$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa File: 497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa (raw, json) Hash identifier: m0z2yxbJL8CS2ZxEtoI1AGCCfLxAdUzojo7yQHLBCOQ= Subject key identifier: B6:F5:B0:51:38:0E:1A:22:58:D2:84:F7:C5:50:25:6E:A6:01:D1:BD Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584ACCA69354AF0C6B95A715CF80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa Signing time: Sat 09 Aug 2025 13:00:41 +0000 ROA not before: Sat 09 Aug 2025 13:00:41 +0000 ROA not after: Fri 07 Nov 2025 14:00:41 +0000 asID: 16591 IP address blocks: 136.39.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:cc:a6:93:54:af:0c:6b:95:a7:15:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Aug 9 13:00:41 2025 GMT Not After : Nov 7 14:00:41 2025 GMT Subject: CN=29e55255-5912-4644-acd0-9fe3f5f25555 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:10:c0:2c:f5:c4:70:f6:87:9c:1a:e3:1e:70: ce:c3:27:c8:b3:77:d0:e9:0b:ea:f6:b0:ff:53:e3: 01:4b:fc:44:99:83:74:38:0a:ec:3f:ae:ba:69:a1: 2d:a2:f0:47:e2:af:1e:13:58:19:64:01:2f:55:60: f2:7e:e6:ea:30:63:70:9b:dd:68:d6:94:43:f2:16: 64:a6:0e:3a:0b:fc:07:ff:02:a6:e8:19:86:38:ef: 82:6b:de:68:c5:86:8b:c3:e6:37:ec:e9:20:46:69: 6b:ce:a5:90:68:00:b4:ce:c6:4e:9d:6c:d8:b7:c8: 42:4e:55:1b:63:f8:7d:01:f7:88:37:83:f8:00:b8: bf:36:1e:f4:57:23:0e:fd:11:3e:6c:80:dd:85:7c: 36:7d:98:ed:77:6c:67:22:e9:e3:60:87:ed:d2:0e: 61:91:76:01:ca:0a:a3:9a:df:9e:78:e4:62:8e:11: 17:b9:d7:82:70:1b:aa:38:58:d9:8d:91:1a:ef:4b: 07:92:bb:93:54:a7:be:ab:3e:96:5e:8e:af:8b:30: 77:50:93:02:4c:10:e4:e8:8c:0d:90:2d:a1:4f:f1: 6d:aa:72:1a:d5:22:5d:bf:53:4e:44:e8:06:d8:da: 09:75:e2:7f:fe:94:1c:77:dc:b5:2b:f6:89:a9:4f: a6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:F5:B0:51:38:0E:1A:22:58:D2:84:F7:C5:50:25:6E:A6:01:D1:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/497d53dc-1fae-3b1d-96f4-fd0efca81ac6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.39.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:be:f2:f3:ae:47:09:c8:02:c4:34:ed:e9:b9:7d:3c:49:82: f9:4c:ca:3d:60:86:49:e8:b6:e8:36:24:4b:ea:a0:80:3d:e0: 97:82:b8:7d:14:1c:fe:71:96:af:72:27:ce:22:67:89:cc:71: af:30:e2:4f:8b:2f:0d:bf:bc:6a:8d:5a:d9:d4:27:35:8a:39: 44:7f:b8:be:06:7d:c2:5c:7a:c0:63:ee:0e:38:e6:17:ac:10: d9:f7:0b:87:ee:83:64:df:59:26:fb:72:2d:08:90:30:71:66: 5f:ac:8e:29:31:ba:16:d9:6d:43:ec:2d:a7:87:20:79:e0:d7: d2:42:f8:2c:88:cc:29:2b:72:51:3b:1d:7f:2e:d1:38:11:e5: 76:2f:d8:26:f6:7a:db:9d:22:27:0b:d4:bf:a5:a9:c4:55:24: c6:72:c1:df:14:4d:03:6e:f4:a7:02:e1:8b:06:b0:74:5a:bf: 97:d5:bd:d3:c3:a0:bc:e1:7d:20:2f:19:ee:4d:e5:90:95:3f: 05:aa:d6:7a:8f:7f:2f:ab:8c:df:f7:a9:8a:ea:0f:bb:95:df: f0:51:3f:34:fc:25:59:6d:28:86:83:d7:03:7b:78:c2:c9:91: cd:e6:ee:00:52:76:da:c9:1f:56:fc:39:cf:1d:2d:34:cc:d8: a4:48:0e:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErMppNUrwxrlacVz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDgwOTEzMDA0MVoXDTI1MTEwNzE0MDA0MVowLzEtMCsGA1UEAxMk MjllNTUyNTUtNTkxMi00NjQ0LWFjZDAtOWZlM2Y1ZjI1NTU1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBDALPXEcPaHnBrjHnDOwyfIs3fQ6Qvq9rD/ U+MBS/xEmYN0OArsP666aaEtovBH4q8eE1gZZAEvVWDyfubqMGNwm91o1pRD8hZk pg46C/wH/wKm6BmGOO+Ca95oxYaLw+Y37OkgRmlrzqWQaAC0zsZOnWzYt8hCTlUb Y/h9AfeIN4P4ALi/Nh70VyMO/RE+bIDdhXw2fZjtd2xnIunjYIft0g5hkXYBygqj mt+eeORijhEXudeCcBuqOFjZjZEa70sHkruTVKe+qz6WXo6vizB3UJMCTBDk6IwN kC2hT/FtqnIa1SJdv1NOROgG2NoJdeJ//pQcd9y1K/aJqU+mzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLb1sFE4DhoiWNKE98VQJW6mAdG9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDk3ZDUzZGMtMWZhZS0z YjFkLTk2ZjQtZmQwZWZjYTgxYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCcAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABm+8vOuRwnIAsQ07em5fTxJgvlMyj1ghknotug2JEvqoIA94JeCuH0U HP5xlq9yJ84iZ4nMca8w4k+LLw2/vGqNWtnUJzWKOUR/uL4GfcJcesBj7g445hes ENn3C4fug2TfWSb7ci0IkDBxZl+sjikxuhbZbUPsLaeHIHng19JC+CyIzCkrclE7 HX8u0TgR5XYv2Cb2etudIicL1L+lqcRVJMZywd8UTQNu9KcC4YsGsHRav5fVvdPD oLzhfSAvGe5N5ZCVPwWq1nqPfy+rjN/3qYrqD7uV3/BRPzT8JVltKIaD1wN7eMLJ kc3m7gBSdtrJH1b8Oc8dLTTM2KRIDg4= -----END CERTIFICATE-----Generated at Sun Aug 24 06:56:58 2025 by rpki-client