$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa File: 5ec3dafb-0c5c-33db-868e-2f679742f920.roa (raw, json) Hash identifier: 2eDwSOZvfn97TaP3BvJvXQGtShHjOLAKlOCl82uzpaA= Subject key identifier: 23:D0:1E:3C:B9:EC:A4:BF:98:BC:D0:A3:80:6D:F9:3B:39:9C:20:E3 Certificate issuer: /CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Certificate serial: 010D0C9F4328584AC8763C85B025944D040F0E18 Authority key identifier: AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa Signing time: Fri 08 Aug 2025 01:00:33 +0000 ROA not before: Fri 08 Aug 2025 01:00:33 +0000 ROA not after: Thu 06 Nov 2025 02:00:33 +0000 asID: 14340 IP address blocks: 136.147.164.0/22 maxlen: 24 136.147.174.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:c8:76:3c:85:b0:25:94:4d:04:0f:0e:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bf1c119f-5c08-4663-b550-1d531c2fe54f Validity Not Before: Aug 8 01:00:33 2025 GMT Not After : Nov 6 02:00:33 2025 GMT Subject: CN=262a979d-d0b6-4e6e-b4ff-aa6d3c720d6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:7f:6f:aa:10:c1:82:90:f4:e2:a0:67:85:25: 49:4e:bb:d6:2a:f0:48:30:66:5f:1b:08:21:30:c9: ad:1b:d6:93:ee:0a:52:05:c4:b5:8d:3b:9e:1a:d9: 97:1e:cb:ec:c0:45:b6:e5:a6:4c:eb:20:4e:f2:96: 03:cd:df:e1:b7:8d:bc:8d:94:9d:c5:50:db:cb:50: 6b:68:c2:cb:62:49:89:2e:12:ef:10:8a:74:20:b2: 67:b1:01:9e:67:7f:29:c1:1c:53:7d:e3:2e:7d:5f: 03:21:4e:d4:52:4e:a2:fc:ca:8c:b0:f6:16:db:e5: d5:ac:b8:9c:02:32:43:f8:07:eb:e3:f1:2b:c0:81: ad:02:8f:a5:54:ca:54:71:26:44:52:37:ad:2d:99: 06:d8:fc:5c:06:63:4e:e0:b7:d0:b0:27:b9:f4:00: ec:b2:da:1b:80:7f:4c:91:83:76:38:b6:09:58:86: 0d:7f:59:28:13:dd:54:6b:e3:08:23:8c:70:55:d1: 2d:dc:25:6e:75:ed:2c:8b:cc:a9:b3:dc:67:fb:e8: ce:62:a0:ce:f1:db:70:33:c6:d8:eb:e3:ec:bb:88: d5:8b:c9:c8:77:5d:f7:a2:75:de:8e:70:8d:50:9b: 6c:c5:47:35:21:e0:bf:8e:2e:b8:10:49:c5:4d:74: 57:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D0:1E:3C:B9:EC:A4:BF:98:BC:D0:A3:80:6D:F9:3B:39:9C:20:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/5ec3dafb-0c5c-33db-868e-2f679742f920.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f/bf1c119f-5c08-4663-b550-1d531c2fe54f.crl X509v3 Authority Key Identifier: keyid:AE:82:0B:B2:D4:3A:12:16:AF:C5:62:5C:E8:6A:91:B5:C6:AF:DB:66 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/bf1c119f-5c08-4663-b550-1d531c2fe54f.cer sbgp-ipAddrBlock: critical IPv4: 136.147.164.0/22 136.147.174.