$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa File: 41037701-4376-3e93-a382-49e6eae2ede1.roa (raw, json) Hash identifier: ozNAEn4pGo+dH+Y3YGiwD9ONXRL/hw4zax6rpPJXTS4= Subject key identifier: C4:D7:EB:DB:CB:CB:9E:5F:AD:6D:BA:D8:05:E3:40:FF:C5:B6:42:FE Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F4328584ADA9BD042E778DAB49E1A1280 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa Signing time: Thu 14 Aug 2025 13:00:41 +0000 ROA not before: Thu 14 Aug 2025 13:00:41 +0000 ROA not after: Wed 12 Nov 2025 14:00:41 +0000 asID: 15169 IP address blocks: 136.22.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:da:9b:d0:42:e7:78:da:b4:9e:1a:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: Aug 14 13:00:41 2025 GMT Not After : Nov 12 14:00:41 2025 GMT Subject: CN=22bd3a4d-9f07-4590-b035-9289fe707df7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:30:cf:98:b7:8e:93:e6:aa:fc:fa:53:b2:5c: f1:70:11:8a:56:96:f3:ba:c5:46:90:ed:3e:68:9f: 69:3b:1f:a0:68:49:fc:6f:31:81:9e:67:95:cc:8c: 8a:cf:24:6f:73:a8:92:1c:c8:8c:da:77:a7:3f:fc: 13:ec:67:65:65:44:8b:d9:88:0a:7e:de:03:4a:c5: 7c:7e:85:e0:10:9a:97:21:83:f4:f3:dc:8b:1c:e4: 3f:11:a9:b2:4f:20:18:c3:47:66:4b:ea:cf:17:f6: 6a:f3:eb:fd:1a:9a:89:e3:24:63:f4:86:a5:e9:19: ed:e9:68:5a:ef:87:2e:ca:c6:9e:7d:26:b4:e5:26: d5:bc:01:1a:61:f0:eb:3b:46:96:12:e5:3f:11:74: be:10:c0:95:e2:e3:40:62:73:c2:38:eb:ce:23:12: 4a:40:0f:30:85:f5:28:08:ea:0f:45:90:8c:36:e9: 1d:e3:02:4d:f3:ab:b0:57:20:37:59:b6:de:90:0b: 80:f4:4c:64:63:fc:6f:b1:cf:e8:c3:3b:d9:55:1e: ec:ae:c1:ae:d3:a8:52:d5:a6:42:e2:ef:9d:e2:e8: 58:b3:0d:10:78:74:26:1f:5c:b4:db:4b:dc:d5:8e: 6f:2c:7c:fc:fb:57:9a:f7:16:fc:eb:11:ec:7e:3e: 46:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:D7:EB:DB:CB:CB:9E:5F:AD:6D:BA:D8:05:E3:40:FF:C5:B6:42:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 136.22.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c1:6a:5a:a7:6b:56:72:ec:24:17:89:a4:46:5d:38:8a:a3:4c: a9:ef:50:72:81:be:66:de:34:2f:63:f2:0d:32:9d:64:cc:aa: 0f:03:6f:92:07:1d:78:5e:fa:99:88:81:67:e2:b3:5a:75:61: d1:20:42:31:2d:d5:dc:3c:e1:6d:22:82:06:88:4d:b8:4d:d6: c1:f7:6d:09:81:56:63:17:5c:22:48:a2:bd:5b:43:29:44:2e: ff:58:41:71:d4:29:16:59:81:37:28:ef:f1:9d:6e:91:18:99: ff:f7:32:dc:d1:42:d5:c1:a9:c6:cf:5a:65:61:64:22:a0:aa: 77:63:4e:82:f6:b2:e3:5e:79:c5:2b:f7:23:d1:1f:66:f0:43: cd:fb:b9:85:59:9f:a1:c1:58:40:b4:25:da:06:d9:74:30:11: dd:48:2b:fc:72:ae:60:c5:e2:b5:58:fe:d6:cd:00:1c:8f:04: 39:cd:20:d9:f1:e5:41:b8:9b:1d:45:90:72:2c:7a:d7:d0:8e: 98:de:5e:17:1d:6f:fd:4c:32:48:e7:db:3f:ea:1b:77:b2:61: e3:59:c1:b3:ad:4e:6d:27:68:c7:cf:0a:e6:dc:76:76:1e:21: 38:d3:8b:7c:a0:ab:bb:2b:1c:51:75:b9:93:ad:04:12:a5:93: a9:49:01:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEram9BC53jatJ4aEoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDgxNDEzMDA0MVoXDTI1MTExMjE0MDA0MVowLzEtMCsGA1UEAxMk MjJiZDNhNGQtOWYwNy00NTkwLWIwMzUtOTI4OWZlNzA3ZGY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzDPmLeOk+aq/PpTslzxcBGKVpbzusVGkO0+ aJ9pOx+gaEn8bzGBnmeVzIyKzyRvc6iSHMiM2nenP/wT7GdlZUSL2YgKft4DSsV8 foXgEJqXIYP089yLHOQ/EamyTyAYw0dmS+rPF/Zq8+v9GpqJ4yRj9Ial6Rnt6Wha 74cuysaefSa05SbVvAEaYfDrO0aWEuU/EXS+EMCV4uNAYnPCOOvOIxJKQA8whfUo COoPRZCMNukd4wJN86uwVyA3WbbekAuA9ExkY/xvsc/owzvZVR7srsGu06hS1aZC 4u+d4uhYsw0QeHQmH1y020vc1Y5vLHz8+1ea9xb86xHsfj5G1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMTX69vLy55frW262AXjQP/FtkL+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNDEwMzc3MDEtNDM3Ni0z ZTkzLWEzODItNDllNmVhZTJlZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAMFqWqdrVnLsJBeJpEZdOIqjTKnvUHKBvmbeNC9j8g0ynWTMqg8Db5IH HXhe+pmIgWfis1p1YdEgQjEt1dw84W0iggaITbhN1sH3bQmBVmMXXCJIor1bQylE Lv9YQXHUKRZZgTco7/GdbpEYmf/3MtzRQtXBqcbPWmVhZCKgqndjToL2suNeecUr 9yPRH2bwQ837uYVZn6HBWEC0JdoG2XQwEd1IK/xyrmDF4rVY/tbNAByPBDnNINnx 5UG4mx1FkHIsetfQjpjeXhcdb/1MMkjn2z/qG3eyYeNZwbOtTm0naMfPCubcdnYe ITjTi3ygq7srHFF1uZOtBBKlk6lJAXA= -----END CERTIFICATE-----Generated at Sat Aug 23 13:39:14 2025 by rpki-client