$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa File: a436ac52-91aa-3c41-8e92-858df4f15e6d.roa (raw, json) Hash identifier: 6TnKk1kJZkxM93RPkMsv3tYh7PrBESQgeukBWw+F3HE= Subject key identifier: 6B:76:22:3D:8B:F7:30:FA:79:D0:6F:B3:C5:B5:01:92:BA:5B:BC:3B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909AB91ECB61306858A400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9a:b9:1e:cb:61:30:68:58:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=b3938c7e-9efe-4542-8b73-0b6ed9f7e663 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:70:ea:56:44:6e:f7:3c:2d:f9:1b:de:1d:3c: cf:44:1a:6c:e3:24:54:55:2e:e7:6d:52:f0:9d:2f: 6c:5e:18:e4:ad:14:e3:a4:c8:f4:0b:7b:63:f3:5c: 26:29:6f:26:40:5a:aa:c0:b2:f6:05:d1:7b:5e:26: 70:ac:1c:f3:8e:da:6d:f7:b2:53:ba:7f:07:31:d6: b8:15:93:5f:31:90:15:ed:5a:81:ad:bf:88:e8:2d: 76:70:0d:25:9a:8f:e7:95:d9:fc:e3:e3:e1:19:af: d4:88:67:d5:97:1d:94:62:51:6d:63:bb:11:59:ca: f8:b1:23:c0:5b:49:90:5e:0b:2b:c2:6a:7a:20:68: b0:f7:88:38:d9:a3:4b:bb:2e:6f:f5:ba:98:7e:78: 3e:fe:58:83:88:cf:76:b8:de:7d:80:ac:5b:3b:0b: 97:bd:db:2a:85:1a:30:64:32:5b:2a:3e:b8:26:02: c9:dd:5c:24:b5:88:50:7f:4e:dd:0d:b6:09:cb:1f: 4d:66:da:89:c9:03:1d:9c:08:c9:97:a3:8b:0a:e4: 6a:d7:ee:5f:c6:fb:70:f3:60:79:a6:92:e5:b7:ef: 44:d3:60:88:6d:ae:78:93:1b:d5:db:0e:cc:59:09: fc:da:09:da:77:25:40:10:72:72:93:65:76:ec:b1: c3:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:76:22:3D:8B:F7:30:FA:79:D0:6F:B3:C5:B5:01:92:BA:5B:BC:3B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a436ac52-91aa-3c41-8e92-858df4f15e6d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:78:61:3e:bb:4c:d4:ea:46:b6:7c:28:70:e2:84:5b:48:fa: 4a:1d:29:ed:d6:4e:89:7a:b9:91:54:4e:8e:1b:37:6e:47:b6: d5:9d:2a:cc:bd:e6:03:14:24:40:12:b4:75:2b:85:61:57:17: 01:66:bc:56:a1:80:4a:e6:bb:bc:1f:8e:23:09:1e:eb:df:b5: ca:08:39:54:fe:b8:ab:98:19:1f:ef:bd:f8:9c:0d:7c:9a:5c: 8c:e2:76:43:8e:91:fd:2e:a3:ab:57:49:ff:3c:ad:5f:63:92: 75:0b:eb:f2:f6:26:4e:9f:7b:74:a7:97:db:ab:72:fc:de:0e: 98:de:76:d1:25:f0:96:4c:e8:33:15:52:01:4b:50:03:14:bc: 07:33:6a:1e:77:85:42:91:7b:18:c3:20:8c:0a:59:08:92:f8: 08:b7:99:19:26:93:fd:c9:1c:89:98:5e:53:ed:6c:59:95:c8: 4d:17:c9:d5:bc:01:d8:1c:b2:89:3e:42:f6:04:8a:be:6f:63: ac:7c:1d:f3:b5:e0:81:80:32:24:d1:f3:a2:29:8d:f9:fb:79: 4b:31:96:e5:24:0c:b4:72:a5:7e:aa:74:ea:16:f1:33:78:55: 2e:5f:06:53:c5:6d:af:4c:55:2a:6d:39:3d:38:4b:34:58:8b: bd:5f:d9:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJq5HsthMGhYpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YjM5MzhjN2UtOWVmZS00NTQyLThiNzMtMGI2ZWQ5ZjdlNjYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwXDqVkRu9zwt+RveHTzPRBps4yRUVS7nbVLw nS9sXhjkrRTjpMj0C3tj81wmKW8mQFqqwLL2BdF7XiZwrBzzjtpt97JTun8HMda4 FZNfMZAV7VqBrb+I6C12cA0lmo/nldn84+PhGa/UiGfVlx2UYlFtY7sRWcr4sSPA W0mQXgsrwmp6IGiw94g42aNLuy5v9bqYfng+/liDiM92uN59gKxbOwuXvdsqhRow ZDJbKj64JgLJ3VwktYhQf07dDbYJyx9NZtqJyQMdnAjJl6OLCuRq1+5fxvtw82B5 ppLlt+9E02CIba54kxvV2w7MWQn82gnadyVAEHJyk2V27LHDgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGt2Ij2L9zD6edBvs8W1AZK6W7w7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTQzNmFjNTItOTFhYS0z YzQxLThlOTItODU4ZGY0ZjE1ZTZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA94YT67TNTqRrZ8KHDihFtI+kodKe3WTol6uZFUTo4bN25HttWdKsy9 5gMUJEAStHUrhWFXFwFmvFahgErmu7wfjiMJHuvftcoIOVT+uKuYGR/vvficDXya XIzidkOOkf0uo6tXSf88rV9jknUL6/L2Jk6fe3Snl9urcvzeDpjedtEl8JZM6DMV UgFLUAMUvAczah53hUKRexjDIIwKWQiS+Ai3mRkmk/3JHImYXlPtbFmVyE0XydW8 Adgcsok+QvYEir5vY6x8HfO14IGAMiTR86Ipjfn7eUsxluUkDLRypX6qdOoW8TN4 VS5fBlPFba9MVSptOT04SzRYi71f2UY= -----END CERTIFICATE-----Generated at Thu Jul 10 01:43:47 2025 by rpki-client