$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa File: b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa (raw, json) Hash identifier: jAoTVSrL6RKgcG919vInEdvduCZSboHtgkQ5ffOkNwg= Subject key identifier: CB:D1:CA:9F:0F:1B:29:24:DE:4C:D5:36:22:9D:B5:6D:0B:B0:AA:81 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62908A34B3066E7E007FBE80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:8a:34:b3:06:6e:7e:00:7f:be:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=17ef0e10-ef41-4c07-89c8-d5e692587db1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:e1:de:1a:56:77:ea:16:71:27:19:f7:84:5d: 6c:3f:f1:73:87:58:18:19:9f:43:32:b6:dd:86:1b: 04:50:fa:69:de:e4:53:d7:73:7b:fa:5f:f8:33:5c: 9a:9b:d7:b3:2a:da:98:bb:24:f6:7c:8c:dd:90:ca: 61:6f:4f:b6:03:fc:59:ad:82:96:e0:64:15:63:1c: 77:d0:b0:b8:5f:f3:7f:70:f0:e3:6e:49:d1:a1:b7: a7:e2:f8:22:ac:d5:ee:ee:73:b4:ec:6e:49:53:f6: 90:b0:b9:09:1e:2e:fe:17:54:5b:dd:93:aa:12:f8: 5e:d5:3c:8f:a7:42:c6:8a:d2:26:10:b7:8f:dc:de: d1:bb:86:44:26:ec:7a:5d:de:12:1d:12:34:53:d9: d4:f2:70:75:11:12:8a:75:72:4d:18:44:84:74:26: bd:4e:5e:21:01:e1:7d:c5:84:e5:2a:f4:bb:02:23: 55:99:c5:7e:d6:72:dd:87:be:d2:25:83:3a:d5:b0: 3e:32:71:0a:9c:b5:5a:19:e6:60:ee:f9:4e:bc:f9: a3:67:99:d4:a3:78:14:2d:35:f5:db:7d:b5:74:49: 8e:2b:ca:2e:38:93:e0:c0:27:55:90:c0:d8:c4:00: 8b:97:31:cf:43:bf:da:c2:d1:7e:fd:b3:e1:ce:11: 53:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:D1:CA:9F:0F:1B:29:24:DE:4C:D5:36:22:9D:B5:6D:0B:B0:AA:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:66:3e:ef:3d:90:9b:7b:ff:1c:fe:af:11:76:f2:c1:4e:ed: c6:5a:75:f9:6d:82:43:7b:ae:76:4e:6a:c8:57:61:da:7a:59: 9e:e0:a0:7b:6f:a3:7f:07:08:83:74:c3:4e:75:fe:5e:bc:5d: 46:85:ae:22:58:2c:36:f4:33:e7:8d:ee:7e:ce:38:8a:1e:d3: b4:cb:05:a5:ae:5f:dc:8b:e0:12:bc:53:10:25:4a:19:9f:b3: 7a:c2:a0:26:af:fb:26:05:14:6a:75:7f:5f:f6:ce:14:39:f3: ae:aa:b7:92:c8:57:2e:87:9a:59:f5:e6:f7:f7:db:aa:7c:db: 87:d0:c3:6c:25:f5:44:94:ae:92:fe:6d:b2:11:d1:37:97:63: b8:98:69:b8:aa:f5:b2:9c:f3:a6:31:34:4e:81:15:3c:89:35: e4:85:32:32:18:f7:9b:82:29:e5:65:45:7b:d9:a0:81:f1:cb: 74:91:ff:9e:9b:d6:78:1e:e4:0f:d2:fc:8d:cb:bd:b4:31:08: 6e:75:63:73:f5:97:9f:18:8e:bb:49:2d:fc:a9:a0:ba:78:4c: d5:a2:eb:42:e7:a1:59:29:d0:a3:8d:74:05:62:56:a9:1d:d2: c0:e4:14:c2:d0:89:d6:ff:50:8c:4a:77:a9:87:4a:5d:4c:9a: 35:ed:37:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIo0swZufgB/voAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MTdlZjBlMTAtZWY0MS00YzA3LTg5YzgtZDVlNjkyNTg3ZGIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOHeGlZ36hZxJxn3hF1sP/Fzh1gYGZ9DMrbd hhsEUPpp3uRT13N7+l/4M1yam9ezKtqYuyT2fIzdkMphb0+2A/xZrYKW4GQVYxx3 0LC4X/N/cPDjbknRoben4vgirNXu7nO07G5JU/aQsLkJHi7+F1Rb3ZOqEvhe1TyP p0LGitImELeP3N7Ru4ZEJux6Xd4SHRI0U9nU8nB1ERKKdXJNGESEdCa9Tl4hAeF9 xYTlKvS7AiNVmcV+1nLdh77SJYM61bA+MnEKnLVaGeZg7vlOvPmjZ5nUo3gULTX1 2321dEmOK8ouOJPgwCdVkMDYxACLlzHPQ7/awtF+/bPhzhFTdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvRyp8PGykk3kzVNiKdtW0LsKqBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc0OGNjNGMtYjc1Ni0z YTU4LWE1ZWYtMmEyMDViYTA0N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACxmPu89kJt7/xz+rxF28sFO7cZadfltgkN7rnZOashXYdp6WZ7goHtv o38HCIN0w051/l68XUaFriJYLDb0M+eN7n7OOIoe07TLBaWuX9yL4BK8UxAlShmf s3rCoCav+yYFFGp1f1/2zhQ5866qt5LIVy6Hmln15vf326p824fQw2wl9USUrpL+ bbIR0TeXY7iYabiq9bKc86YxNE6BFTyJNeSFMjIY95uCKeVlRXvZoIHxy3SR/56b 1nge5A/S/I3LvbQxCG51Y3P1l58YjrtJLfypoLp4TNWi60LnoVkp0KONdAViVqkd 0sDkFMLQidb/UIxKd6mHSl1MmjXtN+U= -----END CERTIFICATE-----Generated at Thu Jul 10 01:24:32 2025 by rpki-client