$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa File: ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa (raw, json) Hash identifier: jAl/Hc0nOkdHV2J/zK6TQcTzenEdC+KbJzsMTOA8bg0= Subject key identifier: B8:97:AE:28:AE:E2:42:39:03:E2:CC:D3:97:93:E6:E1:9A:5F:6F:A5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CE14ADB38FC70431F080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.34.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ce:14:ad:b3:8f:c7:04:31:f0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=329619a9-b390-4900-9d73-69d7b5e5e56a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:aa:35:ab:ad:a7:66:a5:b6:3d:f9:ab:e0:67: e4:6c:23:e1:c8:b6:ee:59:ca:e9:df:ea:ff:68:eb: 86:5b:85:e1:27:10:4c:72:15:92:fb:77:b0:5b:79: b6:02:e8:b8:f4:8c:94:21:93:3b:18:99:8b:2a:0d: 7a:3b:b2:1b:d9:62:f8:5e:fe:52:c4:fd:28:39:5b: 4d:86:bc:62:97:34:8f:46:b7:ba:75:d3:e7:92:54: 14:36:43:05:75:0c:b8:38:28:64:95:b5:ef:4e:28: 96:15:33:95:96:15:c8:b6:d2:c1:6d:59:56:22:a3: 27:1d:3f:cd:3f:bb:d7:30:62:27:bc:fd:b1:af:4e: 7d:a7:29:e7:81:cd:ed:0c:24:14:ad:f3:d2:61:f2: 80:ac:51:8f:eb:85:fe:3b:07:6a:59:02:fd:04:82: d4:f3:5c:30:ed:a2:a4:95:39:5c:50:b9:25:2e:3d: 2a:7b:7f:c2:d4:ea:21:71:2b:1c:1f:a0:dd:de:18: 2b:13:0b:ae:23:6d:6a:ba:60:2e:17:4e:7d:cd:3a: 08:24:a6:09:7e:3d:cc:77:d4:c1:e8:30:18:c2:49: a1:01:37:0a:6d:02:8d:70:5f:79:1a:55:f5:ae:0d: c3:1e:36:cc:73:51:0b:2d:4d:bc:3c:ce:1f:3f:2d: c9:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:97:AE:28:AE:E2:42:39:03:E2:CC:D3:97:93:E6:E1:9A:5F:6F:A5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ae1103be-198c-3199-8f4f-aa8f9f3b939b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:0f:f8:84:55:80:ca:ed:a3:0e:e2:12:5c:fe:44:f3:3a:8d: de:aa:1f:0f:42:f9:84:5f:ee:74:8c:93:87:23:e8:16:24:2c: 7b:35:29:01:39:5a:75:05:23:30:bf:63:92:de:58:cd:58:a4: 79:de:fd:d3:57:50:da:f2:f6:86:88:0c:ae:e5:df:cb:48:a5: de:fa:d0:28:0d:9c:d7:04:78:c2:2b:8a:1d:84:1c:93:6e:0e: 05:5b:33:f6:b1:1a:e4:df:c8:5a:c1:d3:e6:1b:43:b8:29:f6: a8:3f:4e:3a:22:63:c2:2c:09:61:84:e7:42:54:77:df:99:7b: 24:9e:2e:66:1a:43:fb:b7:18:85:68:6d:50:b1:be:b0:24:d7: 7b:54:93:d0:14:82:bc:9f:60:ba:a6:a5:38:0e:35:ea:9c:76: 22:08:8c:d0:ee:bb:b1:34:5c:2b:fa:aa:35:6b:32:01:63:1e: 61:42:20:02:67:9c:1a:e9:5b:81:c2:14:51:c4:20:41:68:0d: 98:52:d2:a8:3d:05:33:b9:29:40:2e:d0:59:5f:2d:d7:f9:eb: f4:77:25:da:8c:7b:05:47:72:cc:0a:4b:47:36:3d:fb:e9:95: 3c:3b:d7:0c:6b:ec:0a:ba:f4:5e:2f:5c:02:a6:1a:86:9c:e4: ea:e3:ba:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM4UrbOPxwQx8IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MzI5NjE5YTktYjM5MC00OTAwLTlkNzMtNjlkN2I1ZTVlNTZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6Ko1q62nZqW2Pfmr4GfkbCPhyLbuWcrp3+r/ aOuGW4XhJxBMchWS+3ewW3m2Aui49IyUIZM7GJmLKg16O7Ib2WL4Xv5SxP0oOVtN hrxilzSPRre6ddPnklQUNkMFdQy4OChklbXvTiiWFTOVlhXIttLBbVlWIqMnHT/N P7vXMGInvP2xr059pynngc3tDCQUrfPSYfKArFGP64X+OwdqWQL9BILU81ww7aKk lTlcULklLj0qe3/C1OohcSscH6Dd3hgrEwuuI21qumAuF059zToIJKYJfj3Md9TB 6DAYwkmhATcKbQKNcF95GlX1rg3DHjbMc1ELLU28PM4fPy3J1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLiXriiu4kI5A+LM05eT5uGaX2+lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYWUxMTAzYmUtMTk4Yy0z MTk5LThmNGYtYWE4ZjlmM2I5MzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCKAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJMP+IRVgMrtow7iElz+RPM6jd6qHw9C+YRf7nSMk4cj6BYkLHs1KQE5 WnUFIzC/Y5LeWM1YpHne/dNXUNry9oaIDK7l38tIpd760CgNnNcEeMIrih2EHJNu DgVbM/axGuTfyFrB0+YbQ7gp9qg/TjoiY8IsCWGE50JUd9+ZeySeLmYaQ/u3GIVo bVCxvrAk13tUk9AUgryfYLqmpTgONeqcdiIIjNDuu7E0XCv6qjVrMgFjHmFCIAJn nBrpW4HCFFHEIEFoDZhS0qg9BTO5KUAu0FlfLdf56/R3JdqMewVHcswKS0c2Pfvp lTw71wxr7Aq69F4vXAKmGoac5Orjugc= -----END CERTIFICATE-----Generated at Thu Jul 10 06:25:33 2025 by rpki-client