$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa File: 8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa (raw, json) Hash identifier: k/IPPVitVAtohQ8kF+17j1kCgkKKskvHKDiLwdJe6D4= Subject key identifier: 9F:F0:7B:51:E6:B1:1C:B4:B3:89:C8:4D:B1:00:D7:81:A2:09:3F:34 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909A4DC509C9481D6A3540 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.38.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9a:4d:c5:09:c9:48:1d:6a:35:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=f5126fcb-b587-4d59-a0e8-9461e668c485 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:85:15:40:53:82:ad:b7:08:57:6f:f6:a7:47: 5e:e8:22:97:81:c6:d1:17:f0:f6:bd:da:aa:00:0f: 52:c6:a9:d5:2e:c7:d2:10:c5:63:c8:27:aa:68:a8: b4:16:62:24:5a:dc:ab:42:d9:c1:61:ed:67:03:a3: 08:78:a6:d5:bb:60:a4:8f:2b:81:b9:95:07:1e:c6: fe:52:97:68:8f:ca:90:ef:9b:3d:96:c0:dd:1d:1d: e3:ad:b5:4b:7d:bf:d8:92:67:16:63:e5:2b:e4:6a: 13:38:08:37:75:45:11:5f:2b:dd:32:59:72:a8:13: 67:47:57:8d:9c:a9:0f:37:80:6e:e8:9d:d6:33:6d: 3c:b3:a4:82:71:d7:cb:8e:34:c8:77:2d:0b:6c:6c: da:59:a5:2a:8c:b0:32:e6:fa:72:b5:bf:b3:19:dd: c8:b1:d1:2e:53:d0:ed:7f:76:e4:26:59:3a:09:d1: 24:1d:5d:1c:b6:27:fb:dc:b5:0a:f3:37:3d:e4:1d: 30:8e:97:6a:b5:40:d9:3b:a7:1d:95:fe:52:42:ab: b3:37:c6:7a:2a:16:af:aa:6e:7a:10:ea:eb:57:c0: f8:dc:99:0a:4b:8f:12:bf:27:ed:9c:a1:3f:34:10: f9:5b:c9:89:65:b3:ff:d1:a5:c3:06:a4:2d:5a:2e: 54:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F0:7B:51:E6:B1:1C:B4:B3:89:C8:4D:B1:00:D7:81:A2:09:3F:34 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8afb097d-bf51-3fc0-91b1-2046acbd3a80.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:1b:ce:87:d5:b6:c2:49:47:16:31:91:7d:30:06:ec:e3:7e: 05:2c:9e:18:4f:ef:e9:93:a6:85:6d:d8:fc:4d:7c:41:f4:4a: ba:d0:01:f1:ab:75:dd:ab:94:bf:ab:2f:b2:11:54:17:d6:3d: e0:3d:8f:24:66:68:8d:40:d4:1f:0b:7c:be:0d:c9:46:e6:75: 55:76:1a:26:d5:f0:cf:57:9e:6a:07:fa:58:c7:5e:34:cf:30: ad:e8:65:64:47:ed:e8:6d:5f:c5:6b:10:58:b9:5d:92:0b:5a: 25:05:ec:83:44:53:ab:6e:8a:26:08:58:e3:0f:c1:0a:bd:7f: 16:b5:df:56:c7:bc:8e:f9:48:41:b1:dd:1e:cf:bc:cf:49:3f: 54:01:e2:90:cb:a2:15:f0:d9:ee:ff:7d:54:66:98:f0:c7:8d: 8c:8f:04:67:93:8d:6f:92:83:dc:62:d1:0d:8f:c2:72:91:5d: 99:c6:bd:d8:6c:7c:6a:69:8e:05:fb:e7:d2:a2:06:5f:d3:5e: 8c:52:93:71:54:a2:39:1d:1c:ea:f8:a3:0b:a6:79:09:8b:5c: 6c:0f:c7:83:64:6d:34:87:55:8a:3e:25:4a:5d:e3:b0:fb:e0: 11:6e:aa:8b:82:c0:f9:da:1c:08:bc:6b:81:e7:fc:9f:11:46: c9:91:da:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJpNxQnJSB1qNUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZjUxMjZmY2ItYjU4Ny00ZDU5LWEwZTgtOTQ2MWU2NjhjNDg1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnoUVQFOCrbcIV2/2p0de6CKXgcbRF/D2vdqq AA9SxqnVLsfSEMVjyCeqaKi0FmIkWtyrQtnBYe1nA6MIeKbVu2CkjyuBuZUHHsb+ Updoj8qQ75s9lsDdHR3jrbVLfb/YkmcWY+Ur5GoTOAg3dUURXyvdMllyqBNnR1eN nKkPN4Bu6J3WM208s6SCcdfLjjTIdy0LbGzaWaUqjLAy5vpytb+zGd3IsdEuU9Dt f3bkJlk6CdEkHV0ctif73LUK8zc95B0wjpdqtUDZO6cdlf5SQquzN8Z6Khavqm56 EOrrV8D43JkKS48SvyftnKE/NBD5W8mJZbP/0aXDBqQtWi5UzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/we1HmsRy0s4nITbEA14GiCT80MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGFmYjA5N2QtYmY1MS0z ZmMwLTkxYjEtMjA0NmFjYmQzYTgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJwbzofVtsJJRxYxkX0wBuzjfgUsnhhP7+mTpoVt2PxNfEH0SrrQAfGr dd2rlL+rL7IRVBfWPeA9jyRmaI1A1B8LfL4NyUbmdVV2GibV8M9XnmoH+ljHXjTP MK3oZWRH7ehtX8VrEFi5XZILWiUF7INEU6tuiiYIWOMPwQq9fxa131bHvI75SEGx 3R7PvM9JP1QB4pDLohXw2e7/fVRmmPDHjYyPBGeTjW+Sg9xi0Q2PwnKRXZnGvdhs fGppjgX759KiBl/TXoxSk3FUojkdHOr4owumeQmLXGwPx4NkbTSHVYo+JUpd47D7 4BFuqouCwPnaHAi8a4Hn/J8RRsmR2nE= -----END CERTIFICATE-----Generated at Thu Jul 10 06:31:16 2025 by rpki-client