$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8513b263-8a3e-3267-adb3-22a4f488f8a8.roa File: 8513b263-8a3e-3267-adb3-22a4f488f8a8.roa (raw, json) Hash identifier: GwDvF9o55RjQm/kdbH0lTT7XX1TwtZlM/c3yDLKrVT8= Subject key identifier: 26:CF:8E:1D:F7:B0:E6:D3:57:C7:BF:20:B7:91:13:14:EE:D8:7A:40 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F43285849C18965F03C63B1781B8E8900 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8513b263-8a3e-3267-adb3-22a4f488f8a8.roa Signing time: Mon 05 May 2025 20:41:41 +0000 ROA not before: Mon 05 May 2025 20:41:41 +0000 ROA not after: Sun 03 Aug 2025 20:41:41 +0000 asID: 396178 IP address blocks: 136.121.16.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 03 Jul 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c1:89:65:f0:3c:63:b1:78:1b:8e:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: May 5 20:41:41 2025 GMT Not After : Aug 3 20:41:41 2025 GMT Subject: CN=42d80d78-768b-4881-9109-0388143c3728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:d4:88:05:db:e0:79:6a:a1:cc:67:07:92:05: 27:2e:7a:8e:49:e6:6d:fa:04:29:c7:74:76:02:07: 48:c8:82:5e:75:ce:48:58:51:d3:d1:07:81:3a:50: f7:bd:18:d5:30:ed:25:a2:c7:61:48:f0:62:58:fa: cb:2f:15:08:0b:ba:15:b1:90:7b:2d:67:1d:20:8c: e6:7b:f2:b4:4e:62:49:96:b3:e0:94:b4:dd:d1:3f: 37:78:0a:20:75:6d:36:0c:a8:32:28:bd:1d:e0:30: 20:c2:75:ec:c2:fb:ea:f1:f9:8b:5c:1f:26:be:58: 84:64:a8:0d:fc:1e:11:18:f7:cf:d9:71:c8:6d:b4: bd:4b:78:7e:cb:d4:c4:b4:1e:03:6b:b6:96:75:ac: 7e:23:94:69:b2:47:1e:86:d5:ac:6a:e8:46:56:da: ab:47:81:e9:35:b5:8c:50:62:bd:2e:a5:84:8e:3d: 67:d4:ac:f4:e9:21:61:76:5c:97:02:31:21:f2:29: 5f:46:de:03:ed:67:7d:37:18:f2:06:57:ed:13:7c: 2a:b5:56:f6:fb:f3:8c:5a:66:f2:3e:84:02:98:6c: 87:dc:cb:86:cf:fb:45:57:e2:ad:6f:bd:cf:68:94: 4f:d9:f9:46:da:85:ff:18:9b:d4:27:4c:50:22:86: 38:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:CF:8E:1D:F7:B0:E6:D3:57:C7:BF:20:B7:91:13:14:EE:D8:7A:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8513b263-8a3e-3267-adb3-22a4f488f8a8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.16.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:9b:ea:ac:af:fb:b5:3a:4d:3f:a8:25:ea:20:87:bd:23:05: 36:fc:1e:70:22:d6:1f:e6:90:47:cd:52:38:74:4b:46:80:cd: 35:42:bf:92:cf:a8:1e:0a:20:5d:0d:e7:1b:4f:ab:bd:1c:1d: 3f:ac:e6:a1:d2:a9:a3:8d:71:8f:e1:00:ed:4e:64:5a:ef:90: 5d:c7:a7:c5:dd:54:03:1f:d4:0e:47:27:4f:3c:a6:6a:18:86: 8b:05:cf:db:d0:2b:fa:df:99:4c:07:b0:23:2b:ae:78:06:36: 53:ed:38:4e:1a:57:2d:a0:9a:71:da:27:a5:f1:6a:6f:cb:bb: 84:56:5a:ff:25:e1:d1:95:d0:95:29:ac:6e:08:d5:c0:cc:df: b8:26:f3:92:84:19:41:76:30:b6:b1:4e:70:84:2f:90:f8:7c: 4c:68:b1:ab:dc:04:e7:a9:1a:f3:15:61:3e:19:76:5f:77:01: e8:8a:75:41:e6:e8:17:64:3d:6e:be:87:7a:57:32:17:9b:52: b7:31:1e:a1:87:35:74:df:11:d3:c6:97:81:4d:5f:dc:6a:42: 3a:fe:3a:bc:59:d0:a6:cb:1d:ac:7c:50:8d:3d:3a:63:fc:80: 48:81:60:11:86:89:55:c3:eb:75:4f:a2:24:36:47:23:16:52: 68:d7:13:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnBiWXwPGOxeBuOiQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI1MDUwNTIwNDE0MVoXDTI1MDgwMzIwNDE0MVowLzEtMCsGA1UEAxMk NDJkODBkNzgtNzY4Yi00ODgxLTkxMDktMDM4ODE0M2MzNzI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu9SIBdvgeWqhzGcHkgUnLnqOSeZt+gQpx3R2 AgdIyIJedc5IWFHT0QeBOlD3vRjVMO0losdhSPBiWPrLLxUIC7oVsZB7LWcdIIzm e/K0TmJJlrPglLTd0T83eAogdW02DKgyKL0d4DAgwnXswvvq8fmLXB8mvliEZKgN /B4RGPfP2XHIbbS9S3h+y9TEtB4Da7aWdax+I5RpskcehtWsauhGVtqrR4HpNbWM UGK9LqWEjj1n1Kz06SFhdlyXAjEh8ilfRt4D7Wd9NxjyBlftE3wqtVb2+/OMWmby PoQCmGyH3MuGz/tFV+Ktb73PaJRP2flG2oX/GJvUJ0xQIoY4WwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCbPjh33sObTV8e/ILeRExTu2HpAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvODUxM2IyNjMtOGEzZS0z MjY3LWFkYjMtMjJhNGY0ODhmOGE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiHkQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAISb6qyv+7U6TT+oJeogh70jBTb8HnAi1h/mkEfNUjh0S0aAzTVCv5LP qB4KIF0N5xtPq70cHT+s5qHSqaONcY/hAO1OZFrvkF3Hp8XdVAMf1A5HJ088pmoY hosFz9vQK/rfmUwHsCMrrngGNlPtOE4aVy2gmnHaJ6Xxam/Lu4RWWv8l4dGV0JUp rG4I1cDM37gm85KEGUF2MLaxTnCEL5D4fExosavcBOepGvMVYT4Zdl93AeiKdUHm 6BdkPW6+h3pXMhebUrcxHqGHNXTfEdPGl4FNX9xqQjr+OrxZ0KbLHax8UI09OmP8 gEiBYBGGiVXD63VPoiQ2RyMWUmjXE0s= -----END CERTIFICATE-----Generated at Tue Jul 1 12:36:05 2025 by rpki-client