$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa File: a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa (raw, json) Hash identifier: oBLx4zu5StXG9zqi0rl+U1Bf2E+JQWtgzWlhKMti+sg= Subject key identifier: E9:9C:00:E2:E6:F2:E0:02:A0:F6:43:97:AD:0C:D5:B6:EA:68:7C:24 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909D1E36293608F7BB6C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.34.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9d:1e:36:29:36:08:f7:bb:6c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=109e335b-62f7-46c5-bb19-3692dc4ac8d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:b9:12:8f:a7:a2:3c:b4:0c:74:63:b8:99:0d: 1c:31:b0:96:79:c3:2e:6e:0b:fc:34:bc:e3:8a:eb: 57:fc:f8:88:07:d6:05:bc:26:da:60:70:eb:bb:00: 10:5b:72:c2:87:07:59:75:96:f5:2f:78:2b:d2:d6: ae:5b:bf:af:c4:3d:ac:1b:2d:a4:1f:6c:7a:42:cf: e3:eb:39:42:18:5f:31:26:fb:5c:06:f6:14:65:ea: b3:a3:08:70:f2:9a:a0:a1:86:1e:18:f9:ed:29:95: 1c:c8:0b:72:8b:c6:8e:82:81:da:dd:39:41:e6:f1: 92:6c:74:87:43:a5:36:a6:24:96:e4:d4:b9:d4:5c: 7f:c9:5e:0e:3e:4d:83:2d:15:88:6e:3f:c5:85:00: d5:77:82:d3:88:2a:f8:6b:10:7d:1b:72:44:b7:c6: 6f:c5:13:e3:33:76:d3:03:3b:d5:c8:63:1b:d2:81: ca:f7:fd:3c:ca:b8:5b:9d:cc:6e:49:97:1b:b2:01: 7d:76:4b:62:da:d9:69:37:72:25:6c:61:e1:7c:b4: 23:df:0a:c9:6c:9e:b6:c4:a1:21:dc:ee:ad:23:0e: cf:46:4e:72:9f:b1:7e:e9:04:71:d1:69:fd:fa:6e: 65:05:ca:65:b5:c6:b1:24:9b:a6:72:c2:2d:df:7e: 89:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:9C:00:E2:E6:F2:E0:02:A0:F6:43:97:AD:0C:D5:B6:EA:68:7C:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a99c9c6b-8ce8-31f4-a448-3c740e27d48a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:7f:95:0f:2d:a3:91:8f:2c:38:95:d1:99:4f:57:dc:9b:82: e2:a6:ef:3c:69:f3:b1:f3:db:7e:03:0a:f2:ea:01:29:11:6e: 16:81:fc:b5:66:dc:a1:29:64:08:04:82:ed:3f:60:77:87:9b: 0c:c5:fa:36:f4:cf:d5:e2:89:a7:75:17:ac:78:96:8f:2c:7f: db:0d:2b:5f:21:05:16:49:c8:d4:a2:20:75:77:90:40:4b:de: 6e:9c:b1:a9:ab:bc:a5:18:c2:3e:ca:67:46:a1:cc:ce:58:ce: 59:32:ea:df:8d:68:de:c8:c6:32:ff:71:fd:14:fd:31:a0:20: 90:d1:13:7a:8d:ae:60:4a:bb:5d:b4:8c:8b:98:88:64:6d:ce: bc:72:33:11:45:b7:d9:c8:d4:3a:89:dc:cc:7c:53:7c:80:0d: 30:2c:d4:ef:1c:38:57:b8:76:13:3b:29:d1:f3:7b:f5:a5:37: bf:e1:38:bf:69:23:8a:e7:f3:c8:30:d1:cd:14:b5:0e:32:f1: 60:44:8d:59:95:68:e2:20:19:56:75:fb:32:ca:61:d5:cb:39: 25:3c:ec:82:e5:af:58:13:52:51:d1:d9:da:78:5b:40:b0:0c: e0:bf:c2:f8:d2:c0:ac:56:20:e0:5c:4a:d6:a4:c0:c8:57:81: a2:14:c7:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJ0eNik2CPe7bAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MTA5ZTMzNWItNjJmNy00NmM1LWJiMTktMzY5MmRjNGFjOGQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLkSj6eiPLQMdGO4mQ0cMbCWecMubgv8NLzj iutX/PiIB9YFvCbaYHDruwAQW3LChwdZdZb1L3gr0tauW7+vxD2sGy2kH2x6Qs/j 6zlCGF8xJvtcBvYUZeqzowhw8pqgoYYeGPntKZUcyAtyi8aOgoHa3TlB5vGSbHSH Q6U2piSW5NS51Fx/yV4OPk2DLRWIbj/FhQDVd4LTiCr4axB9G3JEt8ZvxRPjM3bT AzvVyGMb0oHK9/08yrhbncxuSZcbsgF9dkti2tlpN3IlbGHhfLQj3wrJbJ62xKEh 3O6tIw7PRk5yn7F+6QRx0Wn9+m5lBcpltcaxJJumcsIt336J2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOmcAOLm8uACoPZDl60M1bbqaHwkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTk5YzljNmItOGNlOC0z MWY0LWE0NDgtM2M3NDBlMjdkNDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJ/lQ8to5GPLDiV0ZlPV9ybguKm7zxp87Hz234DCvLqASkRbhaB/LVm 3KEpZAgEgu0/YHeHmwzF+jb0z9Xiiad1F6x4lo8sf9sNK18hBRZJyNSiIHV3kEBL 3m6csamrvKUYwj7KZ0ahzM5Yzlky6t+NaN7IxjL/cf0U/TGgIJDRE3qNrmBKu120 jIuYiGRtzrxyMxFFt9nI1DqJ3Mx8U3yADTAs1O8cOFe4dhM7KdHze/WlN7/hOL9p I4rn88gw0c0UtQ4y8WBEjVmVaOIgGVZ1+zLKYdXLOSU87ILlr1gTUlHR2dp4W0Cw DOC/wvjSwKxWIOBcStakwMhXgaIUx5Q= -----END CERTIFICATE-----Generated at Thu Jul 10 06:29:30 2025 by rpki-client