$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa File: 0db2ea7e-2754-3637-a784-911563222e0e.roa (raw, json) Hash identifier: mu3qojwMcH6kPy32UsIX3PW8C6Q+Gzt2C7Z7efQy9oI= Subject key identifier: 9F:F3:80:4A:E2:C6:89:F7:C1:90:FC:D7:5D:5B:FC:92:86:03:D1:3A Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFFAA00B2871BDD61B1270 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa Signing time: Sun 03 Aug 2025 02:35:41 +0000 ROA not before: Sun 03 Aug 2025 02:35:41 +0000 ROA not after: Sat 01 Nov 2025 02:35:41 +0000 asID: 22616 IP address blocks: 136.226.120.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 10 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:fa:a0:0b:28:71:bd:d6:1b:12:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:41 2025 GMT Not After : Nov 1 02:35:41 2025 GMT Subject: CN=16f8a30a-323d-44d1-a79a-712a6d34613d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2f:b4:61:50:21:3e:a9:d1:ca:6c:85:1a:67: 8b:8b:95:b3:7e:f2:62:d2:c3:19:06:dd:e9:36:0d: 13:17:b2:cc:ef:9f:f2:6f:66:04:e7:05:e8:56:7b: 46:39:98:a4:78:60:30:2b:b7:18:09:12:7b:9c:f7: 05:1d:bb:f7:e3:f5:57:09:6a:70:3c:b5:37:00:2c: 1d:f7:ce:3d:ae:33:94:bc:50:fe:a3:cf:4e:5f:23: 17:a9:4e:21:a2:bc:14:33:df:15:96:ad:9d:e8:ae: e5:d5:e4:39:70:e9:72:3b:f1:87:28:4a:06:89:28: 7c:e5:7c:11:d4:16:68:c3:0f:44:3e:7b:8b:d1:5e: 0e:56:ed:0d:c1:51:3c:90:c9:4e:c1:98:bf:d1:e7: 1e:9c:22:ec:f5:a9:59:d3:51:18:d3:62:42:25:ec: db:e5:c8:cc:bc:63:49:6b:88:19:5a:ab:a5:86:8b: 8f:d5:b2:a2:c7:19:f4:3e:90:5a:45:45:c6:58:81: 45:ec:14:15:7a:94:fb:6c:e4:09:e6:1b:66:49:a6: a5:66:bc:68:fe:fe:4b:40:93:37:f4:e3:f0:db:94: 64:e0:45:81:75:84:f7:3d:aa:f9:6a:5b:73:63:61: 45:70:f4:02:25:db:fd:76:f2:14:24:36:89:87:21: 20:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:F3:80:4A:E2:C6:89:F7:C1:90:FC:D7:5D:5B:FC:92:86:03:D1:3A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0db2ea7e-2754-3637-a784-911563222e0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.120.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7d:90:b0:fe:d3:74:03:c2:16:a4:12:d7:dd:7e:e8:c2:a4:1d: ef:21:d8:e6:2f:5f:6b:6b:c2:b6:61:64:81:cb:d2:2c:69:f5: f7:e2:d1:06:01:88:5f:4d:73:7a:59:68:47:2f:17:8d:0c:8c: 1b:ce:6c:22:be:b5:d5:50:a4:79:9a:4b:5e:f4:12:ca:70:b4: 9c:91:36:83:6c:e8:64:c9:e6:88:86:60:65:51:bd:48:ae:ee: 4d:9d:13:25:1b:b4:b7:54:1a:cb:de:ab:c5:1a:26:fd:81:ee: fc:09:ab:1c:dc:32:bd:26:d5:2c:ec:64:c6:02:ef:75:80:d3: 60:46:6b:0e:c7:d0:90:a6:f0:7b:ca:5a:66:6b:88:3d:23:91: 0e:0c:c6:71:df:77:71:81:eb:69:40:d3:d2:72:ad:13:4d:fe: f8:54:82:f9:1c:39:c7:2a:ba:53:14:15:b8:54:24:41:9b:09: d7:49:32:fc:ec:1b:a2:7a:6a:10:f5:b2:54:1d:3f:d6:35:53: 92:6e:48:1e:73:17:db:48:54:57:f4:db:e1:d2:66:d9:e5:b5: 3e:74:e0:51:08:42:bb:2c:12:37:4b:e4:23:77:97:d4:bd:2f: 1e:1a:16:a2:f9:63:2f:6a:44:b9:b0:2f:bf:9a:bd:c1:e0:ae: e5:4e:aa:3f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/qgCyhxvdYbEnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MVoXDTI1MTEwMTAyMzU0MVowLzEtMCsGA1UEAxMk MTZmOGEzMGEtMzIzZC00NGQxLWE3OWEtNzEyYTZkMzQ2MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiS+0YVAhPqnRymyFGmeLi5WzfvJi0sMZBt3p Ng0TF7LM75/yb2YE5wXoVntGOZikeGAwK7cYCRJ7nPcFHbv34/VXCWpwPLU3ACwd 9849rjOUvFD+o89OXyMXqU4horwUM98Vlq2d6K7l1eQ5cOlyO/GHKEoGiSh85XwR 1BZoww9EPnuL0V4OVu0NwVE8kMlOwZi/0ecenCLs9alZ01EY02JCJezb5cjMvGNJ a4gZWqulhouP1bKixxn0PpBaRUXGWIFF7BQVepT7bOQJ5htmSaalZrxo/v5LQJM3 9OPw25Rk4EWBdYT3Par5altzY2FFcPQCJdv9dvIUJDaJhyEgpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ/zgErixon3wZD8111b/JKGA9E6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMGRiMmVhN2UtMjc1NC0z NjM3LWE3ODQtOTExNTYzMjIyZTBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJ4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH2QsP7TdAPCFqQS191+6MKkHe8h2OYvX2trwrZhZIHL0ixp9ffi0QYB iF9Nc3pZaEcvF40MjBvObCK+tdVQpHmaS170EspwtJyRNoNs6GTJ5oiGYGVRvUiu 7k2dEyUbtLdUGsveq8UaJv2B7vwJqxzcMr0m1SzsZMYC73WA02BGaw7H0JCm8HvK WmZriD0jkQ4MxnHfd3GB62lA09JyrRNN/vhUgvkcOccqulMUFbhUJEGbCddJMvzs G6J6ahD1slQdP9Y1U5JuSB5zF9tIVFf02+HSZtnltT504FEIQrssEjdL5CN3l9S9 Lx4aFqL5Yy9qRLmwL7+avcHgruVOqj8= -----END CERTIFICATE-----Generated at Fri Aug 8 00:37:39 2025 by rpki-client