$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa File: e154c747-9125-3a61-99c4-3be4782201e7.roa (raw, json) Hash identifier: zKD+nAbZoGHWW8Vv65+OluxP80vJTNeUG+7Y/f+SgmM= Subject key identifier: A0:32:9B:35:A8:A4:5A:C3:D7:1D:26:B8:AB:42:70:5F:CF:92:88:6F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290816CA47A4377FD597180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.51.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:81:6c:a4:7a:43:77:fd:59:71:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=889a670f-f25e-4fb3-9ecf-ac1678f1128c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:6e:60:bd:79:87:62:a8:15:13:26:a8:6e:10: cd:b8:24:00:71:e2:c8:88:3c:4e:45:19:af:75:84: b4:62:56:49:52:89:f9:5e:16:86:5d:f0:0a:57:34: 93:19:c5:97:49:0a:53:cb:8e:e4:b0:f6:2c:17:e1: 08:fb:fa:5b:26:95:86:bd:c1:07:22:1f:c0:75:f6: 61:71:35:89:92:9a:fe:61:17:0e:2d:66:c5:02:35: 24:a7:23:47:a8:46:9e:be:38:fd:6e:9a:b1:22:c1: 9a:da:f9:95:ea:09:e5:50:ae:42:ae:7e:f6:ba:ab: 54:b3:78:cd:d5:8f:bc:70:9c:47:f5:74:e1:97:69: be:ff:24:3c:c1:8a:d0:d3:83:7d:c6:68:b4:7e:04: 14:84:8e:74:1d:1b:bf:e6:bf:ab:5a:c1:95:f9:d2: a9:aa:b1:af:99:fb:f7:d8:b1:34:fe:75:25:48:41: 18:a7:ae:64:e1:eb:d7:4b:b0:3a:e9:23:83:c1:1d: 2d:25:a9:87:56:de:e0:1f:62:6e:18:c9:c3:b8:d1: 62:6d:e7:ee:29:4f:c7:2e:65:0f:cc:92:a0:1d:8c: 51:9b:fa:24:f5:c0:e1:d6:5e:2c:bc:00:57:c6:9d: 54:36:ff:97:95:4b:22:a3:25:e4:53:a8:00:94:aa: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:32:9B:35:A8:A4:5A:C3:D7:1D:26:B8:AB:42:70:5F:CF:92:88:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e154c747-9125-3a61-99c4-3be4782201e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.51.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:52:b5:5b:2a:ca:e8:32:50:b1:51:ae:40:31:71:09:3a:93: f1:0e:df:f6:49:d0:21:c5:53:f9:e7:03:d6:b4:23:30:d5:c4: ed:3f:d4:11:7a:c6:79:2f:02:77:3a:43:c9:a1:0d:d9:c1:f7: c8:3d:63:e2:eb:56:65:14:38:fe:0b:08:69:e4:e3:4f:12:10: 04:cd:d0:6e:65:c5:97:0f:90:5c:2e:fc:6c:17:eb:9e:30:ad: 76:8b:45:7c:02:e8:96:49:a6:5d:01:ec:46:d5:30:8b:bc:4f: f9:6c:39:5c:06:ee:56:b3:f8:ef:90:e4:7d:8d:c2:b3:08:b4: cc:18:5b:74:8c:25:1c:29:90:f7:7c:bc:0c:d9:3c:1f:3d:78: f6:a1:82:c3:1c:4e:1b:68:5d:86:66:e5:fb:41:64:c1:b0:ae: 96:2a:08:5b:73:4a:4a:ce:31:9d:87:84:0d:5f:a1:86:ba:52: 96:5f:13:bf:20:e5:50:06:c4:1d:95:f0:91:1b:fb:5f:39:9b: aa:89:26:19:eb:0e:6c:43:e5:a6:52:ab:d5:1b:4c:67:a2:9d: 07:3a:f4:f0:35:72:67:29:5b:32:32:75:6b:1c:2d:d0:68:bc: f1:7f:67:0e:a2:18:d2:de:c6:35:e9:54:e8:f3:f0:d3:04:41: 2e:16:af:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikIFspHpDd/1ZcYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk ODg5YTY3MGYtZjI1ZS00ZmIzLTllY2YtYWMxNjc4ZjExMjhjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxm5gvXmHYqgVEyaobhDNuCQAceLIiDxORRmv dYS0YlZJUon5XhaGXfAKVzSTGcWXSQpTy47ksPYsF+EI+/pbJpWGvcEHIh/AdfZh cTWJkpr+YRcOLWbFAjUkpyNHqEaevjj9bpqxIsGa2vmV6gnlUK5Crn72uqtUs3jN 1Y+8cJxH9XThl2m+/yQ8wYrQ04N9xmi0fgQUhI50HRu/5r+rWsGV+dKpqrGvmfv3 2LE0/nUlSEEYp65k4evXS7A66SODwR0tJamHVt7gH2JuGMnDuNFibefuKU/HLmUP zJKgHYxRm/ok9cDh1l4svABXxp1UNv+XlUsioyXkU6gAlKq1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKAymzWopFrD1x0muKtCcF/PkohvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTE1NGM3NDctOTEyNS0z YTYxLTk5YzQtM2JlNDc4MjIwMWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFStVsqyugyULFRrkAxcQk6k/EO3/ZJ0CHFU/nnA9a0IzDVxO0/1BF6 xnkvAnc6Q8mhDdnB98g9Y+LrVmUUOP4LCGnk408SEATN0G5lxZcPkFwu/GwX654w rXaLRXwC6JZJpl0B7EbVMIu8T/lsOVwG7laz+O+Q5H2NwrMItMwYW3SMJRwpkPd8 vAzZPB89ePahgsMcThtoXYZm5ftBZMGwrpYqCFtzSkrOMZ2HhA1foYa6UpZfE78g 5VAGxB2V8JEb+185m6qJJhnrDmxD5aZSq9UbTGeinQc69PA1cmcpWzIydWscLdBo vPF/Zw6iGNLexjXpVOjz8NMEQS4Wr2k= -----END CERTIFICATE-----Generated at Thu Jul 10 01:45:34 2025 by rpki-client