$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa File: 881916d5-ef11-31e5-9d97-4820bcbafc92.roa (raw, json) Hash identifier: T8DW0+NcKWT5hu76AdgRs8b7mhiYNAHLZ+WbWGFvEe0= Subject key identifier: C4:1E:D8:0C:B6:8F:D9:72:74:E3:24:09:94:7A:29:EB:0C:C5:A1:86 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D31B1A343E6EEB9DC580 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.57.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d3:1b:1a:34:3e:6e:eb:9d:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=cbb770b2-5f5d-41bd-9b07-b0efd687b24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:81:30:ad:ec:7c:3c:68:ab:79:cc:58:4c:ae: f3:27:17:50:aa:3e:b2:de:d5:59:3c:85:80:95:91: 68:34:76:18:87:73:ee:d4:b3:be:10:49:9b:c9:9a: 24:66:47:0a:e1:2e:9f:f6:dc:64:f2:fd:84:92:49: b0:bf:3b:6f:a7:c6:87:7f:68:58:58:fe:89:c7:cc: 25:cc:02:f8:0c:ae:5d:a7:c7:ff:0c:b8:cd:b4:30: ba:41:e9:03:f4:dd:53:d7:ea:85:e5:e0:ab:a9:10: 80:f8:21:69:87:64:08:b9:b3:35:3c:3a:ee:fd:23: 79:25:4a:84:05:76:d5:8c:aa:07:a3:b5:48:bb:d9: 7c:c1:8c:60:a9:a3:5f:f7:64:de:de:e8:4d:48:60: 90:31:1e:47:f4:ab:72:6d:f3:a1:69:53:fe:50:f6: 1a:9a:f6:bb:cb:d7:4e:6c:8b:31:7a:34:af:5e:de: 53:f3:63:84:bb:69:15:f8:74:19:5f:db:4a:51:28: 93:63:fa:f6:37:3a:e3:6e:11:61:6e:6f:90:dd:5d: 61:45:27:07:22:97:da:d1:30:21:1e:64:f8:49:51: 34:b2:e5:1d:32:7f:6d:bd:71:10:0a:2c:69:2d:8e: 65:c7:1c:4f:5d:be:7b:e6:c8:d8:68:f1:c3:54:8b: 28:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:1E:D8:0C:B6:8F:D9:72:74:E3:24:09:94:7A:29:EB:0C:C5:A1:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/881916d5-ef11-31e5-9d97-4820bcbafc92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:81:38:4d:76:eb:93:32:d5:b1:53:21:7b:3e:89:7a:ce:69: 5a:81:be:b7:5c:4a:39:98:bd:f5:14:7a:5b:e8:ee:8f:3a:0b: c4:73:82:4d:ab:5e:71:83:38:e2:e0:d7:eb:09:1e:97:0c:b9: e6:ab:ef:da:20:0a:98:6d:e7:bd:2d:63:e1:d0:39:b3:81:43: e4:47:fd:bb:ce:45:e0:9f:07:7c:25:76:78:6e:e9:be:26:a5: d7:d9:57:33:b0:43:57:d6:aa:56:d0:0e:ae:0f:09:64:26:ea: c0:e8:0a:aa:1e:ad:ce:e2:b9:0f:57:f0:39:de:73:62:fd:bc: 91:54:21:f9:ec:b0:89:28:ff:6c:60:6b:98:cb:60:ad:0f:69: 9b:8f:4e:6f:e1:5e:1e:93:a3:79:39:34:0e:74:1c:ba:00:dd: 1f:18:7f:29:99:7c:5b:01:48:6c:51:5b:af:73:3c:e0:ec:f6: a5:0b:e7:51:c5:47:07:d4:52:12:06:84:e3:b0:3f:05:3b:cd: fa:4e:5c:0a:03:75:14:46:3b:69:a9:5a:82:bc:45:51:49:2f: ca:49:4c:8a:68:17:35:43:ec:74:8d:dd:e7:b9:56:3a:5b:26: 20:d0:71:85:f2:6b:21:36:96:2a:59:50:dc:2e:30:35:6f:4e: 04:a6:b3:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNMbGjQ+buudxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2JiNzcwYjItNWY1ZC00MWJkLTliMDctYjBlZmQ2ODdiMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYEwrex8PGirecxYTK7zJxdQqj6y3tVZPIWA lZFoNHYYh3Pu1LO+EEmbyZokZkcK4S6f9txk8v2Ekkmwvztvp8aHf2hYWP6Jx8wl zAL4DK5dp8f/DLjNtDC6QekD9N1T1+qF5eCrqRCA+CFph2QIubM1PDru/SN5JUqE BXbVjKoHo7VIu9l8wYxgqaNf92Te3uhNSGCQMR5H9KtybfOhaVP+UPYamva7y9dO bIsxejSvXt5T82OEu2kV+HQZX9tKUSiTY/r2NzrjbhFhbm+Q3V1hRScHIpfa0TAh HmT4SVE0suUdMn9tvXEQCixpLY5lxxxPXb575sjYaPHDVIsoKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMQe2Ay2j9lydOMkCZR6KesMxaGGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODgxOTE2ZDUtZWYxMS0z MWU1LTlkOTctNDgyMGJjYmFmYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ6BOE1265My1bFTIXs+iXrOaVqBvrdcSjmYvfUUelvo7o86C8Rzgk2r XnGDOOLg1+sJHpcMuear79ogCpht570tY+HQObOBQ+RH/bvOReCfB3wldnhu6b4m pdfZVzOwQ1fWqlbQDq4PCWQm6sDoCqoerc7iuQ9X8Dnec2L9vJFUIfnssIko/2xg a5jLYK0PaZuPTm/hXh6To3k5NA50HLoA3R8YfymZfFsBSGxRW69zPODs9qUL51HF RwfUUhIGhOOwPwU7zfpOXAoDdRRGO2mpWoK8RVFJL8pJTIpoFzVD7HSN3ee5Vjpb JiDQcYXyayE2lipZUNwuMDVvTgSmsxs= -----END CERTIFICATE-----Generated at Thu Jul 10 10:31:42 2025 by rpki-client