$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/221d4f23-559b-3622-bb79-cd7f429c28df.roa File: 221d4f23-559b-3622-bb79-cd7f429c28df.roa (raw, json) Hash identifier: HTnb7Nzd2Kqwby/AQfKB+IFQlpG3HQednY1DIU3qrcw= Subject key identifier: 9A:7B:B7:25:28:0F:D4:20:24:F2:B0:7B:B7:24:35:04:8F:45:85:8B Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFFC5A66FAE3751E2CBF40 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/221d4f23-559b-3622-bb79-cd7f429c28df.roa Signing time: Sun 03 Aug 2025 02:35:42 +0000 ROA not before: Sun 03 Aug 2025 02:35:42 +0000 ROA not after: Sat 01 Nov 2025 02:35:42 +0000 asID: 62044 IP address blocks: 136.226.184.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:fc:5a:66:fa:e3:75:1e:2c:bf:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:42 2025 GMT Not After : Nov 1 02:35:42 2025 GMT Subject: CN=cae6f2b3-9eaa-4c88-b079-e247f865b376 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:7a:90:01:5e:82:81:49:3f:cf:84:0a:9c:19: 4e:bf:b7:52:94:f6:24:70:87:74:c4:a3:a0:02:99: ac:c0:b4:3a:a6:09:a3:6f:fc:45:df:0e:21:b0:40: 23:cc:22:c2:02:76:e5:69:a1:17:f5:84:29:11:e6: f0:88:b3:17:94:50:b1:00:3e:63:e6:b2:45:6e:d2: a4:f6:fb:30:6b:34:23:09:64:84:ad:01:d8:56:cb: e2:f8:ad:f5:60:6c:b6:74:0d:22:68:31:0e:15:56: 46:44:c2:be:a1:77:8b:54:7c:2c:43:c7:6f:2f:63: 13:95:3c:8d:e4:41:3f:f0:f1:cb:cf:6e:9d:46:46: a4:93:b0:7a:de:42:21:66:1d:83:a5:ed:65:9a:8c: 8b:52:79:e7:c0:21:33:1b:3c:c7:d0:ba:a0:48:3d: 60:04:73:e5:40:08:a0:55:b3:17:d8:35:36:e1:9d: af:e4:40:f0:2b:15:64:02:bf:e0:a0:ec:d9:cb:e9: d7:e9:9e:11:7f:07:b4:c2:73:5f:0e:66:1b:6c:f9: fb:fc:f7:84:d2:8b:17:3f:b5:81:bc:5f:fb:86:08: 99:ea:8b:33:52:aa:44:22:85:09:bc:c8:31:1d:37: 03:4c:7f:b6:c2:fd:c2:10:a7:d8:80:d2:ac:18:f7: 96:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:B7:25:28:0F:D4:20:24:F2:B0:7B:B7:24:35:04:8F:45:85:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/221d4f23-559b-3622-bb79-cd7f429c28df.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.184.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:a5:f6:c4:27:5e:ab:5f:3e:39:f3:e3:66:6f:94:57:9f:89: 01:e1:8f:7c:e6:9c:ac:8f:d4:3a:74:27:1b:d6:e4:f6:65:dc: 84:21:eb:39:21:87:f6:26:9e:ea:97:4b:b5:a4:df:87:6f:92: b3:a6:73:73:0b:b3:7a:9a:8b:1a:7e:4c:e6:e7:ea:b9:22:27: e1:66:8a:50:67:a9:08:13:d1:7b:8a:cf:ed:16:e9:2f:71:f2: 11:44:cb:22:f4:cf:86:c5:f3:f6:da:40:4d:db:16:d5:12:41: 3c:16:2e:c6:84:b7:98:70:53:48:f4:e5:cf:2c:f4:c0:f2:b6: 93:be:ac:a0:c3:5c:ba:75:a8:91:86:4f:df:c1:24:1e:82:63: c1:0f:6b:81:2d:07:ed:ca:9b:cf:62:4c:10:cb:77:46:fe:d3: df:f9:c9:cc:1e:f5:99:cb:d3:c0:f0:01:91:82:2a:21:77:27: f5:fb:df:e5:3b:bb:41:13:4c:32:97:a3:12:b9:75:30:6f:04: 99:ac:d3:4c:fa:e4:e7:73:4f:48:8f:ab:9a:fd:b4:a4:c1:a2: 3d:74:d2:c3:76:e4:94:72:95:59:4d:a9:ba:1b:7d:94:51:5e: c1:0f:97:d5:e4:92:49:08:dc:fb:97:98:c2:b9:7e:97:3f:b2: 1d:4e:68:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/xaZvrjdR4sv0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MloXDTI1MTEwMTAyMzU0MlowLzEtMCsGA1UEAxMk Y2FlNmYyYjMtOWVhYS00Yzg4LWIwNzktZTI0N2Y4NjViMzc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxnqQAV6CgUk/z4QKnBlOv7dSlPYkcId0xKOg ApmswLQ6pgmjb/xF3w4hsEAjzCLCAnblaaEX9YQpEebwiLMXlFCxAD5j5rJFbtKk 9vswazQjCWSErQHYVsvi+K31YGy2dA0iaDEOFVZGRMK+oXeLVHwsQ8dvL2MTlTyN 5EE/8PHLz26dRkakk7B63kIhZh2Dpe1lmoyLUnnnwCEzGzzH0LqgSD1gBHPlQAig VbMX2DU24Z2v5EDwKxVkAr/goOzZy+nX6Z4Rfwe0wnNfDmYbbPn7/PeE0osXP7WB vF/7hgiZ6oszUqpEIoUJvMgxHTcDTH+2wv3CEKfYgNKsGPeWbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJp7tyUoD9QgJPKwe7ckNQSPRYWLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMjIxZDRmMjMtNTU5Yi0z NjIyLWJiNzktY2Q3ZjQyOWMyOGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOK4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEil9sQnXqtfPjnz42ZvlFefiQHhj3zmnKyP1Dp0JxvW5PZl3IQh6zkh h/YmnuqXS7Wk34dvkrOmc3MLs3qaixp+TObn6rkiJ+FmilBnqQgT0XuKz+0W6S9x 8hFEyyL0z4bF8/baQE3bFtUSQTwWLsaEt5hwU0j05c8s9MDytpO+rKDDXLp1qJGG T9/BJB6CY8EPa4EtB+3Km89iTBDLd0b+09/5ycwe9ZnL08DwAZGCKiF3J/X73+U7 u0ETTDKXoxK5dTBvBJms00z65OdzT0iPq5r9tKTBoj100sN25JRylVlNqbobfZRR XsEPl9XkkkkI3PuXmMK5fpc/sh1OaMw= -----END CERTIFICATE-----Generated at Tue Aug 5 17:22:48 2025 by rpki-client