$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa File: f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa (raw, json) Hash identifier: XQ+9R3HJP8YArhxMNQT1MUXBYdb42L3fX8tk9WDsdGQ= Subject key identifier: 55:9F:C0:7D:45:F0:D7:AF:2D:00:9F:74:AE:D5:97:BF:04:B3:2D:85 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584A6290CD2740E95BA9A1514400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa Signing time: Wed 02 Jul 2025 13:01:04 +0000 ROA not before: Wed 02 Jul 2025 13:01:04 +0000 ROA not after: Tue 30 Sep 2025 13:01:04 +0000 asID: 16591 IP address blocks: 136.52.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 11 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:62:90:cd:27:40:e9:5b:a9:a1:51:44:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 2 13:01:04 2025 GMT Not After : Sep 30 13:01:04 2025 GMT Subject: CN=cfff5f25-ad78-40b7-858f-5aca03024a4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:03:fd:47:9f:ac:ed:68:7f:d5:dc:bb:2b:0e: c9:9e:5b:a6:25:f1:4a:d8:94:d8:fa:3a:d9:ce:ea: 76:32:2c:b2:92:2e:59:89:e6:37:e5:4a:2c:c9:80: dc:c0:bc:0b:cf:21:4a:cb:2d:82:93:01:83:9d:37: 39:4a:21:63:40:e0:cf:f3:15:44:4b:69:23:7c:f2: 84:b1:bf:3d:db:bf:d3:6e:d0:66:cf:a6:64:40:4c: e1:bb:f7:6a:de:d7:1b:b2:13:32:fb:1b:2c:72:e1: ca:cd:4e:d7:35:7e:4f:29:b4:22:5c:48:e0:d6:ae: e6:1c:89:c6:ef:57:e3:f1:82:1e:46:5f:d6:56:73: 4e:1a:2e:d2:0d:14:a0:d0:47:0c:74:63:49:33:7c: f4:c5:32:5e:61:2f:59:24:39:6c:64:2a:ec:53:20: a9:cd:61:be:cb:22:49:27:97:db:c1:3a:3b:cb:06: 10:06:b8:9c:7f:12:7c:53:0c:a7:01:3e:5f:41:f5: db:f1:24:d3:b4:39:bc:13:9b:ee:00:1c:b2:60:e6: 3e:d3:cf:41:4b:e4:36:7a:4f:f8:7d:fb:2b:81:7f: 11:b4:d9:57:30:6a:73:a3:4f:4b:00:15:b8:6e:44: a4:56:cc:a6:4d:aa:ed:76:2e:eb:51:c5:1a:40:2d: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:9F:C0:7D:45:F0:D7:AF:2D:00:9F:74:AE:D5:97:BF:04:B3:2D:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f394d8bf-c6c7-3e6d-a234-5a1b0a258ee7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:19:7c:41:1f:2d:7e:fd:89:9c:54:68:94:e9:cf:b1:a1:df: 37:7f:68:72:7f:58:08:c4:26:07:8a:18:39:6a:2b:9c:49:3a: 5c:7c:69:c3:8a:6e:e0:94:da:f6:4f:32:f3:20:66:05:d6:cc: 14:66:b8:91:17:ef:d7:9c:70:40:6a:46:1a:4f:7c:de:54:b4: 0f:9d:10:b4:8e:97:1d:74:78:31:8e:c4:7b:be:01:5e:a1:bc: 50:c6:5d:09:44:39:04:4e:31:b3:3a:ac:a2:72:af:f9:f0:28: 8b:21:cd:22:ef:1e:71:29:62:60:14:cc:b7:88:f9:ef:e3:38: c5:0f:8f:00:f3:3a:b6:5b:e2:7a:f8:40:2b:87:4b:8c:c1:0d: 83:c7:d0:2d:d6:44:40:aa:b7:06:ad:f6:8e:a1:32:df:3f:10: b9:93:c0:51:b4:57:66:ce:f9:ce:2a:39:35:f3:10:08:66:73: fe:4e:57:fc:38:64:7b:dc:d8:7e:8c:66:3b:35:da:88:92:8b: fc:c6:09:2e:b8:95:81:f5:7b:28:3b:2f:50:6d:cd:80:a4:a9: c9:5c:dd:fe:b1:b5:12:c6:1f:54:09:9e:5d:08:8a:f7:dc:22: 87:4c:14:d2:2e:ef:ab:98:14:0c:49:0e:54:59:cc:02:86:be: a1:ec:f5:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpikM0nQOlbqaFRRAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcwMjEzMDEwNFoXDTI1MDkzMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2ZmZjVmMjUtYWQ3OC00MGI3LTg1OGYtNWFjYTAzMDI0YTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQP9R5+s7Wh/1dy7Kw7JnlumJfFK2JTY+jrZ zup2Miyyki5ZieY35UosyYDcwLwLzyFKyy2CkwGDnTc5SiFjQODP8xVES2kjfPKE sb8927/TbtBmz6ZkQEzhu/dq3tcbshMy+xsscuHKzU7XNX5PKbQiXEjg1q7mHInG 71fj8YIeRl/WVnNOGi7SDRSg0EcMdGNJM3z0xTJeYS9ZJDlsZCrsUyCpzWG+yyJJ J5fbwTo7ywYQBricfxJ8UwynAT5fQfXb8STTtDm8E5vuAByyYOY+089BS+Q2ek/4 ffsrgX8RtNlXMGpzo09LABW4bkSkVsymTartdi7rUcUaQC0q0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFWfwH1F8NevLQCfdK7Vl78Esy2FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjM5NGQ4YmYtYzZjNy0z ZTZkLWEyMzQtNWExYjBhMjU4ZWU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoZfEEfLX79iZxUaJTpz7Gh3zd/aHJ/WAjEJgeKGDlqK5xJOlx8acOK buCU2vZPMvMgZgXWzBRmuJEX79eccEBqRhpPfN5UtA+dELSOlx10eDGOxHu+AV6h vFDGXQlEOQROMbM6rKJyr/nwKIshzSLvHnEpYmAUzLeI+e/jOMUPjwDzOrZb4nr4 QCuHS4zBDYPH0C3WRECqtwat9o6hMt8/ELmTwFG0V2bO+c4qOTXzEAhmc/5OV/w4 ZHvc2H6MZjs12oiSi/zGCS64lYH1eyg7L1BtzYCkqclc3f6xtRLGH1QJnl0Iivfc IodMFNIu76uYFAxJDlRZzAKGvqHs9ZI= -----END CERTIFICATE-----Generated at Thu Jul 10 06:27:35 2025 by rpki-client