$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4912a62a-1834-37ac-a6b9-c3eed54a97ba.roa File: 4912a62a-1834-37ac-a6b9-c3eed54a97ba.roa (raw, json) Hash identifier: 2/jyyPVzVaGgL1njgxiVVL8NsmqXdYitGWMTwwEKAOM= Subject key identifier: 32:7D:3D:39:F8:99:5B:D3:4E:25:F3:1F:6E:1B:4E:64:CF:53:87:D5 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849D594F9E337BF1AAB464BD800 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4912a62a-1834-37ac-a6b9-c3eed54a97ba.roa Signing time: Tue 13 May 2025 01:00:47 +0000 ROA not before: Tue 13 May 2025 01:00:47 +0000 ROA not after: Mon 11 Aug 2025 01:00:47 +0000 asID: 396982 IP address blocks: 136.124.0.0/16 maxlen: 16 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d5:94:f9:e3:37:bf:1a:ab:46:4b:d8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 13 01:00:47 2025 GMT Not After : Aug 11 01:00:47 2025 GMT Subject: CN=93b9de19-6b89-4872-bf28-c45f7daa5853 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6c:e0:3d:44:32:ab:0c:9c:2a:bf:54:e6:cd: 28:4b:2c:6d:8c:65:48:6b:9e:1c:d2:07:6b:29:3f: f7:ff:a0:5f:4c:1b:29:ac:0c:f5:ac:a6:7c:72:53: 78:33:29:97:f7:0c:a1:17:ea:79:43:03:72:aa:73: 70:33:1d:56:10:be:c1:66:9f:0a:31:0b:ca:a0:ec: 9b:21:b5:84:e0:1a:51:af:6f:30:5c:07:21:85:b7: 06:81:b7:2b:20:cc:03:4c:c3:74:52:68:86:00:ad: a0:97:3e:bd:a8:3c:91:51:df:98:4f:f4:24:18:f0: c9:a6:92:7a:73:f3:0c:75:20:30:fa:5b:b5:17:b7: b2:c5:c1:ce:5f:f7:33:a1:19:41:a7:e9:01:53:71: 82:c5:36:7a:f1:0c:4d:e6:49:1c:ee:9d:47:26:a9: 0d:a5:cc:16:1d:24:33:81:38:14:e1:2b:5b:67:0f: 18:42:2d:14:54:70:30:9e:a4:3b:9e:67:4c:62:a9: cd:e1:8c:f9:53:ea:06:d0:e8:d7:aa:c3:c1:1a:6a: 49:07:0f:ec:1f:0a:c5:ba:a6:45:67:0b:f4:ae:fd: 40:aa:a0:d7:42:1e:62:bc:93:da:43:9c:50:0e:4f: 6e:dc:47:48:af:bc:6f:f0:19:d5:eb:14:f6:1a:f1: 9f:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:7D:3D:39:F8:99:5B:D3:4E:25:F3:1F:6E:1B:4E:64:CF:53:87:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/4912a62a-1834-37ac-a6b9-c3eed54a97ba.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.124.0.0/16 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:78:d8:13:7d:a8:89:89:c0:2b:75:de:f4:d7:7e:cf:6a:0b: e2:10:7e:5b:e5:ef:2a:0c:a4:ba:8c:c2:5b:c5:1b:b1:eb:21: 44:6e:16:b2:46:f0:da:36:66:d5:a2:24:d2:64:20:35:a4:3d: 6b:ce:fb:03:2b:75:37:f7:ef:17:74:f5:3a:62:22:87:f9:fa: a3:5d:9a:20:16:4d:8c:30:10:4b:b3:79:7c:da:c3:23:de:0f: 96:34:d1:96:32:19:8c:ef:8b:dc:3e:f3:72:fb:37:81:7a:7f: 9b:89:2d:7a:92:44:fb:b9:66:8c:6e:d2:6e:1b:8a:26:49:56: bb:29:82:c4:d3:01:18:81:da:96:1d:3d:2a:74:d7:3e:35:6d: 39:f8:aa:6a:fd:43:36:7f:49:f2:3b:cf:c6:58:3f:e1:59:17: 24:1c:f3:e6:57:8b:46:5e:c4:0d:b0:d3:b7:c2:e6:b0:38:b9: 34:6d:1e:66:f2:d5:ae:04:92:6d:ff:e1:c9:68:60:ce:84:75: bb:47:17:c7:e6:7c:9d:de:c3:c7:ef:cb:63:09:60:01:28:8a: 5c:81:18:11:e0:d9:9b:2b:66:f0:14:91:35:d3:fb:02:a5:ad: 27:fd:8c:11:24:f6:24:88:f1:02:e4:ed:be:0d:cc:39:3e:50: 69:97:7d:0a -----BEGIN CERTIFICATE----- MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnVlPnjN78aq0ZL2AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUxMzAxMDA0N1oXDTI1MDgxMTAxMDA0N1owLzEtMCsGA1UEAxMk OTNiOWRlMTktNmI4OS00ODcyLWJmMjgtYzQ1ZjdkYWE1ODUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkWzgPUQyqwycKr9U5s0oSyxtjGVIa54c0gdr KT/3/6BfTBsprAz1rKZ8clN4MymX9wyhF+p5QwNyqnNwMx1WEL7BZp8KMQvKoOyb IbWE4BpRr28wXAchhbcGgbcrIMwDTMN0UmiGAK2glz69qDyRUd+YT/QkGPDJppJ6 c/MMdSAw+lu1F7eyxcHOX/czoRlBp+kBU3GCxTZ68QxN5kkc7p1HJqkNpcwWHSQz gTgU4StbZw8YQi0UVHAwnqQ7nmdMYqnN4Yz5U+oG0OjXqsPBGmpJBw/sHwrFuqZF Zwv0rv1AqqDXQh5ivJPaQ5xQDk9u3EdIr7xv8BnV6xT2GvGfmQIDAQABo4IDVDCC A1AwHQYDVR0OBBYEFDJ9PTn4mVvTTiXzH24bTmTPU4fVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvNDkxMmE2MmEtMTgzNC0z N2FjLWE2YjktYzNlZWQ1NGE5N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiHwwVAYD VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3 dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF AAOCAQEABnjYE32oiYnAK3Xe9Nd+z2oL4hB+W+XvKgykuozCW8UbseshRG4Wskbw 2jZm1aIk0mQgNaQ9a877Ayt1N/fvF3T1OmIih/n6o12aIBZNjDAQS7N5fNrDI94P ljTRljIZjO+L3D7zcvs3gXp/m4ktepJE+7lmjG7SbhuKJklWuymCxNMBGIHalh09 KnTXPjVtOfiqav1DNn9J8jvPxlg/4VkXJBzz5leLRl7EDbDTt8LmsDi5NG0eZvLV rgSSbf/hyWhgzoR1u0cXx+Z8nd7Dx+/LYwlgASiKXIEYEeDZmytm8BSRNdP7AqWt J/2MEST2JIjxAuTtvg3MOT5QaZd9Cg== -----END CERTIFICATE-----Generated at Mon Jun 30 15:55:42 2025 by rpki-client