$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21444965-e1e5-3e92-ba3f-bdc9d74b04a9.roa File: 21444965-e1e5-3e92-ba3f-bdc9d74b04a9.roa (raw, json) Hash identifier: GxzbsdNYKv9YZm3HRu0hLGKl/JAFLMSHlfHChfUvEjg= Subject key identifier: DB:BF:EA:3E:8F:5E:D6:F4:F0:D5:F7:24:C8:D7:0C:11:77:4C:9F:FB Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFFA4E37A640AEFB3FD200 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21444965-e1e5-3e92-ba3f-bdc9d74b04a9.roa Signing time: Sun 03 Aug 2025 02:35:41 +0000 ROA not before: Sun 03 Aug 2025 02:35:41 +0000 ROA not after: Sat 01 Nov 2025 02:35:41 +0000 asID: 22616 IP address blocks: 136.226.104.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:fa:4e:37:a6:40:ae:fb:3f:d2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:41 2025 GMT Not After : Nov 1 02:35:41 2025 GMT Subject: CN=6787b7eb-fb44-4bb5-aa5b-471d37af1dc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:50:70:6d:32:e3:17:3d:76:a9:36:1c:16:69: fa:79:1c:86:6c:f6:76:58:5e:bd:f5:f8:8c:66:3c: 76:f6:21:76:c7:6f:86:25:ff:36:5b:e1:c4:1c:48: f0:c3:8c:e2:dd:2e:71:ba:39:c5:69:53:ae:94:e5: 07:f5:00:fa:41:4e:4f:15:60:c0:4a:2c:b5:1f:f6: c5:fb:df:20:41:de:35:c6:c2:4b:a2:b5:f0:c3:fb: 93:69:40:36:cf:7c:14:59:07:14:eb:6f:2a:de:2e: 39:cd:8a:2a:5e:cb:03:20:35:59:9f:84:28:40:2f: 93:4c:a2:e7:31:b4:60:55:e8:ef:40:53:f0:1e:f9: a5:54:3d:a8:dd:cd:f7:24:d9:cb:43:37:2c:f4:6a: 49:15:f1:46:22:f4:3a:70:2b:f8:91:51:15:01:e8: ae:52:68:1b:ad:34:c5:ac:33:79:ab:e7:ed:88:13: b2:7e:d4:2d:34:f2:06:4b:8e:22:3f:98:42:1c:98: 4b:80:6d:d0:0d:4f:0e:1a:c2:d4:57:0e:85:dc:1c: 03:10:9a:76:3d:b6:89:0a:d1:ec:60:1e:d2:6c:06: cb:b3:56:42:e2:34:11:14:c0:d4:e2:64:2a:05:81: 89:fb:d7:73:ac:e8:3b:da:61:80:a1:4a:22:f7:ce: ab:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:BF:EA:3E:8F:5E:D6:F4:F0:D5:F7:24:C8:D7:0C:11:77:4C:9F:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/21444965-e1e5-3e92-ba3f-bdc9d74b04a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.104.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:3c:9a:39:69:81:a5:6c:5c:fe:95:c6:25:0a:5e:26:c4:c0: 0f:54:72:0a:92:bb:67:0b:71:8f:c6:76:2c:63:79:af:7a:2a: cf:d2:af:e3:56:5f:4c:93:73:96:fb:bf:bc:5a:cb:a5:6e:cc: ee:98:e4:c8:f4:75:93:79:97:67:a2:79:90:4b:08:d9:2d:ee: 60:91:ff:e1:cf:ae:b3:de:58:5d:94:5b:7b:2f:e6:fa:bc:26: 53:5c:d5:59:30:86:45:03:91:16:21:a8:2a:e8:e3:55:47:dd: b3:ee:99:60:5b:50:fa:6f:4f:e3:d0:b0:fe:e0:d5:a9:dc:cc: 98:25:dd:17:a0:7d:ee:dd:69:c0:fc:8b:11:ad:fb:b7:c3:58: f7:71:b6:7d:c4:cc:eb:cb:20:2e:00:e1:ea:55:ac:fc:ac:3e: 87:5d:1b:b8:b8:db:8a:72:df:4d:d2:14:71:d4:c3:8f:16:e7: 58:46:63:b0:ca:aa:0c:c5:34:05:f0:6c:d7:15:0e:9f:12:25: 82:04:06:e0:c1:4c:46:87:ad:b2:a1:6f:3b:c1:b2:73:8d:bf: 34:18:e2:5f:07:ea:97:32:cc:66:65:0e:79:34:46:eb:f7:90: 30:89:25:ab:a1:18:1d:e7:4b:a7:81:9c:82:c8:11:61:a3:49: ba:27:31:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/pON6ZArvs/0gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MVoXDTI1MTEwMTAyMzU0MVowLzEtMCsGA1UEAxMk Njc4N2I3ZWItZmI0NC00YmI1LWFhNWItNDcxZDM3YWYxZGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1BwbTLjFz12qTYcFmn6eRyGbPZ2WF699fiM Zjx29iF2x2+GJf82W+HEHEjww4zi3S5xujnFaVOulOUH9QD6QU5PFWDASiy1H/bF +98gQd41xsJLorXww/uTaUA2z3wUWQcU628q3i45zYoqXssDIDVZn4QoQC+TTKLn MbRgVejvQFPwHvmlVD2o3c33JNnLQzcs9GpJFfFGIvQ6cCv4kVEVAeiuUmgbrTTF rDN5q+ftiBOyftQtNPIGS44iP5hCHJhLgG3QDU8OGsLUVw6F3BwDEJp2PbaJCtHs YB7SbAbLs1ZC4jQRFMDU4mQqBYGJ+9dzrOg72mGAoUoi986rWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNu/6j6PXtb08NX3JMjXDBF3TJ/7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjE0NDQ5NjUtZTFlNS0z ZTkyLWJhM2YtYmRjOWQ3NGIwNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg8mjlpgaVsXP6VxiUKXibEwA9UcgqSu2cLcY/Gdixjea96Ks/Sr+NW X0yTc5b7v7xay6VuzO6Y5Mj0dZN5l2eieZBLCNkt7mCR/+HPrrPeWF2UW3sv5vq8 JlNc1VkwhkUDkRYhqCro41VH3bPumWBbUPpvT+PQsP7g1anczJgl3Regfe7dacD8 ixGt+7fDWPdxtn3EzOvLIC4A4epVrPysPoddG7i424py303SFHHUw48W51hGY7DK qgzFNAXwbNcVDp8SJYIEBuDBTEaHrbKhbzvBsnONvzQY4l8H6pcyzGZlDnk0Ruv3 kDCJJauhGB3nS6eBnILIEWGjSbonMek= -----END CERTIFICATE-----Generated at Tue Aug 5 17:21:52 2025 by rpki-client