$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa File: d3d979b2-eb71-3f42-924a-35effff21c73.roa (raw, json) Hash identifier: thKeILX9c+bgPU2Tjzvol5yYDb5FCEw+842Bod+qR+Y= Subject key identifier: E0:D4:5F:C2:E4:FA:D3:EA:24:40:C4:40:E6:38:9F:2B:A4:9A:56:0F Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F4328584A5FC5D16635D3F778A738AA80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa Signing time: Tue 01 Jul 2025 13:01:04 +0000 ROA not before: Tue 01 Jul 2025 13:01:04 +0000 ROA not after: Mon 29 Sep 2025 13:01:04 +0000 asID: 19165 IP address blocks: 136.29.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:5f:c5:d1:66:35:d3:f7:78:a7:38:aa:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jul 1 13:01:04 2025 GMT Not After : Sep 29 13:01:04 2025 GMT Subject: CN=fd14561e-5302-4998-b9ea-34577893c577 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:b8:5e:9a:0c:1b:2b:7a:2f:ed:a2:4a:68:f2: da:20:95:9b:1b:a2:dc:aa:94:7c:9d:18:b6:25:e5: b0:25:9c:07:ac:95:f9:31:9a:4e:9c:51:f8:28:6d: 97:fc:5a:39:5d:b8:5b:38:54:82:6c:12:b2:99:fd: 53:fe:0c:d8:ec:a4:0b:fb:99:22:26:9e:20:21:04: 3d:05:5a:e8:7e:8f:c7:b0:dc:cb:df:a0:47:57:5f: f7:b5:27:13:64:5a:1c:bf:88:76:98:6f:dc:c8:45: bf:0c:c4:ef:fc:a2:0f:de:6a:12:93:87:88:a8:b0: dc:cd:a7:0e:09:84:7b:85:c2:8f:95:cd:7f:05:50: b2:f9:8e:93:bc:5a:86:44:3c:27:fc:45:24:9d:d2: 73:41:07:76:dc:33:b3:13:a5:47:5d:bb:cf:21:82: 61:70:8e:58:59:91:59:6d:67:af:1d:e7:2e:b5:af: d7:13:b3:0a:38:e1:e5:57:c1:11:70:82:43:31:12: c5:18:64:2d:8f:6b:77:7f:15:bb:3e:2f:5e:f7:d1: 6e:7f:fc:33:66:c0:2b:ff:e8:a6:de:94:bd:a9:78: 96:d4:13:6d:21:a3:67:80:41:51:cc:1f:c8:9d:d7: 08:f7:8b:b1:8b:c1:45:59:7f:9a:36:5e:1f:f7:86: 10:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E0:D4:5F:C2:E4:FA:D3:EA:24:40:C4:40:E6:38:9F:2B:A4:9A:56:0F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:ef:01:d5:a7:e5:e0:18:29:78:6f:0b:0d:b6:00:34:e2:41: 3b:0d:f7:b7:1f:c3:3b:bf:36:20:c9:0c:5a:a0:b2:f0:20:5f: 02:05:ec:7d:d2:12:0b:02:c3:c2:d9:de:ff:dc:81:c6:31:34: a6:fc:d2:e5:8f:55:07:4d:79:87:fc:43:0b:f8:39:63:0b:56: 1e:38:82:6e:48:3a:59:3a:5d:9a:bc:f9:1f:bd:03:45:ab:13: 21:ba:63:46:79:40:7f:7c:09:f8:40:e2:96:01:7a:95:ef:6b: 2e:78:48:06:61:ef:c8:b9:a3:07:92:3b:bf:38:63:5b:00:64: 4e:3c:2f:d3:63:9b:a6:39:9c:73:3e:46:d5:e3:dd:88:92:cc: 92:80:08:aa:db:5e:87:4a:58:2f:a7:15:22:df:a9:8a:ea:d7: 12:93:b5:5e:44:c2:4e:b8:5a:2d:f3:ec:fa:33:7a:36:27:1d: 95:19:e4:34:62:2b:37:40:10:ff:50:39:3b:c3:15:cc:ab:6a: 4e:7f:c3:23:90:2f:fd:85:ca:72:9e:fd:8a:99:cc:d5:06:08: 70:a7:fc:17:5b:14:37:df:87:48:4e:aa:36:e9:06:75:24:2b: 6f:d8:30:af:17:b4:dc:32:5b:59:d3:7c:b8:90:7d:27:59:12: fd:19:a8:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpfxdFmNdP3eKc4qoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDcwMTEzMDEwNFoXDTI1MDkyOTEzMDEwNFowLzEtMCsGA1UEAxMk ZmQxNDU2MWUtNTMwMi00OTk4LWI5ZWEtMzQ1Nzc4OTNjNTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi7hemgwbK3ov7aJKaPLaIJWbG6LcqpR8nRi2 JeWwJZwHrJX5MZpOnFH4KG2X/Fo5XbhbOFSCbBKymf1T/gzY7KQL+5kiJp4gIQQ9 BVrofo/HsNzL36BHV1/3tScTZFocv4h2mG/cyEW/DMTv/KIP3moSk4eIqLDczacO CYR7hcKPlc1/BVCy+Y6TvFqGRDwn/EUkndJzQQd23DOzE6VHXbvPIYJhcI5YWZFZ bWevHecuta/XE7MKOOHlV8ERcIJDMRLFGGQtj2t3fxW7Pi9e99Fuf/wzZsAr/+im 3pS9qXiW1BNtIaNngEFRzB/IndcI94uxi8FFWX+aNl4f94YQQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFODUX8Lk+tPqJEDEQOY4nyukmlYPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDNkOTc5YjItZWI3MS0z ZjQyLTkyNGEtMzVlZmZmZjIxYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADHvAdWn5eAYKXhvCw22ADTiQTsN97cfwzu/NiDJDFqgsvAgXwIF7H3S EgsCw8LZ3v/cgcYxNKb80uWPVQdNeYf8Qwv4OWMLVh44gm5IOlk6XZq8+R+9A0Wr EyG6Y0Z5QH98CfhA4pYBepXvay54SAZh78i5oweSO784Y1sAZE48L9Njm6Y5nHM+ RtXj3YiSzJKACKrbXodKWC+nFSLfqYrq1xKTtV5Ewk64Wi3z7PozejYnHZUZ5DRi KzdAEP9QOTvDFcyrak5/wyOQL/2FynKe/YqZzNUGCHCn/BdbFDffh0hOqjbpBnUk K2/YMK8XtNwyW1nTfLiQfSdZEv0ZqCM= -----END CERTIFICATE-----Generated at Mon Aug 4 16:14:29 2025 by rpki-client