$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: sWNfXZuL8Lcpj6Ac28hcyxsxPI8UMU6AJpfpJB1UpX0= Subject key identifier: 8B:A3:9E:64:3A:C1:A7:17:DF:94:0B:62:07:DA:9F:88:05:CE:8F:9E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CE8ADF25E65DDAB50380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:ce:8a:df:25:e6:5d:da:b5:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=4421b436-ea69-42a7-bfdc-be950d2b5574 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:40:8a:9a:02:da:3f:e0:ac:03:ab:eb:c2:12: c5:03:22:1a:ae:9d:81:99:8c:2f:b0:9a:d1:c9:5d: ee:9b:f6:43:47:70:6c:4f:26:57:59:56:f2:6a:61: 93:b0:aa:b6:b3:09:d1:9e:15:79:0d:31:29:da:f6: b5:11:4f:29:83:87:6a:f7:0c:7b:6a:83:02:e9:59: 84:30:71:83:73:dc:22:83:ea:4e:c4:c8:f3:42:1d: 75:ec:1d:5a:4e:b6:bf:24:78:bc:bf:13:d4:6a:e6: 32:a2:d3:29:5d:06:71:51:ac:da:05:db:48:e2:84: e5:78:e2:a3:e3:7e:33:c4:32:46:77:c7:fe:01:1e: ad:5e:28:97:f3:84:27:2f:4e:23:2b:7c:a4:3e:25: 25:91:89:33:b1:9f:7f:0c:b5:66:10:09:0f:0c:54: b0:c4:ae:0f:87:f6:42:97:13:7b:0e:4d:ab:2d:4b: 2e:bc:0f:9f:6f:94:f4:86:6a:f5:1a:ba:bd:94:57: 3e:c7:82:ef:1d:8c:34:29:13:66:de:8d:29:06:5c: 90:d4:e1:76:f7:a2:89:71:88:30:af:bf:23:b2:1e: 6e:cd:76:a8:6f:f6:c6:ce:39:9f:8f:10:f1:d0:e5: 96:da:12:8e:c7:b8:65:9a:b7:e8:fe:bd:bc:36:07: 56:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:A3:9E:64:3A:C1:A7:17:DF:94:0B:62:07:DA:9F:88:05:CE:8F:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:56:9b:a9:78:ff:e2:f3:61:f4:9d:cf:3f:b3:3e:16:06:8d: da:bd:e7:a7:72:20:d0:fb:13:fb:80:2a:5b:f1:e1:ba:b1:2c: 2c:5e:b6:60:75:98:36:d6:d4:31:2d:2c:ae:e4:26:d8:ca:b8: e0:db:60:3a:6e:db:ab:e2:65:a7:37:b1:bd:0a:be:99:35:0d: 52:29:38:9f:9e:36:20:51:77:7f:b0:02:03:ee:0e:a1:1e:7b: 5f:2e:3a:0b:fb:a2:d5:5d:46:9c:db:79:bb:43:01:49:0c:96: 91:61:01:95:36:3f:1b:fa:0c:0e:a4:29:ee:58:63:9e:77:18: b9:11:a4:8e:29:a1:1c:74:21:1b:55:48:38:08:be:85:4f:41: aa:8b:16:7f:d7:d4:3e:2c:b8:95:7e:af:8b:85:50:d1:d4:90: 21:3d:0b:f4:9c:5c:ea:1f:4d:e9:6f:c9:83:83:14:c9:9e:b8: 6b:65:e7:d4:f0:93:0c:66:b1:6d:b2:1f:14:f3:7c:aa:8f:64: 99:89:79:c0:85:3c:d4:31:b9:20:37:8f:da:88:ee:72:7b:b6: 92:78:b4:be:6e:36:1b:21:50:d4:fb:85:bd:d5:7b:27:e9:0e: 41:e8:2d:9d:e0:b3:9e:fc:2c:bb:2b:b9:13:65:16:38:8e:54: 2d:f6:bd:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM6K3yXmXdq1A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk NDQyMWI0MzYtZWE2OS00MmE3LWJmZGMtYmU5NTBkMmI1NTc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiECKmgLaP+CsA6vrwhLFAyIarp2BmYwvsJrR yV3um/ZDR3BsTyZXWVbyamGTsKq2swnRnhV5DTEp2va1EU8pg4dq9wx7aoMC6VmE MHGDc9wig+pOxMjzQh117B1aTra/JHi8vxPUauYyotMpXQZxUazaBdtI4oTleOKj 434zxDJGd8f+AR6tXiiX84QnL04jK3ykPiUlkYkzsZ9/DLVmEAkPDFSwxK4Ph/ZC lxN7Dk2rLUsuvA+fb5T0hmr1Grq9lFc+x4LvHYw0KRNm3o0pBlyQ1OF296KJcYgw r78jsh5uzXaob/bGzjmfjxDx0OWW2hKOx7hlmrfo/r28NgdW/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIujnmQ6wacX35QLYgfan4gFzo+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhWm6l4/+LzYfSdzz+zPhYGjdq956dyIND7E/uAKlvx4bqxLCxetmB1 mDbW1DEtLK7kJtjKuODbYDpu26viZac3sb0Kvpk1DVIpOJ+eNiBRd3+wAgPuDqEe e18uOgv7otVdRpzbebtDAUkMlpFhAZU2Pxv6DA6kKe5YY553GLkRpI4poRx0IRtV SDgIvoVPQaqLFn/X1D4suJV+r4uFUNHUkCE9C/ScXOofTelvyYODFMmeuGtl59Tw kwxmsW2yHxTzfKqPZJmJecCFPNQxuSA3j9qI7nJ7tpJ4tL5uNhshUNT7hb3Veyfp DkHoLZ3gs578LLsruRNlFjiOVC32vV4= -----END CERTIFICATE-----Generated at Thu Jul 10 06:21:14 2025 by rpki-client