$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b9f73294-82d0-30a6-8e43-804a1e525112.roa File: b9f73294-82d0-30a6-8e43-804a1e525112.roa (raw, json) Hash identifier: DzH+dNxP4/NFpJYlqNzYQWWVGHZELSQqKs4rUCSGOi8= Subject key identifier: D6:A1:A9:03:17:CE:03:E5:A9:24:2B:A9:95:F1:0D:0B:66:3C:8A:13 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CEC2B10D64A241075800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b9f73294-82d0-30a6-8e43-804a1e525112.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.49.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ce:c2:b1:0d:64:a2:41:07:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=84c67e81-8ea4-4d15-bbd0-4ca01edd4870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:fa:0e:02:77:86:26:9e:75:58:0c:a6:44:7d: 74:2f:f5:e6:cc:71:f3:a6:ae:32:15:eb:8d:f9:17: d1:93:2e:a1:a9:7d:52:3c:84:3c:3e:7f:e8:62:e8: 5d:cc:e1:bb:3b:65:ad:14:76:f0:9e:1c:f6:d8:3d: 16:71:00:3b:57:8d:01:68:99:29:7c:b1:fc:b9:51: 5c:15:79:90:e4:11:df:5a:02:81:c3:72:e8:c9:e7: 04:ad:d6:a4:5e:0d:4e:2b:30:54:cf:cd:62:08:da: 6e:57:86:f5:38:1a:aa:be:ee:be:16:11:0e:76:a4: 2e:09:b5:b8:0b:48:5f:91:f7:eb:49:e1:87:32:96: 5a:db:68:d7:64:f7:71:30:a4:9a:19:a7:a6:d9:a4: 4b:50:13:68:2d:0c:b7:58:5f:e5:6f:f9:c4:bc:22: ee:79:79:98:b4:b5:71:a1:c3:fb:ab:65:bd:4e:c5: 8a:a6:64:c4:72:f4:89:b9:d1:17:1a:47:3e:de:91: cd:ce:ea:b7:aa:81:f5:03:37:00:6e:c2:c0:06:e7: d8:34:03:b5:87:64:35:64:58:8f:51:1e:3a:33:5f: e4:55:3f:0a:70:e5:01:7e:3d:07:c3:e8:1b:1b:d3: 83:d4:94:fd:71:ff:de:5a:38:4b:a2:6a:fd:b4:1c: 6d:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:A1:A9:03:17:CE:03:E5:A9:24:2B:A9:95:F1:0D:0B:66:3C:8A:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b9f73294-82d0-30a6-8e43-804a1e525112.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:1e:8b:87:67:ea:43:b9:50:15:c4:35:73:d9:de:2a:01:d8: 62:a4:cd:56:6a:d1:00:d9:bf:00:2f:82:5c:a6:db:e3:2f:bc: 48:77:80:b9:6a:41:58:a6:0b:7e:06:54:ff:0f:3f:01:4e:1f: 37:a9:2b:e6:df:77:12:ab:19:ac:9e:18:91:25:2e:2c:b4:39: 91:09:5b:82:71:3d:e1:00:a3:92:72:eb:6c:8d:a4:66:f6:eb: 92:ce:c7:86:89:53:4a:46:53:ca:46:1a:9e:b9:0e:75:62:6b: 14:2a:5e:96:41:4e:6c:ef:ea:03:56:78:83:ad:5d:f4:8c:1c: 25:c4:fe:46:92:0a:10:30:89:3a:74:39:bd:33:8c:b2:d1:1d: 0d:db:98:58:48:ec:2a:4d:2a:15:c4:81:a3:9d:16:fc:41:0a: b3:6f:69:7a:a6:95:25:1e:dc:26:19:93:8c:8e:1c:fa:7d:25: ca:11:d1:db:d5:40:fa:78:ef:d9:f0:ed:64:2c:f0:00:79:e1: 52:5b:34:2a:85:52:01:ee:62:19:44:d7:80:64:34:c7:9f:a1: 42:83:0a:c8:a8:b1:9e:34:25:6a:3e:94:93:aa:19:e4:d8:8a: ca:05:c9:13:71:68:0a:f5:fb:aa:d9:b6:44:e8:08:d4:d9:09: dd:3a:8f:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM7CsQ1kokEHWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODRjNjdlODEtOGVhNC00ZDE1LWJiZDAtNGNhMDFlZGQ0ODcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfoOAneGJp51WAymRH10L/XmzHHzpq4yFeuN +RfRky6hqX1SPIQ8Pn/oYuhdzOG7O2WtFHbwnhz22D0WcQA7V40BaJkpfLH8uVFc FXmQ5BHfWgKBw3LoyecErdakXg1OKzBUz81iCNpuV4b1OBqqvu6+FhEOdqQuCbW4 C0hfkffrSeGHMpZa22jXZPdxMKSaGaem2aRLUBNoLQy3WF/lb/nEvCLueXmYtLVx ocP7q2W9TsWKpmTEcvSJudEXGkc+3pHNzuq3qoH1AzcAbsLABufYNAO1h2Q1ZFiP UR46M1/kVT8KcOUBfj0Hw+gbG9OD1JT9cf/eWjhLomr9tBxtUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNahqQMXzgPlqSQrqZXxDQtmPIoTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjlmNzMyOTQtODJkMC0z MGE2LThlNDMtODA0YTFlNTI1MTEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABAei4dn6kO5UBXENXPZ3ioB2GKkzVZq0QDZvwAvglym2+MvvEh3gLlq QVimC34GVP8PPwFOHzepK+bfdxKrGayeGJElLiy0OZEJW4JxPeEAo5Jy62yNpGb2 65LOx4aJU0pGU8pGGp65DnViaxQqXpZBTmzv6gNWeIOtXfSMHCXE/kaSChAwiTp0 Ob0zjLLRHQ3bmFhI7CpNKhXEgaOdFvxBCrNvaXqmlSUe3CYZk4yOHPp9JcoR0dvV QPp479nw7WQs8AB54VJbNCqFUgHuYhlE14BkNMefoUKDCsiosZ40JWo+lJOqGeTY isoFyRNxaAr1+6rZtkToCNTZCd06j2A= -----END CERTIFICATE-----Generated at Thu Jul 10 01:47:20 2025 by rpki-client