$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa File: d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa (raw, json) Hash identifier: 2HOgO23XDdjy8vu6BlcUl8Kamq1PwCHIbJpTe+Qiu6I= Subject key identifier: 36:41:02:B2:2E:7D:50:D5:24:3E:C5:AB:9C:40:DD:ED:AF:C6:84:B6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CB7477385CE931709AC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.62.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cb:74:77:38:5c:e9:31:70:9a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=eb22b502-b0d4-49c3-b933-74cb91e7b5d4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:a2:ef:bb:ed:eb:49:6f:5f:51:0f:76:97:35: b0:a0:1d:cb:05:e9:06:41:39:0a:32:83:f9:33:ad: db:11:84:83:4c:e8:2b:53:85:cb:23:6d:c8:be:6f: 18:bd:3a:5e:96:f1:0c:92:30:b6:d7:a9:48:f9:e0: 53:1f:81:fd:77:83:51:ae:cc:28:ae:46:08:74:84: 1a:c8:dc:61:79:a2:fc:bb:a8:a3:6e:4a:15:39:17: 3c:60:fd:7c:ac:7f:30:44:6e:8c:89:5b:74:5a:46: db:1e:b0:a9:c7:8a:2a:13:5d:3c:b4:e1:d7:3c:07: 60:9b:fe:c9:0b:96:9a:6c:80:5d:03:cf:94:a2:89: 57:c0:7e:94:62:56:82:66:a6:94:84:80:34:b4:d0: 24:43:c2:90:c3:19:9b:4e:5a:10:f8:62:38:92:46: ff:5f:4a:97:d7:13:65:bb:03:c4:e3:de:3e:be:98: 87:b6:02:e8:39:40:73:ad:52:a7:de:b2:2d:07:5d: 83:68:9e:86:f1:a2:21:8c:52:81:a1:65:48:58:f1: 5b:04:47:70:45:a0:93:ee:f4:f9:ee:d0:a4:63:c7: 22:0f:b3:95:e8:ba:a7:fd:87:25:79:19:1d:6a:7b: 0f:8b:46:57:de:17:f0:68:1a:ca:48:70:b6:19:b5: a5:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:41:02:B2:2E:7D:50:D5:24:3E:C5:AB:9C:40:DD:ED:AF:C6:84:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d0ad44cb-ae55-35f2-bd9a-5f24900eda45.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:7e:7f:93:21:e4:4b:6a:6e:62:e9:70:c0:e3:82:44:52:9f: 4b:fe:de:98:8b:ae:08:19:24:6c:64:b3:dc:0f:8c:6b:0f:37: 01:b8:82:23:7a:74:d9:f5:05:25:b9:4d:a8:c3:e7:ed:90:b8: bb:eb:c4:9d:b3:28:6a:99:f0:07:fb:be:ce:c6:ea:0a:03:13: 34:63:56:f2:4a:fd:3b:2c:08:bb:0d:ad:0e:ca:b9:2a:05:ec: e5:c9:84:58:ca:d8:ee:30:11:a8:0d:ef:df:e0:39:98:bb:ee: eb:0d:45:ca:57:0f:c0:65:1e:ca:9a:2a:7c:80:90:23:47:62: 8e:f9:2d:26:be:9f:3e:bb:53:26:75:7a:a3:c3:af:e5:e3:95: a5:09:34:b7:50:4e:fa:c8:cf:60:d4:a5:5e:8a:ce:0b:60:2f: ca:1d:f6:98:3d:5e:89:f8:57:cd:38:9e:50:ff:7a:d1:03:15: 3a:9e:ba:29:99:f5:3b:f5:62:04:38:28:a4:0f:fa:e6:f4:a5: 41:6f:9e:32:6e:c1:f4:9b:f3:2a:8f:b8:9a:de:c6:ce:49:64: d7:d1:30:0d:c1:b3:27:d3:7e:50:73:8b:05:fd:c1:4c:79:a4: 30:cc:23:c9:3b:d8:6f:b0:e7:e5:55:66:af:d1:0e:9d:16:d5: 22:d2:df:57 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikMt0dzhc6TFwmsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZWIyMmI1MDItYjBkNC00OWMzLWI5MzMtNzRjYjkxZTdiNWQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6Lvu+3rSW9fUQ92lzWwoB3LBekGQTkKMoP5 M63bEYSDTOgrU4XLI23Ivm8YvTpelvEMkjC216lI+eBTH4H9d4NRrsworkYIdIQa yNxheaL8u6ijbkoVORc8YP18rH8wRG6MiVt0WkbbHrCpx4oqE108tOHXPAdgm/7J C5aabIBdA8+UoolXwH6UYlaCZqaUhIA0tNAkQ8KQwxmbTloQ+GI4kkb/X0qX1xNl uwPE494+vpiHtgLoOUBzrVKn3rItB12DaJ6G8aIhjFKBoWVIWPFbBEdwRaCT7vT5 7tCkY8ciD7OV6Lqn/YcleRkdansPi0ZX3hfwaBrKSHC2GbWlhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDZBArIufVDVJD7Fq5xA3e2vxoS2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDBhZDQ0Y2ItYWU1NS0z NWYyLWJkOWEtNWYyNDkwMGVkYTQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGl+f5Mh5EtqbmLpcMDjgkRSn0v+3piLrggZJGxks9wPjGsPNwG4giN6 dNn1BSW5TajD5+2QuLvrxJ2zKGqZ8Af7vs7G6goDEzRjVvJK/TssCLsNrQ7KuSoF 7OXJhFjK2O4wEagN79/gOZi77usNRcpXD8BlHsqaKnyAkCNHYo75LSa+nz67UyZ1 eqPDr+XjlaUJNLdQTvrIz2DUpV6KzgtgL8od9pg9Xon4V804nlD/etEDFTqeuimZ 9Tv1YgQ4KKQP+ub0pUFvnjJuwfSb8yqPuJrexs5JZNfRMA3BsyfTflBziwX9wUx5 pDDMI8k72G+w5+VVZq/RDp0W1SLS31c= -----END CERTIFICATE-----Generated at Thu Jul 10 09:35:29 2025 by rpki-client