$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa File: bbec4946-4c94-3beb-a180-9cc9e4007f63.roa (raw, json) Hash identifier: IIgxsXybU1312S68AWoCNdxKCw29kSqEByVGmBuoLpk= Subject key identifier: 11:E0:04:9B:61:4E:87:84:E8:44:E5:F7:F0:3A:9F:39:3D:D8:64:16 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CA1BB36DC9F2EC076300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.33.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ca:1b:b3:6d:c9:f2:ec:07:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=fa0f92b7-24c7-41e6-ac8a-1bdac9e2d173 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:aa:ba:21:23:94:6b:14:0b:34:9d:15:36:e8: 92:48:0b:7d:22:57:88:b4:d4:66:dc:88:b2:9a:90: 61:06:27:a9:65:d5:63:ce:f8:8e:d7:e3:37:b1:5d: 81:d5:35:d0:d4:c8:fd:01:ed:99:db:f0:f9:47:62: c4:c8:be:df:3b:b7:5d:22:8a:bf:29:31:fa:12:d5: d3:9b:39:93:6b:d9:9c:6a:52:40:67:9c:bb:b3:4d: e1:ab:e8:98:12:c9:d1:55:db:c5:bc:de:58:8a:9a: fa:29:ac:23:64:04:2f:9c:17:16:c7:2a:ff:c1:d1: 74:0f:c5:44:31:94:48:ef:50:2b:f1:d3:c7:d5:25: 33:c9:a0:67:7b:f0:91:20:a0:3d:73:2f:e1:47:3c: 83:7a:cc:68:62:41:fd:23:80:bc:b1:20:e9:95:9b: 2e:87:01:ff:a9:d9:2e:38:47:ef:03:84:06:5f:4e: a3:cd:20:84:a1:e9:75:2b:e8:c4:46:a5:73:63:12: 07:cf:20:b8:61:91:a2:9e:65:b7:5b:3b:86:dd:13: 1c:b6:31:90:85:a1:6d:e1:fd:e7:c5:67:ef:53:d3: 03:6f:5f:8b:bb:db:a4:24:92:14:73:79:04:96:d5: 8f:e7:61:4a:84:14:fa:c7:62:87:8a:3a:ec:5a:68: 5f:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:E0:04:9B:61:4E:87:84:E8:44:E5:F7:F0:3A:9F:39:3D:D8:64:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbec4946-4c94-3beb-a180-9cc9e4007f63.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:59:d1:ad:a5:4a:6c:df:48:79:25:2c:2b:60:c9:ab:81:a6: 2e:c2:2c:e2:8f:b0:4a:10:62:03:b4:eb:50:ae:df:9d:af:c8: f8:cb:dc:7c:f1:76:05:e6:03:54:a2:d8:c5:82:97:ad:3d:87: f6:81:f2:a7:5f:cc:4d:78:3e:6d:cf:ce:c6:38:eb:8a:19:76: 3a:5a:57:37:23:1a:d2:63:1e:f3:84:5e:d7:30:6d:11:5e:9f: 58:8f:17:c1:2c:4c:c0:f5:d1:65:05:d8:55:1e:53:f0:a2:e4: 0b:1c:67:ea:d4:1f:a0:2a:cc:9c:5c:86:2c:2b:d5:07:42:dd: fe:4f:9e:0d:9c:b1:a1:c1:f9:e2:a9:aa:ed:12:43:5e:d0:91: 2d:9b:36:f5:52:3e:92:53:eb:d1:ec:e5:bc:8d:84:9d:f9:b9: 53:eb:f7:6c:c1:d0:2b:01:e7:f9:01:a6:b2:ff:6c:f8:42:fd: 8a:26:d0:be:6b:71:27:ce:ad:89:85:f4:f7:77:cb:a6:a2:95: c2:1a:80:da:50:17:d3:00:03:81:79:dd:65:01:5c:4b:f8:f2: 42:2d:52:37:6d:9f:c9:54:64:ee:f2:0d:21:e7:17:40:16:f0: b8:24:04:ff:4c:c4:a8:22:5e:97:8f:dc:dc:61:9c:df:89:24: 4b:a4:db:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMobs23J8uwHYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmEwZjkyYjctMjRjNy00MWU2LWFjOGEtMWJkYWM5ZTJkMTczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6q6ISOUaxQLNJ0VNuiSSAt9IleItNRm3Iiy mpBhBiepZdVjzviO1+M3sV2B1TXQ1Mj9Ae2Z2/D5R2LEyL7fO7ddIoq/KTH6EtXT mzmTa9mcalJAZ5y7s03hq+iYEsnRVdvFvN5Yipr6KawjZAQvnBcWxyr/wdF0D8VE MZRI71Ar8dPH1SUzyaBne/CRIKA9cy/hRzyDesxoYkH9I4C8sSDplZsuhwH/qdku OEfvA4QGX06jzSCEoel1K+jERqVzYxIHzyC4YZGinmW3WzuG3RMctjGQhaFt4f3n xWfvU9MDb1+Lu9ukJJIUc3kEltWP52FKhBT6x2KHijrsWmhfKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHgBJthToeE6ETl9/A6nzk92GQWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmJlYzQ5NDYtNGM5NC0z YmViLWExODAtOWNjOWU0MDA3ZjYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCEgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJlZ0a2lSmzfSHklLCtgyauBpi7CLOKPsEoQYgO061Cu352vyPjL3Hzx dgXmA1Si2MWCl609h/aB8qdfzE14Pm3PzsY464oZdjpaVzcjGtJjHvOEXtcwbRFe n1iPF8EsTMD10WUF2FUeU/Ci5AscZ+rUH6AqzJxchiwr1QdC3f5Png2csaHB+eKp qu0SQ17QkS2bNvVSPpJT69Hs5byNhJ35uVPr92zB0CsB5/kBprL/bPhC/Yom0L5r cSfOrYmF9Pd3y6ailcIagNpQF9MAA4F53WUBXEv48kItUjdtn8lUZO7yDSHnF0AW 8LgkBP9MxKgiXpeP3NxhnN+JJEuk23o= -----END CERTIFICATE-----Generated at Thu Jul 10 02:32:31 2025 by rpki-client