$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa File: 88d6cdfc-ec75-3904-9246-9f834a2b2795.roa (raw, json) Hash identifier: 2N6RnEosGJzqzRP7nbykKJFmw1zhsjt6PI0CMAuPOqc= Subject key identifier: B4:3D:9E:01:09:F2:F8:2B:EC:E1:C4:C2:47:1D:03:7E:0D:44:E4:8E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CC7BF6D8E6CC2370E000 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.50.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cc:7b:f6:d8:e6:cc:23:70:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=370c3b8e-1afe-4808-b4e1-2ec8dda1936b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:c4:62:51:cc:a3:00:c1:19:4e:11:1e:3c:a4: 00:90:2b:ab:19:c6:61:94:91:07:12:14:4d:9f:9a: 95:a5:dd:57:c3:2b:2d:76:9b:32:0f:05:75:79:79: 6a:f3:11:63:ab:d2:9b:11:61:1d:80:03:ad:18:27: 7f:62:3f:ab:ec:36:19:e7:6d:41:e2:63:44:1b:f6: 6a:5a:74:69:37:d1:b9:fb:d7:a9:63:6e:b9:bc:b7: 22:d9:fb:f9:2a:54:6b:5d:22:3a:4e:eb:3c:f5:48: 27:50:93:ab:72:f0:05:1d:9f:e3:db:f5:05:27:e6: 2e:32:c2:3c:d0:b4:4a:bc:21:ce:c3:2a:f9:2f:64: 6a:8e:ad:d4:7b:f6:79:94:85:de:27:77:4d:83:27: 96:b1:3a:7d:e8:9d:62:86:6a:bf:b1:9e:43:15:6a: 95:56:b2:d9:f9:78:34:e8:8b:71:26:81:4d:31:73: 0c:85:60:e3:53:15:22:d0:82:e8:0d:32:06:80:31: 53:82:1b:75:cc:03:9a:c8:71:99:ea:3c:33:1b:02: 2a:fd:11:bd:2e:1d:03:3a:0e:87:a2:48:3f:1a:5f: 80:52:7c:8d:b3:3c:51:4e:88:0d:9c:27:ee:72:90: 52:0e:09:a3:74:35:be:c2:4a:61:47:c2:81:b1:c6: 1b:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:3D:9E:01:09:F2:F8:2B:EC:E1:C4:C2:47:1D:03:7E:0D:44:E4:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/88d6cdfc-ec75-3904-9246-9f834a2b2795.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 57:35:61:7f:03:bd:42:1b:ad:d2:81:22:d4:43:88:ee:25:54: fa:6d:3f:4a:9e:ec:85:6c:92:1f:dd:51:4c:11:4e:40:1b:58: 52:aa:0e:15:68:da:ae:ab:e5:20:f4:51:5b:87:d8:92:0d:11: 42:35:ba:11:1e:53:19:11:1c:1c:d8:dd:26:2f:45:28:91:65: 11:3d:6a:ee:97:7b:b9:8a:c7:d3:4f:cb:80:c0:38:2c:33:32: 26:fd:2e:a2:8c:f7:d5:f5:be:f2:a4:e2:31:a7:d7:8b:9a:cf: cd:4b:9a:b3:60:50:99:33:d0:ea:25:f3:eb:fe:77:14:52:1f: d4:fa:df:af:f4:49:a5:93:8d:eb:b3:9c:a9:8d:51:90:32:05: e2:5e:5f:97:a9:8d:fc:6f:21:d2:3d:5a:5a:b9:56:f9:a0:6e: 04:35:f8:37:aa:7e:82:93:4b:ac:f0:44:6d:3d:9b:92:92:83: 0d:0b:81:b1:b5:d0:98:99:5e:fa:f5:2b:d2:4f:f3:f9:cd:ba: 0a:e2:bb:64:1a:12:35:a0:28:a8:a0:2b:f4:aa:99:6a:60:45: 92:2e:b0:7c:9c:7c:ae:dc:33:b0:16:69:cf:7d:bd:ff:4d:e8: 87:6e:27:d9:3d:ae:0d:51:49:94:a4:c0:09:97:0f:21:7a:21: c5:7b:35:a0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMx79tjmzCNw4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MzcwYzNiOGUtMWFmZS00ODA4LWI0ZTEtMmVjOGRkYTE5MzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxsRiUcyjAMEZThEePKQAkCurGcZhlJEHEhRN n5qVpd1XwystdpsyDwV1eXlq8xFjq9KbEWEdgAOtGCd/Yj+r7DYZ521B4mNEG/Zq WnRpN9G5+9epY265vLci2fv5KlRrXSI6Tus89UgnUJOrcvAFHZ/j2/UFJ+YuMsI8 0LRKvCHOwyr5L2Rqjq3Ue/Z5lIXeJ3dNgyeWsTp96J1ihmq/sZ5DFWqVVrLZ+Xg0 6ItxJoFNMXMMhWDjUxUi0ILoDTIGgDFTght1zAOayHGZ6jwzGwIq/RG9Lh0DOg6H okg/Gl+AUnyNszxRTogNnCfucpBSDgmjdDW+wkphR8KBscYbRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQ9ngEJ8vgr7OHEwkcdA34NROSOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODhkNmNkZmMtZWM3NS0z OTA0LTkyNDYtOWY4MzRhMmIyNzk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDLAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFc1YX8DvUIbrdKBItRDiO4lVPptP0qe7IVskh/dUUwRTkAbWFKqDhVo 2q6r5SD0UVuH2JINEUI1uhEeUxkRHBzY3SYvRSiRZRE9au6Xe7mKx9NPy4DAOCwz Mib9LqKM99X1vvKk4jGn14uaz81LmrNgUJkz0Ool8+v+dxRSH9T636/0SaWTjeuz nKmNUZAyBeJeX5epjfxvIdI9Wlq5VvmgbgQ1+DeqfoKTS6zwRG09m5KSgw0LgbG1 0JiZXvr1K9JP8/nNugriu2QaEjWgKKigK/SqmWpgRZIusHycfK7cM7AWac99vf9N 6IduJ9k9rg1RSZSkwAmXDyF6IcV7NaA= -----END CERTIFICATE-----Generated at Thu Jul 10 02:02:00 2025 by rpki-client