$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa File: d2f12902-fe70-389d-ab44-0722a47d21f8.roa (raw, json) Hash identifier: xAuMlTM0b3/2OJ2TQ7GCLyOSN9x3HCVaza2zFX0Vbf4= Subject key identifier: 64:82:BC:99:78:96:4C:7A:13:47:55:02:61:A1:40:34:B1:6C:AD:16 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A629086330BDABA2328755660 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.49.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:86:33:0b:da:ba:23:28:75:56:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=8038aef2-ae20-4b91-9e5b-9eee2fb6d617 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:f7:c6:5c:58:1f:29:43:08:25:3d:dd:b5:11: ac:b3:8d:13:2b:09:b6:0a:b3:32:1a:d7:5f:71:09: d9:18:22:44:5d:45:b1:04:01:5b:3f:ac:09:d6:4f: ed:3a:5d:b8:b6:a2:46:83:16:31:33:85:39:dd:d5: 05:47:ed:09:4d:6f:81:11:27:b2:05:72:96:4f:6b: 62:a8:c0:46:20:34:ea:01:85:3b:16:d1:ab:a9:39: 16:08:46:51:6c:0f:78:ab:94:ff:e4:cd:17:50:52: 7c:e7:1f:86:2a:a7:b3:fc:ab:ee:00:ba:1d:53:3d: 58:66:ad:10:40:5b:24:44:94:4f:31:4a:04:4b:1f: 3f:a8:df:5e:98:4e:ee:c1:38:fc:fd:1f:ac:72:a6: 85:27:74:0b:e6:5d:bc:49:fe:66:ff:4f:76:7b:4b: e3:5b:18:14:bd:13:b0:d0:2f:22:58:43:dd:c9:58: fe:75:20:69:b6:4a:61:6a:89:c1:fd:b7:36:ec:5c: 8f:ea:51:b8:17:ae:65:72:71:c7:de:8c:7d:df:8d: 5e:7e:db:c9:80:ca:7e:a7:fb:0b:d5:6a:9c:9c:91: f0:73:2d:53:60:92:fa:af:a3:82:42:a0:95:b5:3b: ec:a1:9e:b2:94:79:3b:3d:1e:d6:4f:cf:34:48:64: 47:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:82:BC:99:78:96:4C:7A:13:47:55:02:61:A1:40:34:B1:6C:AD:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:6c:00:6f:79:fe:54:15:df:bf:33:c7:b9:5d:10:18:65:bb: d7:97:5a:8b:8a:cf:c3:61:ad:97:73:1c:3e:ee:05:70:bb:d0: b1:57:dd:fd:e7:57:8a:ae:6f:21:90:4b:5e:ca:0e:84:87:c0: d9:a5:f7:6f:6d:70:92:21:7b:59:fa:78:c3:db:a3:f4:f0:89: ea:97:17:00:22:3c:55:8a:97:41:49:c6:64:6a:f6:e5:5e:bc: ca:9c:6b:2e:a3:47:8e:b1:d6:9b:a3:2c:f6:81:8e:23:72:c7: 7f:fe:95:33:aa:ef:e4:45:7e:3b:b6:7c:36:f1:ef:8f:3e:31: 46:21:6b:a4:23:41:21:f7:74:09:83:00:11:aa:78:85:ad:8f: 75:4d:8d:77:f4:9e:62:94:f6:e1:61:c2:b0:77:9c:43:e1:55: c6:49:a7:ba:03:21:7b:45:49:23:64:bb:ee:7a:79:73:3f:45: 90:82:a4:b5:39:d6:6d:85:57:13:fc:fd:55:64:c3:98:27:f4: 7d:7a:9f:7a:b2:07:41:2a:be:99:f6:70:ef:0b:c1:46:7d:4b: dd:d6:8b:93:2d:d1:dc:32:88:b2:d2:29:22:e3:b0:a2:8c:5c: 92:98:29:93:37:02:23:47:29:2f:64:6f:86:ed:49:85:fe:80: 30:19:f7:e3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIYzC9q6Iyh1VmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODAzOGFlZjItYWUyMC00YjkxLTllNWItOWVlZTJmYjZkNjE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkPfGXFgfKUMIJT3dtRGss40TKwm2CrMyGtdf cQnZGCJEXUWxBAFbP6wJ1k/tOl24tqJGgxYxM4U53dUFR+0JTW+BESeyBXKWT2ti qMBGIDTqAYU7FtGrqTkWCEZRbA94q5T/5M0XUFJ85x+GKqez/KvuALodUz1YZq0Q QFskRJRPMUoESx8/qN9emE7uwTj8/R+scqaFJ3QL5l28Sf5m/092e0vjWxgUvROw 0C8iWEPdyVj+dSBptkphaonB/bc27FyP6lG4F65lcnHH3ox9341eftvJgMp+p/sL 1WqcnJHwcy1TYJL6r6OCQqCVtTvsoZ6ylHk7PR7WT880SGRH2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSCvJl4lkx6E0dVAmGhQDSxbK0WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDJmMTI5MDItZmU3MC0z ODlkLWFiNDQtMDcyMmE0N2QyMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZsAG95/lQV378zx7ldEBhlu9eXWouKz8NhrZdzHD7uBXC70LFX3f3n V4qubyGQS17KDoSHwNml929tcJIhe1n6eMPbo/TwieqXFwAiPFWKl0FJxmRq9uVe vMqcay6jR46x1pujLPaBjiNyx3/+lTOq7+RFfju2fDbx748+MUYha6QjQSH3dAmD ABGqeIWtj3VNjXf0nmKU9uFhwrB3nEPhVcZJp7oDIXtFSSNku+56eXM/RZCCpLU5 1m2FVxP8/VVkw5gn9H16n3qyB0Eqvpn2cO8LwUZ9S93Wi5Mt0dwyiLLSKSLjsKKM XJKYKZM3AiNHKS9kb4btSYX+gDAZ9+M= -----END CERTIFICATE-----Generated at Thu Jul 10 06:23:47 2025 by rpki-client