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:19:52:3f:2b:6d:f1:8b:c5:e3:a3:cd:7c:d2:4c:d8:c2:58: 65:5b:ef:25:eb:29:13:73:99:cd:f9:8e:79:4d:d9:e5:9b:c5: 57:83:de:86:98:63:2a:db:dc:ff:45:bc:61:d5:80:69:3f:ba: b2:37:4e:f6:cd:6b:7c:dc:19:1b:e8:65:b2:f6:d8:1f:0e:52: 90:b4:cd:ec:75:f4:d7:1c:d1:39:a1:b1:f4:c3:eb:c4:52:4d: bd:77:4a:4e:0b:39:36:6f:68:e8:58:fa:11:cb:f7:df:7f:d7: 21:fb:1a:cf:e9:cf:25:49:83:43:de:15:4d:2d:e9:04:79:5a: ec:32:d5:64:ff:26:57:83:19:dd:8c:2d:c9:af:3b:68:10:45: 99:c7:07:4b:fd:e6:26:14:5b:a5:ad:ad:16:6b:8c:57:a8:de: 3d:c1:ee:a9:16:d0:35:b6:95:00:06:d1:2d:5d:84:68:84:a2: 73:56:1f:e5:fe:c7:12:5c:31:6b:6a:d8:2b:9c:b9:b9:77:88: 5a:1f:8e:33:51:47:41:f8:e3:5f:13:28:45:c8:39:64:ad:eb: 96:7b:a8:e7:75:cd:06:4a:5f:14:bc:b3:78:60:4e:0f:b5:e2: 84:68:07:d5:1f:d1:63:c1:5a:bc:10:b3:2a:7d:8c:3e:0d:02: 6f:44:06:6f -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErIdjyFsCWUTQQPDhgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYmYxYzExOWYtNWMwOC00NjYzLWI1NTAtMWQ1MzFjMmZl NTRmMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk MjYyYTk3OWQtZDBiNi00ZTZlLWI0ZmYtYWE2ZDNjNzIwZDZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs39vqhDBgpD04qBnhSVJTrvWKvBIMGZfGwgh MMmtG9aT7gpSBcS1jTueGtmXHsvswEW25aZM6yBO8pYDzd/ht428jZSdxVDby1Br aMLLYkmJLhLvEIp0ILJnsQGeZ38pwRxTfeMufV8DIU7UUk6i/MqMsPYW2+XVrLic AjJD+Afr4/ErwIGtAo+lVMpUcSZEUjetLZkG2PxcBmNO4LfQsCe59ADsstobgH9M kYN2OLYJWIYNf1koE91Ua+MII4xwVdEt3CVude0si8yps9xn++jOYqDO8dtwM8bY 6+Psu4jVi8nId133onXejnCNUJtsxUc1IeC/ji64EEnFTXRXIQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFCPQHjy57KS/mLzQo4Bt+Ts5nCDjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFj MTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUzMWMyZmU1NGYvNWVjM2RhZmItMGM1Yy0z M2RiLTg2OGUtMmY2Nzk3NDJmOTIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYmYxYzExOWYtNWMwOC00NjYzLWI1 NTAtMWQ1MzFjMmZlNTRmL2JmMWMxMTlmLTVjMDgtNDY2My1iNTUwLTFkNTMxYzJm ZTU0Zi5jcmwwHwYDVR0jBBgwFoAUroILstQ6EhavxWJc6GqRtcav22YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9iZjFjMTE5Zi01YzA4LTQ2NjMtYjU1MC0xZDUz MWMyZmU1NGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCiJOkAwQB iJOuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBAH4ZUj8rbfGLxeOjzXzSTNjCWGVb7yXrKRNzmc35jnlN2eWb xVeD3oaYYyrb3P9FvGHVgGk/urI3TvbNa3zcGRvoZbL22B8OUpC0zex19Ncc0Tmh sfTD68RSTb13Sk4LOTZvaOhY+hHL999/1yH7Gs/pzyVJg0PeFU0t6QR5Wuwy1WT/ JleDGd2MLcmvO2gQRZnHB0v95iYUW6WtrRZrjFeo3j3B7qkW0DW2lQAG0S1dhGiE onNWH+X+xxJcMWtq2Cucubl3iFofjjNRR0H4418TKEXIOWSt65Z7qOd1zQZKXxS8 s3hgTg+14oRoB9Uf0WPBWrwQsyp9jD4NAm9EBm8= -----END CERTIFICATE-----Generated at Sat Aug 23 15:45:17 2025 by rpki-client