$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/caa284b3-72f4-30bf-9f0a-d7622cd5195f.roa File: caa284b3-72f4-30bf-9f0a-d7622cd5195f.roa (raw, json) Hash identifier: XgHYxq3jKZywgb1CFYmMnEZsJ3T0rgnPsGJcE5odwnc= Subject key identifier: 35:B1:DF:94:17:D0:89:4D:6B:AD:42:0A:2F:C4:D8:F6:DC:CB:1D:7C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CE5DD9A079FC7291D640 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/caa284b3-72f4-30bf-9f0a-d7622cd5195f.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.33.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ce:5d:d9:a0:79:fc:72:91:d6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=c0a2aaeb-2be7-4937-986a-d094cf33c9e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:92:9c:33:f8:22:30:ec:36:b7:5d:7f:b8:83: ec:b7:d8:6d:bf:26:71:b7:c6:c0:62:a7:74:f2:5f: d7:ed:3f:67:17:75:95:98:e1:65:27:a5:51:33:81: 1d:4f:fc:b6:68:2d:51:3e:6f:2c:5c:9c:8d:c0:cf: 8e:13:82:c3:d9:64:63:b8:a5:19:13:08:1c:a2:d8: e2:08:7f:f5:5d:25:c4:18:a7:46:c1:b7:42:51:b6: 66:3a:b1:a8:8d:e3:5b:20:76:68:38:3f:81:7f:63: 0f:70:66:27:06:8a:32:24:50:37:c4:47:2d:1f:ac: a3:72:cb:ca:ca:b9:30:fd:93:82:46:e0:7b:6f:e8: ac:a1:43:d4:7b:14:39:e9:62:82:04:09:88:da:e8: b5:ab:5c:5d:a9:ce:44:cb:a8:71:ba:ec:c2:c2:fd: 8f:79:fc:77:76:d5:27:84:c6:5f:57:b3:cc:6e:28: 6b:16:78:01:46:08:44:45:75:fc:24:9b:24:48:f4: a5:fc:a1:19:65:c6:d5:35:dc:69:38:a3:a1:f1:eb: bd:3d:8c:41:04:72:ef:57:d3:13:37:eb:10:99:26: 3b:e1:f7:9e:0a:00:40:dd:21:2f:c4:b8:0b:37:63: 9b:25:78:25:fb:99:d6:e6:47:3f:41:23:70:d9:bc: 72:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:B1:DF:94:17:D0:89:4D:6B:AD:42:0A:2F:C4:D8:F6:DC:CB:1D:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/caa284b3-72f4-30bf-9f0a-d7622cd5195f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:ff:e5:44:7b:e6:18:e5:55:7f:97:90:28:9f:e0:24:92:ed: ed:60:4e:26:a5:8a:f8:da:24:9a:1f:42:c6:16:f8:29:fa:f7: 8f:4d:8b:8b:50:f0:6e:98:a1:e3:c0:69:f7:87:c1:d4:b7:df: 8a:09:73:9a:99:55:46:c0:1a:cd:54:04:5b:e1:8f:21:20:be: dc:da:c3:68:d7:b7:ad:4e:c9:ca:6b:b3:a2:c2:ab:94:1f:2f: 06:4c:93:95:95:2c:51:2b:c8:f7:78:6c:3a:cd:fa:06:04:38: 26:ee:d3:f0:f1:e5:18:19:52:32:75:07:66:17:d8:c0:a7:d1: f4:18:6f:20:39:28:d1:51:81:e7:13:e7:8d:26:39:5d:01:ab: 3a:14:1b:62:5b:82:52:16:d1:03:f3:c1:22:20:60:59:b9:80: aa:c2:f3:5b:a1:d7:f4:98:83:a7:fa:ba:d0:0b:9f:90:3c:b6: 01:5a:59:0b:83:b3:33:16:00:03:28:aa:77:0a:3c:47:dc:47: f5:46:3f:17:7b:88:71:5f:ef:cc:b3:d1:51:00:3a:e5:52:40: 66:9d:0a:2f:32:1f:48:97:49:69:ff:dd:ed:ae:56:0d:a8:ba: 4d:86:17:6f:49:3f:58:83:e0:f4:55:3b:bc:13:14:9f:ba:e4: 20:aa:39:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM5d2aB5/HKR1kAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YzBhMmFhZWItMmJlNy00OTM3LTk4NmEtZDA5NGNmMzNjOWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvZKcM/giMOw2t11/uIPst9htvyZxt8bAYqd0 8l/X7T9nF3WVmOFlJ6VRM4EdT/y2aC1RPm8sXJyNwM+OE4LD2WRjuKUZEwgcotji CH/1XSXEGKdGwbdCUbZmOrGojeNbIHZoOD+Bf2MPcGYnBooyJFA3xEctH6yjcsvK yrkw/ZOCRuB7b+isoUPUexQ56WKCBAmI2ui1q1xdqc5Ey6hxuuzCwv2Pefx3dtUn hMZfV7PMbihrFngBRghERXX8JJskSPSl/KEZZcbVNdxpOKOh8eu9PYxBBHLvV9MT N+sQmSY74feeCgBA3SEvxLgLN2ObJXgl+5nW5kc/QSNw2bxyWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDWx35QX0IlNa61CCi/E2Pbcyx18MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2FhMjg0YjMtNzJmNC0z MGJmLTlmMGEtZDc2MjJjZDUxOTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABP/5UR75hjlVX+XkCif4CSS7e1gTialivjaJJofQsYW+Cn6949Ni4tQ 8G6YoePAafeHwdS334oJc5qZVUbAGs1UBFvhjyEgvtzaw2jXt61Oycprs6LCq5Qf LwZMk5WVLFEryPd4bDrN+gYEOCbu0/Dx5RgZUjJ1B2YX2MCn0fQYbyA5KNFRgecT 540mOV0BqzoUG2JbglIW0QPzwSIgYFm5gKrC81uh1/SYg6f6utALn5A8tgFaWQuD szMWAAMoqncKPEfcR/VGPxd7iHFf78yz0VEAOuVSQGadCi8yH0iXSWn/3e2uVg2o uk2GF29JP1iD4PRVO7wTFJ+65CCqOfI= -----END CERTIFICATE-----Generated at Thu Jul 10 01:56:42 2025 by rpki-client