77: 7f:d6:f5:14:a2:97:ba:36:6c:39:7b:53:fa:06:8b:5f:4f:34: 8e:23:90:84:d6:58:7a:c6:75:aa:f6:83:ea:41:96:5f:fd:c9: 34:78:0b:b3:7a:3f:bf:83:9f:50:9b:7f:ba:dd:d3:02:a4:51: 8c:2a:e5:d2:c8:85:d2:8c:80:26:d6:40:af:b9:7f:9b:58:72: 5f:a0:3c:f7:f8:a5:55:6a:9a:37:ca:61:25:77:4e:01:77:3c: f0:cb:45:91:23:96:b6:77:be:4d:be:cc:ac:b9:22:ab:0a:e7: 0c:1b:69:c0:f8:79:8d:07:c7:0d:a2:cd:fd:db:6c:06:67:36: 66:e8:a9:26:b2:33:8c:4f:01:ef:d9:f2:7d:8b:ea:01:e7:08: c3:41:06:6c:2a:67:55:a4:d0:4b:c6:5f:f1:42:e4:3a:2f:42: 24:ae:b5:96:6c:80:29:81:36:88:9f:3d:14:34:fa:68:1f:45: d4:34:30:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNML6kV91zo/kgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzI5OWI0NDktYzc5My00ZWRiLTg0ZjMtZWJmYmQxNTBhMDY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr3nyyGpP1rK6KKDKPSSV5WJLFww6stK676LZ XqGXzsTyE1QqxEp9mRjXTzCeekK81e23RhdwybREA2Jo/rWPz7X0AahqJ815+HTR QheXpsFWLooaCCyx50hKT0s98Mrj1/S6tnqFp/p4XbyPWinzOZ0UyVjxVvKZfNOv NK4WEhmTEmWxwHn31yn+5m0Zzknu8VcU4HzW0dFQvz2Gnc6PeV5lDveKVs33sYMd pd2uq4MPCuyXOYgcQYSjHkv9B4PvU5TFT8GbSuXo9Wk73uDRwGZT+//ZXIiPlf0R fowXHYg6Z5qflZzJEQCDPpWgu/lUJZsQ5pMUtcy8+YIWmHxnmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL6tCfzHFX3tV2SGd7chi7xW58ASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNmJkNWJkNDYtZDQ0Ni0z Yzk5LTkwZTQtODRhMGJlMjZkYWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGmw2kjWhiWboAerj+RWLmAexXAydrhb1MG1a0C0GoHKQ35pj2cg1suJ 6/G+lCsrVmtWvaVMx5QxiozHfVAkeobMKTUIJCUJd3/W9RSil7o2bDl7U/oGi19P NI4jkITWWHrGdar2g+pBll/9yTR4C7N6P7+Dn1Cbf7rd0wKkUYwq5dLIhdKMgCbW QK+5f5tYcl+gPPf4pVVqmjfKYSV3TgF3PPDLRZEjlrZ3vk2+zKy5IqsK5wwbacD4 eY0Hxw2izf3bbAZnNmboqSayM4xPAe/Z8n2L6gHnCMNBBmwqZ1Wk0EvGX/FC5Dov QiSutZZsgCmBNoifPRQ0+mgfRdQ0MCE= -----END CERTIFICATE-----Generated at Thu Jul 10 08:49:10 2025 by rpki-client