$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa File: bf8c75e5-8a48-3682-ba23-76245f3af041.roa (raw, json) Hash identifier: bhfaR8ecj8JLAt2FLZXKHybDJv+a94D0+tmhmfJ9PM8= Subject key identifier: D4:BB:D1:1A:7E:A9:7F:CE:7D:C1:6F:8C:FE:E5:10:7D:34:DA:D3:5A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D039D09FC0E678EB3220 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.60.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d0:39:d0:9f:c0:e6:78:eb:32:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=06ad587e-e865-4622-83e1-78a1321604bb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:79:29:77:bc:4b:61:58:a3:a5:52:09:49:d3: 21:4b:38:7c:05:14:2f:9e:a9:66:f2:68:6f:44:fe: 8e:8a:a8:7b:d9:91:d0:41:0b:86:2c:0d:40:01:11: ce:7f:e4:34:c9:28:5b:8f:b8:ca:aa:05:57:0c:b0: 58:f8:f7:bf:60:14:54:55:a9:2a:c0:39:cb:8e:c3: ad:22:a7:9a:b9:26:0d:8f:3e:36:15:08:22:6e:e9: 35:1a:ea:39:f3:2c:a4:e4:c2:b1:bc:af:5a:53:22: ae:fc:03:94:57:62:6f:17:36:fc:a0:a4:ed:34:45: 6c:fa:83:71:1e:c7:63:dc:8f:31:8a:8c:01:2a:74: 2a:a8:51:e8:90:1c:b1:11:99:1e:8d:19:fd:4b:00: 97:8f:55:73:80:bb:4e:2b:f3:ec:d7:c8:ea:ce:15: 39:87:4d:3c:33:22:2a:20:05:25:f3:32:88:3a:be: 78:bd:cf:fe:11:a2:e4:7d:8b:82:13:bc:1e:1e:c6: 77:bd:08:bc:c1:1b:36:88:9c:75:cd:bc:c4:29:a5: f4:5e:86:98:3c:b7:dc:7f:99:52:31:db:c5:6a:98: cc:5c:c7:04:27:13:b8:ca:73:8a:a9:60:9e:91:cd: fa:e2:14:43:fe:ee:fd:25:ff:fd:15:9f:2e:0c:8e: 5a:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:BB:D1:1A:7E:A9:7F:CE:7D:C1:6F:8C:FE:E5:10:7D:34:DA:D3:5A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bf8c75e5-8a48-3682-ba23-76245f3af041.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:64:f0:c8:51:a9:70:e1:72:a6:f0:43:29:10:30:dc:40:c0: 43:16:f4:65:aa:42:00:54:03:2f:c7:91:08:27:08:8b:91:38: 62:73:64:ea:15:f7:5f:b5:38:ca:14:6f:22:63:3b:de:3f:ce: f2:32:c8:13:f9:ae:1f:45:42:e9:a5:56:1e:75:5d:0b:f1:14: dc:6e:2d:e0:d7:e1:d3:34:b5:d8:5f:2b:89:b2:6a:27:cc:b4: e2:b9:57:8a:bb:99:5b:5c:ff:30:3a:55:9d:e1:3a:64:ce:76: 79:7a:8f:2b:e8:6b:e6:86:6a:84:66:3e:9f:ad:d2:69:1e:6f: 14:47:bc:d9:61:a6:99:1a:69:bc:e8:35:fd:a1:72:ab:03:71: 19:25:fa:e1:9c:99:b6:05:8b:92:c1:c1:d7:e3:68:8c:65:fa: 66:2c:41:8f:26:79:ba:5d:c8:99:03:ca:2a:2e:01:a1:c8:14: b1:83:38:11:6d:94:f1:70:de:e4:b4:52:c5:cf:b2:24:f6:ca: 0f:5c:98:ad:17:cf:27:9e:c2:f0:90:80:d3:01:57:07:39:96: 5d:8f:c1:dd:9c:ba:b4:80:09:97:cd:3f:d4:18:e6:c1:69:07: b5:8f:51:7d:c8:f2:0f:8b:a2:d3:92:88:cf:c4:4b:97:25:02: 61:14:48:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNA50J/A5njrMiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk MDZhZDU4N2UtZTg2NS00NjIyLTgzZTEtNzhhMTMyMTYwNGJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Xkpd7xLYVijpVIJSdMhSzh8BRQvnqlm8mhv RP6Oiqh72ZHQQQuGLA1AARHOf+Q0yShbj7jKqgVXDLBY+Pe/YBRUVakqwDnLjsOt IqeauSYNjz42FQgibuk1Guo58yyk5MKxvK9aUyKu/AOUV2JvFzb8oKTtNEVs+oNx Hsdj3I8xiowBKnQqqFHokByxEZkejRn9SwCXj1VzgLtOK/Ps18jqzhU5h008MyIq IAUl8zKIOr54vc/+EaLkfYuCE7weHsZ3vQi8wRs2iJx1zbzEKaX0XoaYPLfcf5lS MdvFapjMXMcEJxO4ynOKqWCekc364hRD/u79Jf/9FZ8uDI5a1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNS70Rp+qX/OfcFvjP7lEH002tNaMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmY4Yzc1ZTUtOGE0OC0z NjgyLWJhMjMtNzYyNDVmM2FmMDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABtk8MhRqXDhcqbwQykQMNxAwEMW9GWqQgBUAy/HkQgnCIuROGJzZOoV 91+1OMoUbyJjO94/zvIyyBP5rh9FQumlVh51XQvxFNxuLeDX4dM0tdhfK4myaifM tOK5V4q7mVtc/zA6VZ3hOmTOdnl6jyvoa+aGaoRmPp+t0mkebxRHvNlhppkaabzo Nf2hcqsDcRkl+uGcmbYFi5LBwdfjaIxl+mYsQY8mebpdyJkDyiouAaHIFLGDOBFt lPFw3uS0UsXPsiT2yg9cmK0XzyeewvCQgNMBVwc5ll2Pwd2curSACZfNP9QY5sFp B7WPUX3I8g+LotOSiM/ES5clAmEUSP8= -----END CERTIFICATE-----Generated at Thu Jul 10 09:50:38 2025 by rpki-client