$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa File: b2be8a68-693b-3abf-82e3-e543875ef412.roa (raw, json) Hash identifier: mSiy9qmRNJN3QWK9/JQFVsgND32QwcGqZFGnWlr4FfI= Subject key identifier: 94:AC:3F:D8:E1:B5:59:4E:53:DA:91:4E:3E:18:C9:00:6E:CD:BE:90 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584A41104BA2ABFA171A7705C080 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa Signing time: Fri 20 Jun 2025 13:01:05 +0000 ROA not before: Fri 20 Jun 2025 13:01:05 +0000 ROA not after: Thu 18 Sep 2025 13:01:05 +0000 asID: 53813 IP address blocks: 136.226.240.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:41:10:4b:a2:ab:fa:17:1a:77:05:c0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jun 20 13:01:05 2025 GMT Not After : Sep 18 13:01:05 2025 GMT Subject: CN=5ee47128-84bd-4e53-bfbc-da9f3058ab07 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:74:02:d6:b7:f1:35:dc:e4:69:8e:35:6e:bf: 43:04:63:ad:fe:75:38:6c:8f:ae:c7:10:70:45:ac: 73:59:4e:7d:35:bf:8b:54:3b:34:82:51:20:3c:b9: d4:3d:be:2b:de:bf:cf:49:71:be:3e:88:61:af:03: b2:28:33:d2:74:41:18:fb:6a:6b:fc:c0:3b:ef:97: 53:bc:7d:6e:8e:36:01:94:64:c7:48:8e:56:0c:06: 2f:54:de:c6:0d:d5:f9:bc:ca:72:21:47:81:4d:7e: 7f:81:47:1c:de:06:fa:00:c8:bf:49:e0:2b:74:71: 47:13:a8:54:3c:fb:d9:33:ea:d1:2d:8d:e2:1d:ad: 65:48:15:d0:a0:0f:19:d1:7d:a0:4f:67:bd:ae:f8: 6e:28:ff:6b:ab:83:8e:07:2e:24:47:e9:d0:9b:d2: 65:47:50:50:bc:90:9a:b2:7f:d9:aa:d3:5a:2e:c7: 9a:77:25:bb:20:6c:81:11:1f:7d:24:e3:1c:09:6e: af:f5:71:9e:a6:18:ad:1c:16:57:95:fc:16:d5:aa: 5f:84:45:21:5a:d4:68:34:63:dd:bf:dd:3d:46:a6: c0:1e:a7:cd:40:82:11:4c:18:a4:c3:88:01:01:52: ba:19:ee:4e:04:cd:d4:ba:5c:db:be:93:2a:d8:92: a1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:AC:3F:D8:E1:B5:59:4E:53:DA:91:4E:3E:18:C9:00:6E:CD:BE:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b2be8a68-693b-3abf-82e3-e543875ef412.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.240.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3d:d7:7e:06:c3:68:cb:ec:63:17:14:1b:e4:e7:8f:5c:72:9c: dd:b8:ee:7f:1e:bf:9e:d2:65:4d:55:44:d4:c9:ca:20:b2:c0: bc:83:c4:86:a5:3a:e9:6f:41:90:8d:d0:4b:72:1d:c0:a3:41: 15:ae:2a:c1:e5:cb:8e:65:ad:72:68:76:fc:08:5e:16:4b:62: 25:69:e1:d9:aa:7d:fa:43:36:14:a8:71:4a:05:c4:d7:96:a5: 7c:84:97:ff:b4:2d:86:a9:8d:69:52:03:50:55:47:67:a6:b1: c8:41:12:44:80:a5:9c:04:09:fc:95:e6:81:88:25:38:44:3c: fc:0b:41:dc:c7:62:75:45:dd:8c:7f:76:d8:e8:6d:c3:e1:fc: 6e:4a:e5:29:94:ef:99:50:e0:6e:4d:10:bd:b7:a3:5e:42:50: 39:18:d8:1d:98:93:a9:17:53:61:c5:26:84:e2:eb:49:59:ad: 52:80:6a:c5:a4:22:75:7b:ef:72:19:8a:18:3d:e6:e4:01:ce: 1d:72:b3:96:91:06:09:ee:dd:24:0c:d8:b1:23:96:35:4a:71: df:80:48:04:4a:20:76:9d:e4:24:04:40:38:5e:25:a8:0c:ab: a3:72:64:45:f8:59:7d:de:d6:8b:7b:e8:00:ed:8f:45:77:ec: 61:5c:37:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEEuiq/oXGncFwIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk NWVlNDcxMjgtODRiZC00ZTUzLWJmYmMtZGE5ZjMwNThhYjA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7nQC1rfxNdzkaY41br9DBGOt/nU4bI+uxxBw RaxzWU59Nb+LVDs0glEgPLnUPb4r3r/PSXG+PohhrwOyKDPSdEEY+2pr/MA775dT vH1ujjYBlGTHSI5WDAYvVN7GDdX5vMpyIUeBTX5/gUcc3gb6AMi/SeArdHFHE6hU PPvZM+rRLY3iHa1lSBXQoA8Z0X2gT2e9rvhuKP9rq4OOBy4kR+nQm9JlR1BQvJCa sn/ZqtNaLseadyW7IGyBER99JOMcCW6v9XGephitHBZXlfwW1apfhEUhWtRoNGPd v909RqbAHqfNQIIRTBikw4gBAVK6Ge5OBM3UulzbvpMq2JKhdwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJSsP9jhtVlOU9qRTj4YyQBuzb6QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjJiZThhNjgtNjkzYi0z YWJmLTgyZTMtZTU0Mzg3NWVmNDEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD3XfgbDaMvsYxcUG+Tnj1xynN247n8ev57SZU1VRNTJyiCywLyDxIal OulvQZCN0EtyHcCjQRWuKsHly45lrXJodvwIXhZLYiVp4dmqffpDNhSocUoFxNeW pXyEl/+0LYapjWlSA1BVR2emschBEkSApZwECfyV5oGIJThEPPwLQdzHYnVF3Yx/ dtjobcPh/G5K5SmU75lQ4G5NEL23o15CUDkY2B2Yk6kXU2HFJoTi60lZrVKAasWk InV773IZihg95uQBzh1ys5aRBgnu3SQM2LEjljVKcd+ASARKIHad5CQEQDheJagM q6NyZEX4WX3e1ot76ADtj0V37GFcNzk= -----END CERTIFICATE-----Generated at Sun Jun 29 14:27:31 2025 by rpki-client