$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa File: bbf034e3-220c-355c-83ad-7b03291b912c.roa (raw, json) Hash identifier: fwL9cjhWP25IxMzEqBn1/2QwfYbu0an4bSOPds9Q8M4= Subject key identifier: D3:C9:6F:6C:A3:92:3B:A1:B3:1E:DF:4B:D6:72:D8:AD:62:DD:41:03 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909B49D5E9382407A0F000 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.36.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9b:49:d5:e9:38:24:07:a0:f0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=1dedc670-bf2a-4cf1-a9bf-a795c97631f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:b6:1b:36:fb:1e:a4:07:7c:67:33:dc:2b:88: f1:9d:56:e3:72:40:e6:e2:d3:24:24:ed:b7:d8:95: 7b:78:c8:c0:86:97:6c:ac:8c:04:82:9c:4b:d9:85: 24:48:63:40:5a:98:92:45:b0:5a:ea:d2:38:b4:b0: 5d:71:78:ab:4c:9d:34:d4:53:97:50:d1:f7:fd:e6: f7:cc:ec:e8:8f:bc:5d:f2:2d:0a:07:40:f9:cd:2f: d2:02:cb:4e:23:52:67:12:66:a6:47:3c:2f:34:ac: 16:ed:70:7d:08:5d:de:d1:3a:e3:24:2a:93:f7:61: 70:4f:f2:60:c4:3e:d4:ef:e3:65:c1:95:86:45:58: 15:ac:eb:1d:a2:ba:7d:13:45:ac:32:e3:d2:d3:ac: 43:db:ec:a9:67:b4:6c:fe:a9:3e:9b:56:cd:8c:6f: be:c4:5b:23:cb:eb:54:0f:b8:09:c2:ef:ba:f0:55: fd:7c:02:c6:90:b5:c0:28:83:43:37:4c:6e:7f:04: c3:7f:ff:62:2f:aa:78:2d:6f:95:2f:b1:c0:78:3c: 9e:8d:c7:cc:64:a7:b4:6f:24:7e:a6:c1:62:e6:86: 76:3a:54:d7:a2:d6:be:9f:d3:3f:46:7a:c0:67:90: 12:8a:7e:86:75:28:71:a8:b4:64:f8:a7:e9:9f:2d: ab:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:C9:6F:6C:A3:92:3B:A1:B3:1E:DF:4B:D6:72:D8:AD:62:DD:41:03 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bbf034e3-220c-355c-83ad-7b03291b912c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:ce:be:62:98:5b:c7:72:82:36:f8:bb:16:69:b4:0e:35:9e: cc:d6:78:4a:ac:45:12:94:d9:3a:6e:88:2a:ac:0c:a4:be:b5: b8:0a:c9:61:83:c5:8f:c8:84:18:b9:26:38:0c:09:21:5c:ce: 4d:ab:6d:4e:89:18:5a:5c:2b:d6:6d:ce:d9:d5:f1:1a:dc:fc: 15:29:88:01:9d:55:1d:e1:df:46:c5:e4:d0:78:39:a5:65:62: e9:e8:51:58:aa:7b:ad:37:0d:bb:33:d7:29:bb:c1:dc:32:3c: 54:a2:57:6b:23:f5:2a:be:96:bc:a5:f7:cb:47:59:98:52:57: a8:3e:1e:57:23:42:e7:61:c1:f2:51:f9:d5:e6:9f:bc:fe:c6: 73:5b:a6:04:0f:44:7c:67:4c:b3:d3:5f:2e:98:e6:7d:5c:cc: 0b:34:6d:d7:61:6a:e2:7a:d0:ca:8a:11:84:ac:80:c2:91:a5: f7:0c:ba:5d:6c:1a:41:24:4c:c5:bd:61:5d:35:c4:4f:79:f0: 99:3d:f8:6b:05:22:70:69:a1:0d:60:f9:80:ec:4e:10:ac:4c: a9:e8:ab:7d:49:53:56:62:43:c5:a0:81:05:2c:d7:99:23:ce: 26:34:f1:ea:d7:50:69:4e:72:22:ba:2a:a8:7b:f5:4d:6c:56: 45:80:33:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJtJ1ek4JAeg8AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MWRlZGM2NzAtYmYyYS00Y2YxLWE5YmYtYTc5NWM5NzYzMWYzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLYbNvsepAd8ZzPcK4jxnVbjckDm4tMkJO23 2JV7eMjAhpdsrIwEgpxL2YUkSGNAWpiSRbBa6tI4tLBdcXirTJ001FOXUNH3/eb3 zOzoj7xd8i0KB0D5zS/SAstOI1JnEmamRzwvNKwW7XB9CF3e0TrjJCqT92FwT/Jg xD7U7+NlwZWGRVgVrOsdorp9E0WsMuPS06xD2+ypZ7Rs/qk+m1bNjG++xFsjy+tU D7gJwu+68FX9fALGkLXAKINDN0xufwTDf/9iL6p4LW+VL7HAeDyejcfMZKe0byR+ psFi5oZ2OlTXota+n9M/RnrAZ5ASin6GdShxqLRk+Kfpny2rjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNPJb2yjkjuhsx7fS9Zy2K1i3UEDMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmJmMDM0ZTMtMjIwYy0z NTVjLTgzYWQtN2IwMzI5MWI5MTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCTgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTOvmKYW8dygjb4uxZptA41nszWeEqsRRKU2TpuiCqsDKS+tbgKyWGD xY/IhBi5JjgMCSFczk2rbU6JGFpcK9ZtztnV8Rrc/BUpiAGdVR3h30bF5NB4OaVl YunoUViqe603Dbsz1ym7wdwyPFSiV2sj9Sq+lryl98tHWZhSV6g+HlcjQudhwfJR +dXmn7z+xnNbpgQPRHxnTLPTXy6Y5n1czAs0bddhauJ60MqKEYSsgMKRpfcMul1s GkEkTMW9YV01xE958Jk9+GsFInBpoQ1g+YDsThCsTKnoq31JU1ZiQ8WggQUs15kj ziY08erXUGlOciK6Kqh79U1sVkWAM8c= -----END CERTIFICATE-----Generated at Thu Jul 10 06:27:31 2025 by rpki-client