$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/67f6288f-7fa7-31ac-a281-d090a47b9f22.roa File: 67f6288f-7fa7-31ac-a281-d090a47b9f22.roa (raw, json) Hash identifier: 3w0H3ZW2Xi4lpTwhtiVmiHlzSjsiX7qEFXPivnd87GI= Subject key identifier: 6A:E2:F0:5D:C7:48:C8:5D:E6:C8:A7:E8:48:60:89:55:84:EA:19:C7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584ABAAFFC9014D2722D5C317D80 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/67f6288f-7fa7-31ac-a281-d090a47b9f22.roa Signing time: Sun 03 Aug 2025 02:35:42 +0000 ROA not before: Sun 03 Aug 2025 02:35:42 +0000 ROA not after: Sat 01 Nov 2025 02:35:42 +0000 asID: 62044 IP address blocks: 136.226.194.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 08 Aug 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ba:af:fc:90:14:d2:72:2d:5c:31:7d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 3 02:35:42 2025 GMT Not After : Nov 1 02:35:42 2025 GMT Subject: CN=6d05988d-6cce-497f-b2a0-b25979582c89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:44:4e:0e:70:4c:8e:0f:bc:84:5d:c4:3e:fb: 29:b5:7d:c7:e6:db:bc:5a:62:9d:6c:4b:70:26:5c: 8e:96:62:9d:b4:b1:6b:dd:f2:5a:c8:e4:b9:b9:c5: f4:17:45:6c:3b:ec:e0:59:29:b3:d8:79:fc:3e:b9: 06:83:b2:f9:bd:cd:ac:14:00:78:8a:7d:04:91:0f: 64:55:78:c6:56:09:ac:4f:b6:54:25:0a:50:c5:7a: 5a:fa:40:af:3c:34:fd:71:48:d9:d8:2c:ff:75:66: ec:4a:f2:ef:d9:b5:e2:65:7f:e2:e1:48:f7:5b:75: ec:57:60:a7:03:6e:77:ca:14:22:95:73:e1:0f:c6: 65:54:dc:4d:24:2f:0e:6f:18:41:01:b0:56:af:7d: bd:c0:6d:59:b8:a4:3c:a3:55:eb:4e:60:33:4e:f1: f8:cc:7f:a4:54:8c:e6:80:81:a0:f0:1f:3a:e8:97: c0:15:21:d7:cf:b6:dc:e4:26:a6:6d:e3:47:d8:21: bb:60:ad:0b:c1:1d:17:b3:9a:57:eb:94:8f:d9:04: 2f:d5:59:85:5b:4b:93:f3:03:fc:9e:a3:7e:c0:74: 13:44:c1:ac:36:82:3d:4f:3b:79:6b:a3:c1:54:e0: c1:ee:f4:02:c9:f8:af:ba:15:e2:2b:2e:aa:2f:63: 96:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:E2:F0:5D:C7:48:C8:5D:E6:C8:A7:E8:48:60:89:55:84:EA:19:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/67f6288f-7fa7-31ac-a281-d090a47b9f22.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.194.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:1c:ee:06:bb:54:ba:22:b1:13:35:ab:eb:54:28:67:a6:68: ad:7f:7e:d2:75:61:74:b2:4b:6e:11:7e:62:79:22:2b:77:ff: 39:c0:ed:51:37:5e:8a:d3:44:2c:5f:8e:b9:79:6d:d1:52:6e: 16:a3:1f:98:3b:0e:36:0d:10:d5:32:db:ab:35:8b:a5:48:30: 69:62:f0:80:5d:f5:4f:88:c1:f5:1e:87:e1:77:d3:b7:f7:cb: 12:a6:b9:57:56:d8:69:37:8a:f6:55:0f:0b:e3:83:0c:6a:26: b9:70:f7:b5:1d:7b:72:be:e8:d5:31:21:67:d7:a3:9a:bb:45: d0:8b:e7:34:06:b0:4e:9a:02:12:b6:45:8b:98:1e:76:6d:ae: ce:e6:83:64:12:7a:c9:db:d1:b7:c7:8d:f5:5b:c3:85:ec:66: 3f:91:26:9c:06:c8:89:fe:48:37:3f:3e:45:66:00:5b:cc:6f: 7b:4e:6d:7a:20:5f:ca:c7:8a:94:05:73:7b:8f:48:aa:87:b7: aa:a7:e7:27:64:75:33:3e:ce:7d:ce:49:77:b8:ad:52:9b:63: 02:76:ad:e3:8d:b3:8f:03:f0:bb:ae:bd:96:3e:ee:84:25:b3: 74:fd:66:58:9c:1d:7f:f0:08:e7:1c:4f:9a:14:10:c7:1e:27: 93:0e:6d:76 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq6r/yQFNJyLVwxfYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDgwMzAyMzU0MloXDTI1MTEwMTAyMzU0MlowLzEtMCsGA1UEAxMk NmQwNTk4OGQtNmNjZS00OTdmLWIyYTAtYjI1OTc5NTgyYzg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwERODnBMjg+8hF3EPvsptX3H5tu8WmKdbEtw JlyOlmKdtLFr3fJayOS5ucX0F0VsO+zgWSmz2Hn8PrkGg7L5vc2sFAB4in0EkQ9k VXjGVgmsT7ZUJQpQxXpa+kCvPDT9cUjZ2Cz/dWbsSvLv2bXiZX/i4Uj3W3XsV2Cn A253yhQilXPhD8ZlVNxNJC8ObxhBAbBWr329wG1ZuKQ8o1XrTmAzTvH4zH+kVIzm gIGg8B866JfAFSHXz7bc5CambeNH2CG7YK0LwR0Xs5pX65SP2QQv1VmFW0uT8wP8 nqN+wHQTRMGsNoI9Tzt5a6PBVODB7vQCyfivuhXiKy6qL2OWuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGri8F3HSMhd5sin6EhgiVWE6hnHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjdmNjI4OGYtN2ZhNy0z MWFjLWEyODEtZDA5MGE0N2I5ZjIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOLCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKUc7ga7VLoisRM1q+tUKGemaK1/ftJ1YXSyS24RfmJ5Iit3/znA7VE3 XorTRCxfjrl5bdFSbhajH5g7DjYNENUy26s1i6VIMGli8IBd9U+IwfUeh+F307f3 yxKmuVdW2Gk3ivZVDwvjgwxqJrlw97Ude3K+6NUxIWfXo5q7RdCL5zQGsE6aAhK2 RYuYHnZtrs7mg2QSesnb0bfHjfVbw4XsZj+RJpwGyIn+SDc/PkVmAFvMb3tObXog X8rHipQFc3uPSKqHt6qn5ydkdTM+zn3OSXe4rVKbYwJ2reONs48D8LuuvZY+7oQl s3T9ZlicHX/wCOccT5oUEMceJ5MObXY= -----END CERTIFICATE-----Generated at Wed Aug 6 09:29:56 2025 by rpki-client