$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa File: dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa (raw, json) Hash identifier: sZgiB5ndZe51+w8IZO5NDKmxbkefVhVVgZrN7FSVo90= Subject key identifier: ED:21:E8:BC:A7:E9:DF:1C:DA:7F:D8:14:8C:B8:31:56:F9:36:23:22 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A62909B9AA30241E804D5F180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.34.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:9b:9a:a3:02:41:e8:04:d5:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=fc0a637d-1400-482b-b5fa-fc959fbf3a19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:05:40:2c:18:0e:03:8e:c5:b8:8e:74:51:d8: 9b:cd:e2:25:20:1b:2c:3f:e9:83:48:32:bf:78:7a: 7d:ff:1b:02:c8:76:11:1f:07:25:c7:fc:eb:89:1b: 6c:46:32:f0:12:bc:bb:f2:0c:f6:24:b8:26:37:66: c3:22:37:cc:1d:92:f2:f7:db:c6:3a:d1:4f:6f:59: 6c:27:f8:36:c3:1b:bf:f6:4e:cb:b0:98:d2:0d:f1: 97:26:ea:fe:d8:bc:e6:df:4a:16:85:c0:af:8e:dd: d0:d6:86:91:99:36:73:f6:40:5e:f0:96:32:96:59: 41:99:32:ed:70:0d:96:1b:42:5f:93:d1:28:da:79: f3:fd:28:99:27:06:74:fa:72:34:b8:c0:bc:20:e4: f9:a3:94:d5:ee:32:c9:e7:34:6a:ed:9d:a2:25:05: 96:88:bc:3a:db:4e:1b:ea:b0:a4:14:08:b3:c2:9b: 02:bc:3c:3e:17:ce:e5:15:ec:5a:91:c0:8e:f9:7b: 10:26:20:a2:62:2f:2e:99:77:a8:7c:87:20:fd:a4: bf:70:92:84:04:11:a0:50:dd:70:84:85:f2:a6:4c: 76:af:6c:26:d1:c4:17:69:cf:71:78:2c:3b:31:dc: 44:da:48:c6:95:88:ac:d9:8f:02:40:5f:5a:b7:2e: 4b:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:21:E8:BC:A7:E9:DF:1C:DA:7F:D8:14:8C:B8:31:56:F9:36:23:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:a6:60:d3:28:e9:4d:23:d4:9e:bd:a7:29:cf:80:30:8b:9b: 48:0d:85:d3:01:fa:65:09:a5:7c:1f:66:96:10:e0:30:cf:ff: 84:55:56:15:ee:16:f7:13:79:9e:53:cb:33:fa:97:75:b7:41: c5:8e:19:93:28:18:05:ca:76:1b:6a:84:e6:2e:4b:08:6e:7a: 81:11:c6:32:fd:2c:d9:0d:a0:db:13:17:7b:55:ca:de:61:a5: 36:39:4c:d8:03:00:ee:e1:1c:cf:cc:50:f8:39:70:62:49:98: 4e:f8:a3:09:8f:59:71:2b:d1:e1:fe:75:d6:12:46:d2:81:5d: ea:24:9f:c5:1c:15:e2:a0:a8:bc:3c:6a:8f:12:c1:d7:b0:95: 42:cf:1e:aa:9c:8c:8c:82:c4:c5:8f:2b:0d:11:b7:be:9f:b1: 67:9d:cb:10:fc:ce:fd:35:cb:a2:61:27:42:01:03:79:6a:6f: 24:f7:7b:4a:05:7e:5d:53:a4:da:22:7e:b9:e7:67:1b:e4:60: c0:7b:42:b3:31:e8:37:e7:79:d4:43:ba:66:18:62:94:20:02: 9c:d6:97:41:27:0f:2b:77:c3:96:05:63:5e:8a:4b:fa:18:d4: b7:aa:01:9e:1a:92:a3:a0:b0:24:0f:c6:bc:d5:8e:54:0a:ce: 90:8c:cf:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikJuaowJB6ATV8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ZmMwYTYzN2QtMTQwMC00ODJiLWI1ZmEtZmM5NTlmYmYzYTE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQVALBgOA47FuI50UdibzeIlIBssP+mDSDK/ eHp9/xsCyHYRHwclx/zriRtsRjLwEry78gz2JLgmN2bDIjfMHZLy99vGOtFPb1ls J/g2wxu/9k7LsJjSDfGXJur+2Lzm30oWhcCvjt3Q1oaRmTZz9kBe8JYylllBmTLt cA2WG0Jfk9Eo2nnz/SiZJwZ0+nI0uMC8IOT5o5TV7jLJ5zRq7Z2iJQWWiLw6204b 6rCkFAizwpsCvDw+F87lFexakcCO+XsQJiCiYi8umXeofIcg/aS/cJKEBBGgUN1w hIXypkx2r2wm0cQXac9xeCw7MdxE2kjGlYis2Y8CQF9aty5LbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO0h6Lyn6d8c2n/YFIy4MVb5NiMiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGNhZTMzZmQtZTExYy0z ZjIwLWIwZmItODcxMjkyYjk3YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADKmYNMo6U0j1J69pynPgDCLm0gNhdMB+mUJpXwfZpYQ4DDP/4RVVhXu FvcTeZ5TyzP6l3W3QcWOGZMoGAXKdhtqhOYuSwhueoERxjL9LNkNoNsTF3tVyt5h pTY5TNgDAO7hHM/MUPg5cGJJmE74owmPWXEr0eH+ddYSRtKBXeokn8UcFeKgqLw8 ao8SwdewlULPHqqcjIyCxMWPKw0Rt76fsWedyxD8zv01y6JhJ0IBA3lqbyT3e0oF fl1TpNoifrnnZxvkYMB7QrMx6DfnedRDumYYYpQgApzWl0EnDyt3w5YFY16KS/oY 1LeqAZ4akqOgsCQPxrzVjlQKzpCMz0I= -----END CERTIFICATE-----Generated at Thu Jul 10 06:11:55 2025 by rpki-client