$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa File: 3e57d35c-436f-36da-9268-071790ff1ac8.roa (raw, json) Hash identifier: NNsHBRjXK76Kx4O5f1+GvKbsUXp0vKFEpHFQJMenPnE= Subject key identifier: 00:7D:91:0A:96:8E:BA:7F:DC:FB:C3:4D:97:24:E9:23:8F:79:0E:25 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFFA3430DA3613C64A67C0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa Signing time: Sun 03 Aug 2025 02:35:41 +0000 ROA not before: Sun 03 Aug 2025 02:35:41 +0000 ROA not after: Sat 01 Nov 2025 02:35:41 +0000 asID: 22616 IP address blocks: 136.226.100.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:fa:34:30:da:36:13:c6:4a:67:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:41 2025 GMT Not After : Nov 1 02:35:41 2025 GMT Subject: CN=bc33014b-5326-459a-b406-e26d740c9280 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b0:0f:ce:95:12:46:c3:af:18:58:c1:16:8f: d0:6c:c9:4b:36:0d:dd:7f:75:dd:5c:f4:05:eb:bc: 88:15:1a:a6:f8:5b:57:50:b1:dc:91:36:e5:37:b9: 39:5d:61:3a:7f:04:99:8c:72:cf:aa:05:4e:03:99: 55:1f:c7:77:a9:79:4e:db:1c:97:27:bf:87:18:3c: fe:5c:5a:a7:5e:df:43:ed:6b:93:03:8e:ba:c2:a2: 45:cf:b8:ee:c7:b4:e0:8b:09:70:c9:9d:6e:16:32: 51:a7:61:1b:c0:80:d8:b4:e3:8e:18:2d:62:07:62: fd:00:38:cb:29:ba:9e:a6:eb:7b:77:17:ba:6d:48: 4b:b4:ff:32:e8:30:84:30:02:d7:6c:14:b0:c9:1a: b9:30:73:db:42:76:c6:2d:8a:bc:49:a7:72:8e:66: 26:96:28:73:10:cf:43:d4:4b:40:c8:72:9b:63:93: dd:8d:c0:6c:4b:b1:e1:87:5d:8c:c5:51:63:c4:d0: 06:4a:98:7a:2d:71:3d:ef:d4:fe:67:e3:54:14:89: e0:37:11:03:bc:bf:53:3e:e8:44:5c:c1:1b:c2:43: b9:f3:f5:b7:37:6a:1a:bd:be:e8:ce:64:6e:f0:4b: 18:ec:c6:00:0f:55:82:bd:85:52:84:54:3e:fd:2e: dc:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7D:91:0A:96:8E:BA:7F:DC:FB:C3:4D:97:24:E9:23:8F:79:0E:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/3e57d35c-436f-36da-9268-071790ff1ac8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.100.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption ac:5e:3a:43:7d:2d:cd:3d:8a:d8:fb:58:45:9f:e2:f3:55:f4: e2:d8:d2:ee:7f:cf:63:23:db:a5:bf:e9:8d:0f:56:e2:4f:52: ee:4c:88:0d:59:2e:1c:b0:5a:17:b9:25:af:f4:48:fb:76:b4: e8:34:a3:1d:e6:29:d2:b0:29:32:7c:da:e9:fd:81:c3:99:81: ff:ec:2e:9b:70:8c:bf:89:f5:7f:cc:93:84:4a:c2:08:52:5b: b3:15:1f:41:33:96:be:09:18:6e:58:6a:8c:02:ab:96:28:31: 73:36:45:fc:89:8b:52:3a:ef:b5:20:30:ea:57:ba:88:01:42: 36:06:db:b7:90:44:df:fe:f3:f6:a1:dc:79:74:e2:07:b5:60: 8d:35:9f:eb:93:3d:8d:c3:ce:61:25:d9:e8:c4:cd:f1:9d:24: b0:9c:83:d9:73:11:b7:83:94:3a:72:fa:ed:6b:df:c5:b3:b7: 4b:0a:04:81:9d:ae:64:0f:68:7c:7d:48:57:8e:ee:9f:22:ac: 87:df:65:08:8f:c3:72:e1:c7:dd:18:ef:23:5e:d3:cb:ac:a7: 8a:1a:60:09:f6:41:77:11:ba:e6:77:a3:c7:ca:b6:04:af:25: 47:b3:49:10:4a:50:fe:51:b0:e4:a3:56:bd:71:04:a9:e5:f1: 26:b8:c1:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/o0MNo2E8ZKZ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MVoXDTI1MTEwMTAyMzU0MVowLzEtMCsGA1UEAxMk YmMzMzAxNGItNTMyNi00NTlhLWI0MDYtZTI2ZDc0MGM5MjgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2rAPzpUSRsOvGFjBFo/QbMlLNg3df3XdXPQF 67yIFRqm+FtXULHckTblN7k5XWE6fwSZjHLPqgVOA5lVH8d3qXlO2xyXJ7+HGDz+ XFqnXt9D7WuTA466wqJFz7jux7TgiwlwyZ1uFjJRp2EbwIDYtOOOGC1iB2L9ADjL Kbqeput7dxe6bUhLtP8y6DCEMALXbBSwyRq5MHPbQnbGLYq8SadyjmYmlihzEM9D 1EtAyHKbY5PdjcBsS7Hhh12MxVFjxNAGSph6LXE979T+Z+NUFIngNxEDvL9TPuhE XMEbwkO58/W3N2oavb7ozmRu8EsY7MYAD1WCvYVShFQ+/S7cOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB9kQqWjrp/3PvDTZck6SOPeQ4lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvM2U1N2QzNWMtNDM2Zi0z NmRhLTkyNjgtMDcxNzkwZmYxYWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOJkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKxeOkN9Lc09itj7WEWf4vNV9OLY0u5/z2Mj26W/6Y0PVuJPUu5MiA1Z LhywWhe5Ja/0SPt2tOg0ox3mKdKwKTJ82un9gcOZgf/sLptwjL+J9X/Mk4RKwghS W7MVH0Ezlr4JGG5YaowCq5YoMXM2RfyJi1I677UgMOpXuogBQjYG27eQRN/+8/ah 3Hl04ge1YI01n+uTPY3DzmEl2ejEzfGdJLCcg9lzEbeDlDpy+u1r38Wzt0sKBIGd rmQPaHx9SFeO7p8irIffZQiPw3Lhx90Y7yNe08usp4oaYAn2QXcRuuZ3o8fKtgSv JUezSRBKUP5RsOSjVr1xBKnl8Sa4wbU= -----END CERTIFICATE-----Generated at Mon Aug 4 22:23:22 2025 by rpki-client