$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa File: a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa (raw, json) Hash identifier: NsHScWKTr+rm4Cm6dnXsLrHTkM6Ayv370iCFpWJZXxg= Subject key identifier: 3F:32:9A:75:65:09:42:05:4D:3A:79:B1:69:D8:0B:BB:FF:1E:A1:9C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D63996ABED304D06DA80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.62.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d6:39:96:ab:ed:30:4d:06:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=fbc400a9-6002-4929-ad0b-d9f7d9d28a11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:75:10:7c:d6:05:50:85:1c:ae:be:c1:a5:21: 38:0e:b3:a6:4a:bb:6a:42:d5:5d:15:f1:02:db:dc: 04:c5:0f:e2:92:02:8e:3c:53:09:ed:42:e4:a7:96: 80:07:0c:59:43:94:e4:e3:f3:99:c9:6e:3a:18:75: b3:c7:84:8e:c3:44:9a:47:16:3f:e0:ab:b0:b9:b2: e8:f4:ef:2e:a5:5b:4a:ed:d5:69:e0:3d:0f:a8:14: 68:a0:f4:d0:d9:db:32:d9:a4:5a:b5:38:36:6a:0c: c3:58:17:cf:eb:46:23:bf:46:13:ec:5f:d3:04:da: c2:53:a2:46:c7:8b:17:ca:91:7a:c2:53:0e:5f:de: 51:9e:00:90:64:dd:f5:c8:61:3a:07:c0:5d:80:25: 92:5b:25:9e:79:48:bf:3c:3d:cb:a3:9f:b4:5b:08: dd:b9:5f:84:af:bc:19:62:a8:1a:c9:3c:59:a3:d8: 38:29:36:2a:49:98:4c:a1:9d:32:93:0f:10:14:03: aa:3c:8c:75:35:69:38:1c:f2:6e:a3:28:4e:19:9c: ef:e9:ec:73:27:cb:f5:66:f4:2b:c5:de:8b:b2:ea: 00:2e:75:ae:0e:ee:55:0f:1c:5e:6c:b1:03:9e:40: 73:1b:61:b2:d1:03:b5:af:b1:c6:84:91:28:24:d2: e3:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:32:9A:75:65:09:42:05:4D:3A:79:B1:69:D8:0B:BB:FF:1E:A1:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a7d64815-4db9-307b-aa0f-90cad02fc0bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:9a:39:3e:04:a0:5a:6a:67:2d:29:e9:e0:d2:31:2b:34:78: 9a:65:a0:3f:8d:30:5a:29:62:1c:f6:1c:ad:cd:08:c5:4c:0a: 94:86:f7:61:fd:17:2d:c2:cc:95:01:cb:c8:81:2b:d0:b7:e0: 76:fc:a6:e3:c3:83:63:e0:71:a3:4f:cc:7d:13:78:85:c6:0b: c5:b0:fc:44:81:8a:26:15:f1:4f:62:a7:27:81:54:49:d1:81: 85:3f:18:f6:cf:d2:eb:26:70:dd:9c:ba:7f:b6:12:d5:55:a1: 44:08:66:a6:c6:4a:1e:e9:18:cc:9d:0a:f9:2d:e3:96:15:81: a2:aa:59:f2:38:55:02:a5:ae:84:21:40:ec:c1:68:e2:9f:f1: ac:1e:9f:01:ad:cf:b0:21:00:0f:49:6f:94:91:ca:8f:59:3c: ef:8f:78:ed:ca:14:40:48:5d:81:d9:11:45:cc:bd:79:ac:ef: f6:9e:a2:1e:92:6a:91:5f:ce:ab:27:72:06:15:58:e7:e9:6d: 96:50:9b:75:ae:50:04:dd:47:c4:6b:8b:bf:46:0c:d6:b0:24: 1b:64:3c:c2:c4:47:7f:54:cc:7e:8b:ab:27:48:44:cf:ba:93: 46:2e:7d:72:d5:aa:0a:00:d5:24:2a:07:e7:7d:ff:5c:df:d5: e8:06:a3:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNY5lqvtME0G2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmJjNDAwYTktNjAwMi00OTI5LWFkMGItZDlmN2Q5ZDI4YTExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp3UQfNYFUIUcrr7BpSE4DrOmSrtqQtVdFfEC 29wExQ/ikgKOPFMJ7ULkp5aABwxZQ5Tk4/OZyW46GHWzx4SOw0SaRxY/4KuwubLo 9O8upVtK7dVp4D0PqBRooPTQ2dsy2aRatTg2agzDWBfP60Yjv0YT7F/TBNrCU6JG x4sXypF6wlMOX95RngCQZN31yGE6B8BdgCWSWyWeeUi/PD3Lo5+0WwjduV+Er7wZ YqgayTxZo9g4KTYqSZhMoZ0ykw8QFAOqPIx1NWk4HPJuoyhOGZzv6exzJ8v1ZvQr xd6LsuoALnWuDu5VDxxebLEDnkBzG2Gy0QO1r7HGhJEoJNLjRQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8ymnVlCUIFTTp5sWnYC7v/HqGcMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTdkNjQ4MTUtNGRiOS0z MDdiLWFhMGYtOTBjYWQwMmZjMGJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD4AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFmaOT4EoFpqZy0p6eDSMSs0eJploD+NMFopYhz2HK3NCMVMCpSG92H9 Fy3CzJUBy8iBK9C34Hb8puPDg2PgcaNPzH0TeIXGC8Ww/ESBiiYV8U9ipyeBVEnR gYU/GPbP0usmcN2cun+2EtVVoUQIZqbGSh7pGMydCvkt45YVgaKqWfI4VQKlroQh QOzBaOKf8awenwGtz7AhAA9Jb5SRyo9ZPO+PeO3KFEBIXYHZEUXMvXms7/aeoh6S apFfzqsncgYVWOfpbZZQm3WuUATdR8Rri79GDNawJBtkPMLER39UzH6LqydIRM+6 k0YufXLVqgoA1SQqB+d9/1zf1egGo/I= -----END CERTIFICATE-----Generated at Thu Jul 10 06:30:19 2025 by rpki-client