$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa File: cece6c8f-010f-3c85-a43d-246f8147d7f7.roa (raw, json) Hash identifier: gGyKIgIW6P2af8Gly2HL3pCtcZGA1gTqcnG7bQBQlzo= Subject key identifier: 47:20:7E:6B:6E:7A:D8:14:BB:7B:74:91:9E:E9:3D:BB:79:01:35:36 Certificate issuer: /CN=2e356a8c-d37d-4efc-986d-251de18075cc Certificate serial: 010D0C9F4328584A82AB4BFF5337FB624127B460 Authority key identifier: EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa Signing time: Mon 14 Jul 2025 01:00:50 +0000 ROA not before: Mon 14 Jul 2025 01:00:50 +0000 ROA not after: Sun 12 Oct 2025 01:00:50 +0000 asID: 14543 IP address blocks: 136.227.64.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:82:ab:4b:ff:53:37:fb:62:41:27:b4:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e356a8c-d37d-4efc-986d-251de18075cc Validity Not Before: Jul 14 01:00:50 2025 GMT Not After : Oct 12 01:00:50 2025 GMT Subject: CN=7ba875e2-fab8-4d9f-9242-ee4e215d8ad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:52:dc:45:91:a0:e1:d8:71:f3:67:34:cd:aa: 0a:45:5c:ff:4e:a4:e6:63:e8:5d:a3:9b:4a:8c:19: e4:87:6b:c8:c8:bc:a7:3e:19:3e:49:a3:20:55:c9: d2:ee:4e:22:34:33:21:d6:5a:4c:19:00:3d:c9:24: e7:7b:b5:6e:e4:5f:73:e9:e3:15:c4:87:0d:5c:16: 19:f5:76:35:71:64:c5:73:ac:aa:67:4e:96:5f:2a: 78:3f:cb:94:26:7c:27:cd:5c:37:41:dd:5d:20:ec: de:c1:5f:da:88:58:81:2a:56:11:0e:83:81:4f:97: 4b:46:dc:99:d3:f1:90:29:56:25:1f:19:37:2a:b6: 48:1e:60:8f:42:a3:88:cc:69:e3:ce:03:c6:5d:7c: a2:08:d1:64:c4:f5:e3:8b:45:e2:b7:b8:99:61:a6: 6a:82:3f:28:98:c7:df:6e:5f:7a:00:57:cf:32:ee: bc:35:c5:b6:67:f6:33:da:26:dd:1a:27:cb:d2:1e: 45:a1:6e:82:5a:cd:a6:4f:cc:65:03:d0:b8:6e:41: 42:a8:6e:94:b2:fe:99:7d:a0:e2:61:59:b0:1c:1e: 7b:d3:88:98:14:f9:37:a9:3b:dc:dc:5d:fd:a7:fa: 09:d4:50:2f:ed:ee:30:b1:75:c3:75:fe:2c:47:3e: c6:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:20:7E:6B:6E:7A:D8:14:BB:7B:74:91:9E:E9:3D:BB:79:01:35:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/cece6c8f-010f-3c85-a43d-246f8147d7f7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc/2e356a8c-d37d-4efc-986d-251de18075cc.crl X509v3 Authority Key Identifier: keyid:EE:53:F8:E0:32:A8:99:92:86:FA:E4:D6:AF:BE:EA:55:32:A8:37:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e356a8c-d37d-4efc-986d-251de18075cc.cer sbgp-ipAddrBlock: critical IPv4: 136.227.