$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa File: a38a1364-8201-35d7-b3cf-83ad2b23224a.roa (raw, json) Hash identifier: lXa+Em9SCSgkEtRZ39ntvk2dds0myd0kE6zKEjD3hnY= Subject key identifier: 08:0A:62:DC:83:6F:45:CD:99:37:A6:47:49:28:17:A9:C8:19:49:F2 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A5335A1BE8AB3DF7860497900 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa Signing time: Fri 27 Jun 2025 01:00:50 +0000 ROA not before: Fri 27 Jun 2025 01:00:50 +0000 ROA not after: Thu 25 Sep 2025 01:00:50 +0000 asID: 53813 IP address blocks: 136.226.232.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:53:35:a1:be:8a:b3:df:78:60:49:79:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 27 01:00:50 2025 GMT Not After : Sep 25 01:00:50 2025 GMT Subject: CN=d5d01860-515f-4083-8a74-0569b250c167 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:53:53:36:bb:69:2d:7b:d3:d5:83:03:ad: 43:dc:92:45:3a:c0:a6:1d:c2:5d:81:22:4f:18:3c: cf:97:ab:38:52:c5:f0:b6:38:c6:2d:33:4c:9c:c1: df:93:b3:5c:c2:0a:1d:a0:3f:1d:7e:fc:dd:2d:11: 3a:9d:15:2e:97:5d:b3:78:ef:a4:d4:0b:bd:83:24: 19:93:bb:25:d8:d6:2a:b6:e7:de:50:15:2b:67:83: d5:48:d3:19:46:b2:07:3b:cc:bc:f2:54:76:95:c5: 92:84:59:e4:58:94:fa:df:65:75:41:2f:6a:74:d1: 2a:50:9d:12:ab:b2:dc:91:34:04:70:18:05:4b:47: 74:00:1e:9b:de:32:0b:db:3e:a8:0c:c2:92:3f:04: 9f:e5:86:7c:7a:c8:da:80:f0:cf:bb:64:9b:44:fc: fb:03:a7:8d:bd:0f:ad:dd:b4:0d:b1:1d:4b:84:c0: 82:85:f1:27:74:23:47:81:d0:f3:1a:b7:4d:85:d3: 3f:9f:bf:e0:43:59:39:a1:d6:33:94:04:b3:39:1a: f6:09:0c:34:5d:c6:02:75:9b:8e:fd:e7:40:07:fe: e0:c9:55:5b:a0:d0:29:a2:db:a8:8b:e7:3c:c5:2f: d8:be:63:36:3a:5e:0a:33:de:a6:5f:64:75:fd:e0: f3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:0A:62:DC:83:6F:45:CD:99:37:A6:47:49:28:17:A9:C8:19:49:F2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/a38a1364-8201-35d7-b3cf-83ad2b23224a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.232.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 97:ea:ec:19:5a:94:d9:f7:4b:f8:5b:f0:44:73:8a:65:0f:4f: 84:a5:6d:4a:9a:40:38:bb:f4:24:bb:a1:c6:99:a8:9f:75:b1: 06:6a:43:4c:64:d2:47:f9:23:79:2e:4a:72:fa:76:6b:79:fe: e2:a4:fe:b0:b1:8a:b3:40:56:cf:05:cc:56:a2:38:ea:65:87: b4:85:91:78:ec:05:e1:68:0c:26:5b:4f:ed:0b:45:6f:af:84: ab:0e:23:be:7f:e5:90:5f:1d:e4:83:9a:64:a3:42:f5:9a:64: 29:3d:ae:78:f5:6c:ae:bf:f2:67:be:71:45:35:80:fb:75:ae: 7f:c8:63:42:5a:ed:a4:cb:e1:32:5d:10:56:e8:0d:f2:21:f0: af:31:cf:25:c6:e1:a7:c9:b4:0e:1b:d9:cf:31:25:2e:7e:86: 68:f3:ce:18:a8:12:17:28:07:38:6e:bc:1f:a9:20:ce:20:a1: 1b:76:1f:f1:46:4b:61:44:2b:88:e9:5a:4b:b8:b7:5c:a2:35: 13:8d:08:db:36:37:09:86:e2:f9:7e:f4:c3:3e:a2:bd:9e:c1: c7:9f:21:7e:90:cf:1d:d2:27:51:9f:25:33:e3:80:ee:94:b2: 19:40:b3:16:37:81:2b:be:c2:d4:7d:ff:ed:c2:c4:1c:7c:17: d3:3d:8b:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaG+irPfeGBJeQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk ZDVkMDE4NjAtNTE1Zi00MDgzLThhNzQtMDU2OWIyNTBjMTY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAdTUza7aS1709WDA61D3JJFOsCmHcJdgSJP GDzPl6s4UsXwtjjGLTNMnMHfk7NcwgodoD8dfvzdLRE6nRUul12zeO+k1Au9gyQZ k7sl2NYqtufeUBUrZ4PVSNMZRrIHO8y88lR2lcWShFnkWJT632V1QS9qdNEqUJ0S q7LckTQEcBgFS0d0AB6b3jIL2z6oDMKSPwSf5YZ8esjagPDPu2SbRPz7A6eNvQ+t 3bQNsR1LhMCChfEndCNHgdDzGrdNhdM/n7/gQ1k5odYzlASzORr2CQw0XcYCdZuO /edAB/7gyVVboNApotuoi+c8xS/YvmM2Ol4KM96mX2R1/eDz2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAgKYtyDb0XNmTemR0koF6nIGUnyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYTM4YTEzNjQtODIwMS0z NWQ3LWIzY2YtODNhZDJiMjMyMjRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJfq7BlalNn3S/hb8ERzimUPT4SlbUqaQDi79CS7ocaZqJ91sQZqQ0xk 0kf5I3kuSnL6dmt5/uKk/rCxirNAVs8FzFaiOOplh7SFkXjsBeFoDCZbT+0LRW+v hKsOI75/5ZBfHeSDmmSjQvWaZCk9rnj1bK6/8me+cUU1gPt1rn/IY0Ja7aTL4TJd EFboDfIh8K8xzyXG4afJtA4b2c8xJS5+hmjzzhioEhcoBzhuvB+pIM4goRt2H/FG S2FEK4jpWku4t1yiNRONCNs2NwmG4vl+9MM+or2ewcefIX6Qzx3SJ1GfJTPjgO6U shlAsxY3gSu+wtR9/+3CxBx8F9M9i0A= -----END CERTIFICATE-----Generated at Sun Jun 29 14:35:08 2025 by rpki-client