$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa File: 7414e153-6a51-342c-a0c1-785f5d538a41.roa (raw, json) Hash identifier: wSS6jac5Bo1IIvUFxh3MeAnhWOEeAy+se5/KetA9lPo= Subject key identifier: 04:BD:25:6D:76:8C:BC:09:10:50:D4:52:9F:DC:20:EA:68:28:2D:A8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CC5C7DACC5CF20168680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cc:5c:7d:ac:c5:cf:20:16:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=533f6abe-0f95-4013-aa33-fbcab1332349 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:cd:1f:5a:44:53:e1:1a:9e:ac:67:53:be:55: 25:0f:ab:f1:f8:b0:e4:68:d3:85:81:b0:04:83:71: dc:c1:b7:9b:9e:77:74:86:13:04:f2:0a:bf:ee:ad: db:bf:bd:4c:67:90:c4:a0:ff:0d:4a:ed:f8:2b:2e: 54:74:0d:7d:bf:86:62:6e:18:ae:19:0c:45:c5:4e: ed:bf:cb:ce:ba:5a:5d:51:d7:4e:99:00:34:d0:63: 65:c5:a2:fc:92:41:b6:84:62:ba:e7:96:72:dc:73: 6d:d7:f4:1d:f4:2f:7f:61:5a:bb:f7:71:b7:77:9a: 93:01:d3:fb:b2:41:9b:cd:73:da:d1:d4:51:3b:e6: 19:55:25:d1:f5:1f:4f:d3:f8:65:1a:2d:24:ce:6f: a9:3a:ed:7c:83:ed:65:2a:12:25:90:ff:94:21:90: 94:cc:0f:35:4e:1e:8c:71:0b:2f:3e:c3:9e:09:b8: 6c:c5:41:62:9a:ab:30:39:9b:0e:14:8b:1e:05:a0: 77:56:1f:98:9d:96:e1:7b:29:a5:4f:4b:6c:59:ed: 4b:6d:20:96:ff:55:b5:e1:88:65:e4:df:14:a3:60: 60:8f:2c:16:99:c0:85:4a:d0:cd:a5:0e:e2:da:a4: 22:d3:43:27:72:6c:4d:94:eb:2b:7e:7b:93:3c:29: ac:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:BD:25:6D:76:8C:BC:09:10:50:D4:52:9F:DC:20:EA:68:28:2D:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:33:18:f3:af:94:4a:19:22:4d:06:da:2d:95:6f:2a:01:89: 2e:df:da:74:16:03:6e:ad:4e:73:8a:a4:80:69:05:5b:22:54: 6f:49:4e:b3:ca:81:fc:70:6f:0b:00:25:22:83:12:bc:f8:7f: a7:99:60:58:0c:ce:5b:9f:24:2b:ba:5f:b8:7d:30:9d:8f:e9: 45:cf:ce:c9:98:ec:4e:9b:da:e2:08:20:65:5d:fa:f8:83:28: 13:2c:83:2a:2a:71:9e:c5:20:a6:41:a8:62:05:39:e1:50:3f: 6e:f2:97:04:ee:0f:59:67:4c:b5:db:30:61:25:e7:86:35:eb: b2:48:cb:90:1a:60:4a:4a:ed:e8:5e:3c:16:01:72:86:27:04: a2:a5:9b:b1:29:8e:10:28:b1:4d:ea:d6:09:36:e9:1d:7b:65: 1b:b0:70:20:13:97:89:40:52:19:c7:e6:0b:7a:0b:4d:58:81: 2e:11:6c:d5:dc:ce:62:ff:f6:00:c0:a5:93:c2:f5:fe:1f:03: 79:a4:8b:64:3a:8f:c1:ca:7a:ac:3c:53:ac:49:e6:05:1f:fd: a9:ea:08:8a:b2:4a:6f:20:cf:91:e8:54:28:8a:36:d9:3f:29: 28:64:9c:e1:fd:cf:ea:3c:df:0f:e9:fc:39:cb:aa:2a:bc:00: 41:ba:f9:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMxcfazFzyAWhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NTMzZjZhYmUtMGY5NS00MDEzLWFhMzMtZmJjYWIxMzMyMzQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxM0fWkRT4RqerGdTvlUlD6vx+LDkaNOFgbAE g3Hcwbebnnd0hhME8gq/7q3bv71MZ5DEoP8NSu34Ky5UdA19v4ZibhiuGQxFxU7t v8vOulpdUddOmQA00GNlxaL8kkG2hGK655Zy3HNt1/Qd9C9/YVq793G3d5qTAdP7 skGbzXPa0dRRO+YZVSXR9R9P0/hlGi0kzm+pOu18g+1lKhIlkP+UIZCUzA81Th6M cQsvPsOeCbhsxUFimqswOZsOFIseBaB3Vh+YnZbheymlT0tsWe1LbSCW/1W14Yhl 5N8Uo2BgjywWmcCFStDNpQ7i2qQi00MncmxNlOsrfnuTPCmsEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAS9JW12jLwJEFDUUp/cIOpoKC2oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzQxNGUxNTMtNmE1MS0z NDJjLWEwYzEtNzg1ZjVkNTM4YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAQzGPOvlEoZIk0G2i2VbyoBiS7f2nQWA26tTnOKpIBpBVsiVG9JTrPK gfxwbwsAJSKDErz4f6eZYFgMzlufJCu6X7h9MJ2P6UXPzsmY7E6b2uIIIGVd+viD KBMsgyoqcZ7FIKZBqGIFOeFQP27ylwTuD1lnTLXbMGEl54Y167JIy5AaYEpK7ehe PBYBcoYnBKKlm7EpjhAosU3q1gk26R17ZRuwcCATl4lAUhnH5gt6C01YgS4RbNXc zmL/9gDApZPC9f4fA3mki2Q6j8HKeqw8U6xJ5gUf/anqCIqySm8gz5HoVCiKNtk/ KShknOH9z+o83w/p/DnLqiq8AEG6+cg= -----END CERTIFICATE-----Generated at Thu Jul 10 02:14:32 2025 by rpki-client