$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa File: 9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa (raw, json) Hash identifier: XYrVjPbXpg9E06kJtkhl6CPAFurBrCHtm86/jURrb1o= Subject key identifier: 14:46:A2:35:99:87:12:35:C8:F4:5E:EA:09:91:3C:40:C3:38:98:8F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A629098F2D61DBE13483F0780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.48.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:98:f2:d6:1d:be:13:48:3f:07:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=7573e0aa-85e5-4c34-b86a-db9888a7be78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:9a:d6:4b:82:d2:20:4f:ba:a2:f6:de:29:f3: 30:ac:3b:17:44:de:2a:d7:95:98:08:3b:db:b6:44: 60:a3:5d:ef:0b:65:87:9d:bf:3e:69:18:de:69:bd: dd:50:73:04:23:89:4d:c1:95:a8:39:ee:de:aa:74: c7:ec:de:6c:06:1c:5a:86:8f:1f:30:46:ee:bf:f6: 4c:51:62:60:45:8e:55:e1:80:54:0f:b0:ab:7b:a9: 27:c7:4a:13:87:c7:9f:bf:c8:86:82:10:9d:8a:e0: 3c:a7:d2:9f:76:1e:af:20:71:99:ab:09:68:0a:d5: a9:36:e3:98:77:6b:a3:53:5b:29:09:12:be:58:02: 35:6d:b9:c8:02:78:1b:60:16:09:f8:a2:92:a5:39: a6:01:9c:86:d3:de:ed:3f:3d:22:1a:22:4c:91:10: db:36:8d:c5:eb:f0:49:b0:8a:3f:60:b1:2b:5f:85: 52:cb:a7:86:fd:d9:f5:b2:03:2b:3b:6c:22:16:6b: f8:d3:94:54:39:45:05:87:a4:a7:0e:c9:14:3e:ce: 3e:a1:42:60:2a:b5:28:8a:ca:ba:1f:dd:59:96:c9: 18:f5:ec:aa:d5:45:61:16:de:69:40:ac:de:d3:8d: ea:87:eb:f8:72:c7:c9:9a:3b:f6:75:f9:3b:f4:2f: a4:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:46:A2:35:99:87:12:35:C8:F4:5E:EA:09:91:3C:40:C3:38:98:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.48.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:35:db:df:30:84:f3:d4:dc:7a:eb:7b:4f:35:e6:37:f8:4b: eb:d2:20:72:94:32:31:60:db:8d:15:8d:bc:34:7d:0f:0d:40: 9c:0d:d0:60:7f:a6:89:53:dd:af:da:6d:e8:5e:cf:35:9e:af: 15:83:6b:be:36:67:23:0b:99:70:7c:04:87:42:fd:6f:2d:a2: 04:91:22:8d:1d:ed:09:4d:5b:00:ae:22:44:ab:26:de:b3:a8: 87:7c:41:a0:95:31:92:d1:a1:c0:79:b5:09:04:3b:a9:6e:f2: af:1b:38:be:37:e5:7c:14:96:9b:2d:cb:f1:f8:06:f2:00:8b: 33:24:ec:ca:e4:bc:af:a4:47:41:e2:c8:07:63:7a:11:d2:22: c4:69:18:91:9d:43:6a:d5:bc:19:eb:7f:96:13:6c:b0:2c:93: 95:84:cb:c0:c9:fd:52:6e:3d:f9:00:c2:d9:64:72:b3:5f:44: 1e:03:5d:84:f8:9d:ed:49:a4:b3:95:e6:73:9e:eb:19:68:58: 05:bd:cb:30:3e:e2:39:f8:c7:c4:8e:48:12:e4:44:6c:8f:06: 1f:b9:09:9f:22:77:26:de:53:65:7d:6b:ff:03:15:00:99:84: 80:6c:7b:8b:a7:3e:64:60:1c:3c:c9:77:32:3f:3d:07:82:a8: 6d:ba:ff:53 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJjy1h2+E0g/B4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NzU3M2UwYWEtODVlNS00YzM0LWI4NmEtZGI5ODg4YTdiZTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp5rWS4LSIE+6ovbeKfMwrDsXRN4q15WYCDvb tkRgo13vC2WHnb8+aRjeab3dUHMEI4lNwZWoOe7eqnTH7N5sBhxaho8fMEbuv/ZM UWJgRY5V4YBUD7Cre6knx0oTh8efv8iGghCdiuA8p9Kfdh6vIHGZqwloCtWpNuOY d2ujU1spCRK+WAI1bbnIAngbYBYJ+KKSpTmmAZyG097tPz0iGiJMkRDbNo3F6/BJ sIo/YLErX4VSy6eG/dn1sgMrO2wiFmv405RUOUUFh6SnDskUPs4+oUJgKrUoisq6 H91ZlskY9eyq1UVhFt5pQKze043qh+v4csfJmjv2dfk79C+k2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBRGojWZhxI1yPRe6gmRPEDDOJiPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWI4NDY4ZmUtMDc5ZS0z OWM5LWI0ZjYtNWE2YWMwOWFjM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI41298whPPU3Hrre0815jf4S+vSIHKUMjFg240Vjbw0fQ8NQJwN0GB/ polT3a/abehezzWerxWDa742ZyMLmXB8BIdC/W8togSRIo0d7QlNWwCuIkSrJt6z qId8QaCVMZLRocB5tQkEO6lu8q8bOL435XwUlpsty/H4BvIAizMk7MrkvK+kR0Hi yAdjehHSIsRpGJGdQ2rVvBnrf5YTbLAsk5WEy8DJ/VJuPfkAwtlkcrNfRB4DXYT4 ne1JpLOV5nOe6xloWAW9yzA+4jn4x8SOSBLkRGyPBh+5CZ8idybeU2V9a/8DFQCZ hIBse4unPmRgHDzJdzI/PQeCqG26/1M= -----END CERTIFICATE-----Generated at Thu Jul 10 06:22:49 2025 by rpki-client