$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa File: 24d72aa4-d799-3e57-a378-ee35680b2c9c.roa (raw, json) Hash identifier: IaJiNjUs8TdndXUHW/igsM3A5M6SohcGVLBtC2eHT6Y= Subject key identifier: 36:CB:EA:16:5E:29:04:A8:04:FD:EA:CC:0F:20:BA:99:7A:78:CA:9F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A3E45A09FEBCD5379FBF04CE0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa Signing time: Thu 19 Jun 2025 13:01:02 +0000 ROA not before: Thu 19 Jun 2025 13:01:02 +0000 ROA not after: Wed 17 Sep 2025 13:01:02 +0000 asID: 53813 IP address blocks: 136.226.230.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:3e:45:a0:9f:eb:cd:53:79:fb:f0:4c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 19 13:01:02 2025 GMT Not After : Sep 17 13:01:02 2025 GMT Subject: CN=8a428c20-0f59-47b5-bfad-7a08c0c7ff2b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:ba:a1:50:b7:e5:e5:d2:4a:04:4f:14:57:bf: fb:9f:5a:ab:aa:d3:45:fb:b7:9a:9c:6c:f2:b6:6f: 5a:4f:45:c9:b8:5f:82:50:41:03:ed:a7:27:7c:2d: cd:9b:e0:d4:9d:2c:cf:51:95:21:ce:a4:b7:11:ad: 22:95:de:bf:79:50:35:78:20:48:99:64:99:6f:83: 71:5c:92:a1:f9:06:c2:97:70:41:8e:66:9a:5a:9a: 3a:5a:df:8b:fc:8e:80:48:5b:1e:f1:93:35:41:8e: 16:b0:28:76:5f:57:c6:af:ec:66:06:d1:e4:07:7d: bb:eb:e8:e5:36:f8:86:5c:54:e7:42:65:a5:8e:d1: bf:5d:71:a4:c3:49:12:e3:7b:9a:26:5c:1c:d8:a1: ca:f1:f4:94:35:10:4a:97:9a:69:41:ff:7e:9b:ab: 92:f1:a5:8d:a9:1e:85:0f:6e:bd:b1:a5:f2:d7:bf: 8d:8e:7d:4f:a1:77:f4:d3:8a:48:81:8e:9b:8b:7e: b7:b2:77:7c:d6:72:eb:e0:e5:6c:b3:44:3c:49:04: 48:9e:5b:d8:ac:44:24:00:08:26:af:2b:56:ea:7b: f3:f0:8b:66:a9:0d:76:a9:2c:9c:cb:d6:85:23:d3: 97:fa:34:dc:41:77:49:2f:64:ae:d3:d2:96:b3:24: d7:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:CB:EA:16:5E:29:04:A8:04:FD:EA:CC:0F:20:BA:99:7A:78:CA:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/24d72aa4-d799-3e57-a378-ee35680b2c9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.230.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:3a:6e:7f:d6:82:74:05:e9:a1:9c:d1:10:b8:57:91:35:03: 2b:e4:a0:2a:4a:8e:1d:37:f8:a1:11:e0:be:3f:f7:3d:4f:a6: d2:6c:be:01:98:5b:be:05:80:e7:91:76:c0:67:b9:de:10:51: ce:40:7a:26:3f:83:08:da:bc:1b:05:85:52:d5:da:6b:3d:ca: 2e:28:1a:89:6b:68:ed:5e:44:39:16:e5:2b:63:0a:f6:1c:09: 9f:e1:ad:bc:fd:70:a8:91:83:7a:94:5f:fe:91:49:9b:59:3d: 69:cd:cd:dd:a7:f4:ce:2d:ea:45:ea:db:34:56:a3:66:63:32: 49:bb:08:16:1e:ef:d2:c9:98:17:31:63:d6:a6:14:f2:e5:4b: 18:01:a3:e2:fa:45:db:d4:c8:66:19:b5:11:fb:bc:b0:68:c7: b6:7b:1f:55:9c:91:c7:c5:17:c4:e9:bc:80:02:3f:90:c6:02: 42:82:43:ab:0a:e9:7f:f3:a2:c2:9f:f6:9b:1d:2f:3a:c5:ad: e8:ec:ac:ab:3e:80:f1:cc:a0:cf:c1:28:ca:b4:72:aa:07:cf: 5e:d9:53:aa:00:fe:21:90:87:a0:b7:01:d8:b8:06:55:23:27: a2:5f:c2:d6:aa:c3:08:38:dd:17:94:d7:0a:64:c9:90:f2:85: 9c:41:f3:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaCf681TefvwTOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk OGE0MjhjMjAtMGY1OS00N2I1LWJmYWQtN2EwOGMwYzdmZjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLqhULfl5dJKBE8UV7/7n1qrqtNF+7eanGzy tm9aT0XJuF+CUEED7acnfC3Nm+DUnSzPUZUhzqS3Ea0ild6/eVA1eCBImWSZb4Nx XJKh+QbCl3BBjmaaWpo6Wt+L/I6ASFse8ZM1QY4WsCh2X1fGr+xmBtHkB3276+jl NviGXFTnQmWljtG/XXGkw0kS43uaJlwc2KHK8fSUNRBKl5ppQf9+m6uS8aWNqR6F D269saXy17+Njn1PoXf004pIgY6bi363snd81nLr4OVss0Q8SQRInlvYrEQkAAgm rytW6nvz8ItmqQ12qSycy9aFI9OX+jTcQXdJL2Su09KWsyTXkwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDbL6hZeKQSoBP3qzA8gupl6eMqfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjRkNzJhYTQtZDc5OS0z ZTU3LWEzNzgtZWUzNTY4MGIyYzljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAg6bn/WgnQF6aGc0RC4V5E1AyvkoCpKjh03+KER4L4/9z1PptJsvgGY W74FgOeRdsBnud4QUc5AeiY/gwjavBsFhVLV2ms9yi4oGolraO1eRDkW5StjCvYc CZ/hrbz9cKiRg3qUX/6RSZtZPWnNzd2n9M4t6kXq2zRWo2ZjMkm7CBYe79LJmBcx Y9amFPLlSxgBo+L6RdvUyGYZtRH7vLBox7Z7H1WckcfFF8TpvIACP5DGAkKCQ6sK 6X/zosKf9psdLzrFrejsrKs+gPHMoM/BKMq0cqoHz17ZU6oA/iGQh6C3Adi4BlUj J6Jfwtaqwwg43ReU1wpkyZDyhZxB82k= -----END CERTIFICATE-----Generated at Sun Jun 29 13:54:54 2025 by rpki-client