$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa File: a98f9f17-2125-3705-b106-325bd721398d.roa (raw, json) Hash identifier: AMYEREz32RHKB9VjdBdTFmo04AN3FIBai/YhDOVVX3I= Subject key identifier: AE:FC:5E:79:9C:D5:B5:F3:D3:3E:1B:F5:EB:DC:1F:47:D0:DE:B3:C0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CF65D82DB2EFC2FEBEBC Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.38.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cf:65:d8:2d:b2:ef:c2:fe:be:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=527e966b-35ed-4fdf-af91-6b3b2006b601 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:49:2b:ff:57:61:fc:37:d6:d4:ab:32:b1:e0: 24:43:03:a4:0d:fc:27:89:2f:54:9f:3f:d8:0f:2b: 88:02:fe:87:d4:35:8a:e4:49:bf:69:c7:46:b2:5f: 9f:df:74:e5:80:da:cd:fd:59:cb:8b:2c:65:81:f2: 59:e1:c0:f6:a5:4b:c3:47:ca:25:a7:fa:e7:8a:f5: 71:6e:4d:8f:b5:38:51:c5:0d:89:5d:d7:d4:38:3b: b8:c6:92:75:b5:47:11:2e:da:b9:22:c7:b0:47:a1: 93:ca:42:4d:58:0a:74:25:d6:83:43:6f:41:b5:54: 4d:16:30:47:b5:9c:4c:28:aa:1d:e0:65:e9:4b:a8: 1e:67:2c:23:83:15:59:e4:78:06:d1:9c:d8:83:da: aa:60:29:e9:3e:3b:86:88:04:f5:d7:b7:56:e5:f8: a8:ba:bd:95:0b:bd:fb:dd:53:d6:de:21:e7:21:ad: 35:4e:08:e9:70:78:17:34:d7:b3:07:73:c8:80:28: a4:a4:5f:b0:0c:12:d4:5a:36:9a:0d:0e:74:5e:9a: 52:4d:29:8d:58:fb:07:39:83:18:46:d1:ae:cc:f0: 99:b2:71:6d:36:bd:92:a5:ea:ad:7d:d7:1f:24:94: e2:07:c3:4f:9d:8c:6e:14:2c:9d:a6:33:0a:ed:c0: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:FC:5E:79:9C:D5:B5:F3:D3:3E:1B:F5:EB:DC:1F:47:D0:DE:B3:C0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a98f9f17-2125-3705-b106-325bd721398d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:9c:79:10:71:a0:74:75:96:01:91:2b:bf:8d:14:03:0d:76: 92:27:ad:8d:e8:0c:5f:d8:9f:60:5a:2a:57:8d:64:3b:42:1c: 1c:a1:8b:ca:01:f0:a8:9d:99:40:8a:b6:45:01:75:52:22:76: b6:9b:0a:4c:2a:8e:b9:7c:30:db:d3:39:7c:d7:31:0b:d2:71: 15:c3:18:13:31:47:a1:ab:34:22:48:84:b7:39:58:ba:d2:2c: c7:32:69:53:2b:80:be:c4:bb:46:ad:a3:da:fa:a0:f6:bd:1e: 52:28:30:63:59:ac:17:58:76:cb:c5:91:9f:e5:16:7f:4b:64: e8:70:de:17:75:09:38:28:f1:21:5d:3e:8b:dd:a0:c0:85:8f: 97:de:67:16:07:65:44:b7:13:99:f6:7d:58:b9:8d:ed:05:b4: 23:07:c4:2a:4d:b7:8b:88:a9:6d:0c:22:e5:f1:34:b9:8a:71: cd:fd:c1:78:62:7d:6b:72:cc:61:24:c3:fe:fd:06:c3:d1:87: 66:a5:9d:b5:fb:9f:d0:bd:ac:ea:88:6b:40:f0:bb:87:77:52: fd:c4:21:3e:22:d8:8a:ff:f4:2b:03:ac:d8:a3:e1:47:83:4e: fb:40:ed:27:f8:fd:e0:13:20:2e:0d:5c:48:ab:c0:df:9e:a7: 22:0f:4e:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM9l2C2y78L+vrwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NTI3ZTk2NmItMzVlZC00ZmRmLWFmOTEtNmIzYjIwMDZiNjAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkkr/1dh/DfW1KsyseAkQwOkDfwniS9Unz/Y DyuIAv6H1DWK5Em/acdGsl+f33TlgNrN/VnLiyxlgfJZ4cD2pUvDR8olp/rnivVx bk2PtThRxQ2JXdfUODu4xpJ1tUcRLtq5IsewR6GTykJNWAp0JdaDQ29BtVRNFjBH tZxMKKod4GXpS6geZywjgxVZ5HgG0ZzYg9qqYCnpPjuGiAT117dW5fiour2VC737 3VPW3iHnIa01TgjpcHgXNNezB3PIgCikpF+wDBLUWjaaDQ50XppSTSmNWPsHOYMY RtGuzPCZsnFtNr2SpeqtfdcfJJTiB8NPnYxuFCydpjMK7cAgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK78Xnmc1bXz0z4b9evcH0fQ3rPAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTk4ZjlmMTctMjEyNS0z NzA1LWIxMDYtMzI1YmQ3MjEzOThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADGceRBxoHR1lgGRK7+NFAMNdpInrY3oDF/Yn2BaKleNZDtCHByhi8oB 8KidmUCKtkUBdVIidrabCkwqjrl8MNvTOXzXMQvScRXDGBMxR6GrNCJIhLc5WLrS LMcyaVMrgL7Eu0ato9r6oPa9HlIoMGNZrBdYdsvFkZ/lFn9LZOhw3hd1CTgo8SFd PovdoMCFj5feZxYHZUS3E5n2fVi5je0FtCMHxCpNt4uIqW0MIuXxNLmKcc39wXhi fWtyzGEkw/79BsPRh2alnbX7n9C9rOqIa0Dwu4d3Uv3EIT4i2Ir/9CsDrNij4UeD TvtA7Sf4/eATIC4NXEirwN+epyIPTqw= -----END CERTIFICATE-----Generated at Thu Jul 10 09:49:36 2025 by rpki-client