$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa File: a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json) Hash identifier: TbzbckcpTGZIQzBL5ScVoCKLhaDuGHFoVHrtTSCgaZU= Subject key identifier: 55:A1:05:35:E8:40:A2:39:F7:67:8F:BC:CB:4B:70:D5:4F:81:D7:2A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290995AEE0DE4110437A500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.49.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:99:5a:ee:0d:e4:11:04:37:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=20a00ade-697a-4fee-8f84-f2ad162536e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:24:80:fb:ff:1a:16:c8:86:18:dc:79:58:e8: d6:47:20:a0:94:2f:9d:46:ff:78:6f:a5:4b:4f:1e: 23:25:84:30:cb:bf:f2:80:5d:d4:e5:80:a7:1e:9c: a9:41:2b:a9:b2:8c:87:13:21:d7:eb:09:e7:ff:0f: 45:f3:9c:61:84:4e:3b:ea:d1:aa:f5:73:4b:9e:39: bc:9e:18:4b:67:b3:30:04:85:19:b6:da:8e:fe:5c: f8:77:e7:3d:99:26:20:67:17:7f:11:91:e4:28:e0: c4:f9:90:0d:16:0b:a5:8d:0d:2f:2b:9f:2f:70:58: d8:ff:fe:b5:ad:26:df:f8:f8:bf:63:d2:6e:8e:96: 19:87:aa:57:bc:48:36:56:31:a9:16:fd:96:ec:04: 4e:a9:24:7e:7a:b5:2f:08:25:bf:06:7b:9e:d9:26: b2:f5:e9:82:fb:f1:6d:46:f6:4b:1a:60:62:db:ff: 77:1e:81:0f:52:1f:36:7a:b1:7d:50:53:ae:4a:6e: 47:70:97:10:43:0d:8d:d2:41:be:70:2e:96:9b:0c: 4a:ed:f6:05:bc:3d:9c:9a:3f:9d:52:4b:f6:9e:b1: 76:a4:1e:81:8f:1b:04:70:76:94:e7:2c:0d:56:4b: 2a:50:94:56:1f:3d:c5:3d:40:d4:a8:41:bd:37:ab: 59:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:A1:05:35:E8:40:A2:39:F7:67:8F:BC:CB:4B:70:D5:4F:81:D7:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:57:54:17:69:58:e9:7b:a2:3c:41:6f:63:14:75:95:0b:09: de:94:1a:04:d4:d5:0e:df:21:fe:52:0b:14:2a:8b:5e:e8:ac: 44:e8:b3:14:58:db:db:76:93:25:66:52:df:89:ee:e5:35:16: 9b:57:43:99:69:37:40:b8:96:24:70:a1:11:ac:5f:da:a1:8a: d2:1f:5e:3d:52:25:db:e9:d2:bf:59:c6:91:e3:11:69:c0:aa: 53:87:a3:8d:7c:90:4c:27:f6:b0:0d:0a:a3:ab:fc:db:16:db: c7:e1:b3:63:b9:fa:5b:c6:3d:56:20:71:bc:66:fb:8a:9e:7d: e4:c9:4b:d5:55:51:bb:9e:b3:cb:7d:82:31:c5:a8:e8:67:46: 24:c2:49:8b:f0:cf:08:c8:ee:c0:1d:8e:36:9e:62:2b:34:25: a1:1e:b3:95:84:84:a3:29:8c:7f:c5:e2:f8:3b:6c:4f:55:b1: b1:c0:7c:ca:e3:eb:11:ee:9e:4b:a3:a1:e6:18:32:ca:0f:9c: d7:84:3a:61:dd:ec:f9:60:da:bf:d6:0c:4e:55:b0:f3:40:47: c7:f5:99:4d:b8:9a:ce:cc:cf:32:68:4a:c0:20:73:7e:41:d2: 14:92:bc:11:4a:09:1d:34:07:12:14:fe:69:67:d6:8c:28:02: 7f:15:f5:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJla7g3kEQQ3pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MjBhMDBhZGUtNjk3YS00ZmVlLThmODQtZjJhZDE2MjUzNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCSA+/8aFsiGGNx5WOjWRyCglC+dRv94b6VL Tx4jJYQwy7/ygF3U5YCnHpypQSupsoyHEyHX6wnn/w9F85xhhE476tGq9XNLnjm8 nhhLZ7MwBIUZttqO/lz4d+c9mSYgZxd/EZHkKODE+ZANFguljQ0vK58vcFjY//61 rSbf+Pi/Y9JujpYZh6pXvEg2VjGpFv2W7AROqSR+erUvCCW/Bnue2Say9emC+/Ft RvZLGmBi2/93HoEPUh82erF9UFOuSm5HcJcQQw2N0kG+cC6WmwxK7fYFvD2cmj+d Ukv2nrF2pB6BjxsEcHaU5ywNVksqUJRWHz3FPUDUqEG9N6tZEQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWhBTXoQKI592ePvMtLcNVPgdcqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTNmNTM2YjItZjQ1NS0z NWMyLWJhMzctNTRhOGVlOWQ2NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJBXVBdpWOl7ojxBb2MUdZULCd6UGgTU1Q7fIf5SCxQqi17orETosxRY 29t2kyVmUt+J7uU1FptXQ5lpN0C4liRwoRGsX9qhitIfXj1SJdvp0r9ZxpHjEWnA qlOHo418kEwn9rANCqOr/NsW28fhs2O5+lvGPVYgcbxm+4qefeTJS9VVUbues8t9 gjHFqOhnRiTCSYvwzwjI7sAdjjaeYis0JaEes5WEhKMpjH/F4vg7bE9VsbHAfMrj 6xHunkujoeYYMsoPnNeEOmHd7Plg2r/WDE5VsPNAR8f1mU24ms7MzzJoSsAgc35B 0hSSvBFKCR00BxIU/mln1owoAn8V9XE= -----END CERTIFICATE-----Generated at Thu Jul 10 01:55:41 2025 by rpki-client