$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa File: d8195a94-d522-37ad-be84-a7f37ca7a347.roa (raw, json) Hash identifier: NGEKcsynsWLIt2VBdlO3pztrGRTFSbZdQni3YEzJBOQ= Subject key identifier: 44:48:DC:3E:F4:6A:9E:9C:66:4E:D2:CD:0C:A3:44:42:C4:87:F9:39 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290D2823E2019F252385980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.48.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:d2:82:3e:20:19:f2:52:38:59:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=ba2be786-f4b0-4849-986f-122ca8d0ce8a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:cd:6c:28:76:01:ff:3a:7e:df:eb:b5:58:1c: 5b:11:11:ad:26:f6:3b:18:15:1a:34:96:f1:bb:dd: d9:bc:87:7f:a8:1a:17:0f:7f:a2:52:f4:33:48:aa: 04:be:62:d9:2c:7f:e1:68:ed:16:eb:7e:32:a7:9a: 97:d0:47:aa:75:17:e8:80:ce:01:32:62:25:34:f4: 4a:8d:09:ee:19:f5:45:5a:a9:bb:42:ec:75:44:06: 7b:3e:d8:a5:1d:61:f1:18:0d:df:8f:08:46:14:b1: 0e:ac:c2:91:ec:8f:77:38:ee:dd:ca:7c:fb:ee:2e: 76:2a:fa:b8:0f:7f:76:b2:f0:8d:d9:ad:4d:f4:17: 62:50:6d:70:57:5f:07:84:ef:25:fb:d0:42:b1:35: 2b:5d:55:e2:c0:5f:5e:aa:ad:44:ce:c4:25:61:f4: c7:45:98:41:ae:9c:a3:d1:a8:34:ae:ec:6a:da:f1: 14:26:df:23:d7:7b:e8:23:71:50:2b:5a:7e:ee:47: 31:f5:a7:c0:ad:d4:37:c9:6a:1d:04:7d:0d:68:eb: f1:4d:81:47:11:6d:e0:87:0f:e5:4a:8f:29:99:d4: 33:f4:d8:cc:4c:84:9a:ed:52:9c:9d:52:9b:d8:fa: 04:37:2f:a2:b8:f0:2a:d1:51:3b:ca:f7:cf:e0:04: c8:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:48:DC:3E:F4:6A:9E:9C:66:4E:D2:CD:0C:A3:44:42:C4:87:F9:39 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d8195a94-d522-37ad-be84-a7f37ca7a347.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.48.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:e0:7e:b1:13:d6:6e:da:2e:0e:13:2c:db:81:06:b9:99:46: 50:e0:0f:df:ec:da:b4:c0:03:13:52:42:08:d0:16:f9:a9:5e: 9b:e8:3e:b1:5e:c7:00:11:9f:ce:cd:7b:b6:f8:c0:03:c8:d1: 7b:06:a8:af:f3:f4:e2:02:77:c9:08:98:32:b2:9d:71:5d:22: 5e:3f:95:9a:09:6c:2b:a1:fe:d4:8f:8c:46:2a:72:f3:d4:16: 2e:9e:d6:93:65:84:11:47:36:34:86:55:61:a5:c0:6c:4f:d8: c8:0f:14:8c:db:bc:d3:c2:14:b1:5d:75:3b:ee:86:c5:40:73: 30:38:2e:78:14:9b:54:42:c7:e9:d2:e2:97:31:1f:56:12:06: ef:42:a0:fc:08:a7:48:94:76:5d:3a:6b:ad:5d:08:76:39:09: b5:2f:75:71:08:51:67:2a:16:d8:9e:0e:3f:84:05:f6:a4:c4: 30:36:fa:bc:eb:40:55:f4:d2:53:a6:14:80:1f:b9:1f:b6:59: 7e:1b:7b:ad:d0:56:91:f8:d6:bc:10:20:c3:97:27:29:e5:9d: 05:c9:4f:53:66:92:23:30:32:fe:a7:64:c4:2d:6f:f7:69:d6: 79:f7:53:1e:e9:fc:d5:38:12:0e:25:1d:2d:25:d1:66:67:be: d2:bc:5d:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikNKCPiAZ8lI4WYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk YmEyYmU3ODYtZjRiMC00ODQ5LTk4NmYtMTIyY2E4ZDBjZThhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs1sKHYB/zp+3+u1WBxbERGtJvY7GBUaNJbx u93ZvId/qBoXD3+iUvQzSKoEvmLZLH/haO0W634yp5qX0EeqdRfogM4BMmIlNPRK jQnuGfVFWqm7Qux1RAZ7PtilHWHxGA3fjwhGFLEOrMKR7I93OO7dynz77i52Kvq4 D392svCN2a1N9BdiUG1wV18HhO8l+9BCsTUrXVXiwF9eqq1EzsQlYfTHRZhBrpyj 0ag0ruxq2vEUJt8j13voI3FQK1p+7kcx9afArdQ3yWodBH0NaOvxTYFHEW3ghw/l So8pmdQz9NjMTISa7VKcnVKb2PoENy+iuPAq0VE7yvfP4ATI6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERI3D70ap6cZk7SzQyjRELEh/k5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDgxOTVhOTQtZDUyMi0z N2FkLWJlODQtYTdmMzdjYTdhMzQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJLgfrET1m7aLg4TLNuBBrmZRlDgD9/s2rTAAxNSQgjQFvmpXpvoPrFe xwARn87Ne7b4wAPI0XsGqK/z9OICd8kImDKynXFdIl4/lZoJbCuh/tSPjEYqcvPU Fi6e1pNlhBFHNjSGVWGlwGxP2MgPFIzbvNPCFLFddTvuhsVAczA4LngUm1RCx+nS 4pcxH1YSBu9CoPwIp0iUdl06a61dCHY5CbUvdXEIUWcqFtieDj+EBfakxDA2+rzr QFX00lOmFIAfuR+2WX4be63QVpH41rwQIMOXJynlnQXJT1NmkiMwMv6nZMQtb/dp 1nn3Ux7p/NU4Eg4lHS0l0WZnvtK8XRk= -----END CERTIFICATE-----Generated at Thu Jul 10 02:43:59 2025 by rpki-client