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:fe:d9:03:d3:01:af:cc:47:2b:98:79:57:c4:6a:cb:f5:3e: dd:b0:85:5e:35:95:2e:54:7b:c3:ae:e9:f5:23:ba:63:91:bc: 96:39:6b:0e:e9:b9:d3:21:33:ce:92:e3:cd:a4:1a:01:fa:00: 5e:cd:26:8a:a3:86:86:47:3c:00:4b:55:65:10:eb:e3:d7:50: b6:72:42:53:71:69:00:14:ac:cf:5d:87:d5:a3:31:f8:87:8a: a7:b8:63:1c:05:e1:54:12:3b:d9:7e:15:96:93:0e:7b:59:49: a5:8b:5b:e1:fb:42:68:0b:44:f1:84:43:c4:c0:6c:0d:0f:a5: fa:d5:60:28:e7:aa:e6:e1:ec:12:e6:3e:84:4d:27:54:ed:4b: 57:a5:25:0b:bb:0d:ad:2d:b3:3e:9d:5f:d7:d6:23:0e:7b:43: 05:07:42:80:0b:33:dd:23:03:c8:7d:32:6c:fb:39:28:c7:ce: 3a:26:5f:84:d9:56:57:75:f0:22:1c:af:5d:6a:53:69:c9:7d: 6a:c4:78:63:d6:9d:b6:b9:a9:3c:0d:47:8c:6d:9f:8d:ad:e8: 4c:b4:69:06:db:6e:d4:76:cf:0f:b0:7c:90:c7:c8:ac:35:84: 98:ca:93:d9:7f:18:02:5b:50:4e:d4:de:bc:df:d3:30:cf:45: 4d:d1:1e:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0v/Uzf7YkEntGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmUzNTZhOGMtZDM3ZC00ZWZjLTk4NmQtMjUxZGUxODA3 NWNjMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk N2JhODc1ZTItZmFiOC00ZDlmLTkyNDItZWU0ZTIxNWQ4YWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplLcRZGg4dhx82c0zaoKRVz/TqTmY+hdo5tK jBnkh2vIyLynPhk+SaMgVcnS7k4iNDMh1lpMGQA9ySTne7Vu5F9z6eMVxIcNXBYZ 9XY1cWTFc6yqZ06WXyp4P8uUJnwnzVw3Qd1dIOzewV/aiFiBKlYRDoOBT5dLRtyZ 0/GQKVYlHxk3KrZIHmCPQqOIzGnjzgPGXXyiCNFkxPXji0Xit7iZYaZqgj8omMff bl96AFfPMu68NcW2Z/Yz2ibdGifL0h5FoW6CWs2mT8xlA9C4bkFCqG6Usv6ZfaDi YVmwHB5704iYFPk3qTvc3F39p/oJ1FAv7e4wsXXDdf4sRz7G/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEcgfmtuetgUu3t0kZ7pPbt5ATU2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1 NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFkZTE4MDc1Y2MvY2VjZTZjOGYtMDEwZi0z Yzg1LWE0M2QtMjQ2ZjgxNDdkN2Y3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmUzNTZhOGMtZDM3ZC00ZWZjLTk4 NmQtMjUxZGUxODA3NWNjLzJlMzU2YThjLWQzN2QtNGVmYy05ODZkLTI1MWRlMTgw NzVjYy5jcmwwHwYDVR0jBBgwFoAU7lP44DKomZKG+uTWr77qVTKoN78wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTM1NmE4Yy1kMzdkLTRlZmMtOTg2ZC0yNTFk ZTE4MDc1Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiONAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAn+2QPTAa/MRyuYeVfEasv1Pt2whV41lS5Ue8Ou6fUjumORvJY5aw7p udMhM86S482kGgH6AF7NJoqjhoZHPABLVWUQ6+PXULZyQlNxaQAUrM9dh9WjMfiH iqe4YxwF4VQSO9l+FZaTDntZSaWLW+H7QmgLRPGEQ8TAbA0PpfrVYCjnqubh7BLm PoRNJ1TtS1elJQu7Da0tsz6dX9fWIw57QwUHQoALM90jA8h9Mmz7OSjHzjomX4TZ Vld18CIcr11qU2nJfWrEeGPWnba5qTwNR4xtn42t6Ey0aQbbbtR2zw+wfJDHyKw1 hJjKk9l/GAJbUE7U3rzf0zDPRU3RHvU= -----END CERTIFICATE-----Generated at Tue Aug 5 16:38:12 2025 by rpki-client