$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa File: 7a38d14f-c093-3a7f-a163-468173dec5cf.roa (raw, json) Hash identifier: FvTdzZb2+YtPZWOrL70ESVKTbm/8fnF9AD0e+IHQjm4= Subject key identifier: 0F:42:CA:1A:6B:E4:B9:88:DB:A4:5F:D1:F8:8C:A0:F9:F3:C2:14:C6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D8D88E8F8A5DAD125C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.35.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d8:d8:8e:8f:8a:5d:ad:12:5c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=5a8bd47e-b84c-4c19-a8e0-dee05768906c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:24:7d:e6:37:f9:d6:d5:7d:96:d2:8b:b9:5f: c8:81:37:6f:ee:0e:f6:3c:0d:d2:4d:12:e4:17:78: 6d:d0:74:80:70:8f:c2:e7:e6:c7:4a:3a:05:31:12: 3d:a9:7c:3d:ce:20:d9:bb:9d:0d:7c:a3:de:0b:5e: d7:a8:5a:1f:a1:ef:90:fb:ee:15:19:a3:98:ab:8d: 77:57:41:70:7e:15:3f:2e:5b:10:c4:e7:39:90:fe: 65:66:8f:06:87:96:2a:ca:83:11:45:33:d3:7d:47: 53:b3:26:20:b9:a1:54:16:a7:b6:b3:05:0b:48:7f: 6a:6b:c8:3a:96:a8:10:9a:b5:78:b8:2f:76:43:53: 62:33:d5:c0:97:1d:8b:bf:a0:15:43:cd:78:24:84: 87:1a:9a:16:db:42:d6:bc:26:3c:89:d7:c1:c9:23: b8:f1:78:f8:40:42:33:55:dc:4a:93:c4:1c:ca:d8: 60:2e:c4:a3:c9:4d:54:65:52:a7:4e:fe:1c:0c:55: 98:36:bc:02:5b:00:6a:3e:70:6e:f2:b1:ce:54:e8: c4:0f:26:dc:83:81:86:e0:66:6f:3f:a1:4a:d5:17: 43:c2:f6:fb:f7:28:25:4a:cb:4c:74:b8:f6:f5:e9: 6c:ef:28:41:a6:e9:99:85:19:ba:16:ce:f2:18:a6: 83:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:42:CA:1A:6B:E4:B9:88:DB:A4:5F:D1:F8:8C:A0:F9:F3:C2:14:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7a38d14f-c093-3a7f-a163-468173dec5cf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ad:68:f1:80:c2:0e:4e:8e:f0:ee:e6:c0:17:23:b9:3e:1c: 30:74:a4:fd:5a:d9:1a:91:4f:d3:8d:12:05:68:07:15:1e:90: bc:12:42:32:10:01:97:89:cf:d5:b5:e8:0e:29:cb:cc:a6:80: 95:c1:67:56:42:94:cc:4e:aa:9f:a5:87:79:29:46:dd:f8:a9: b3:d2:78:7b:eb:eb:00:f2:f8:6e:ed:94:75:b3:25:44:05:da: ba:11:43:81:eb:30:0b:cd:89:55:b5:c2:22:fc:03:e9:19:52: 6d:da:10:2b:6c:a4:a4:22:64:d2:ff:3f:c4:02:6e:82:dc:77: 44:00:a8:62:da:6f:f4:c6:42:36:08:9b:55:43:b8:14:6e:83: 4f:3a:a8:9b:8b:42:7e:b4:c3:59:61:ce:97:4c:07:7b:ae:20: d4:4d:3b:98:7a:63:de:6c:f2:47:5e:2c:df:bc:03:5f:d5:c8: 28:86:a7:79:00:df:44:39:39:6e:cf:13:05:0f:18:4c:6b:28: a8:66:2f:7a:60:7e:ef:5c:2b:70:c4:51:d7:2d:9d:03:6a:4b: ed:6d:c2:65:25:a6:9f:ad:bb:00:ea:27:02:5b:ee:21:d5:3f: b3:8f:37:91:03:96:41:1c:35:e2:94:1a:11:d9:a8:24:cb:5a: 06:aa:2b:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdjYjo+KXa0SXAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NWE4YmQ0N2UtYjg0Yy00YzE5LWE4ZTAtZGVlMDU3Njg5MDZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqyR95jf51tV9ltKLuV/IgTdv7g72PA3STRLk F3ht0HSAcI/C5+bHSjoFMRI9qXw9ziDZu50NfKPeC17XqFofoe+Q++4VGaOYq413 V0FwfhU/LlsQxOc5kP5lZo8Gh5YqyoMRRTPTfUdTsyYguaFUFqe2swULSH9qa8g6 lqgQmrV4uC92Q1NiM9XAlx2Lv6AVQ814JISHGpoW20LWvCY8idfBySO48Xj4QEIz VdxKk8QcythgLsSjyU1UZVKnTv4cDFWYNrwCWwBqPnBu8rHOVOjEDybcg4GG4GZv P6FK1RdDwvb79yglSstMdLj29els7yhBpumZhRm6Fs7yGKaDSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA9Cyhpr5LmI26Rf0fiMoPnzwhTGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2EzOGQxNGYtYzA5My0z YTdmLWExNjMtNDY4MTczZGVjNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEStaPGAwg5OjvDu5sAXI7k+HDB0pP1a2RqRT9ONEgVoBxUekLwSQjIQ AZeJz9W16A4py8ymgJXBZ1ZClMxOqp+lh3kpRt34qbPSeHvr6wDy+G7tlHWzJUQF 2roRQ4HrMAvNiVW1wiL8A+kZUm3aECtspKQiZNL/P8QCboLcd0QAqGLab/TGQjYI m1VDuBRug086qJuLQn60w1lhzpdMB3uuINRNO5h6Y95s8kdeLN+8A1/VyCiGp3kA 30Q5OW7PEwUPGExrKKhmL3pgfu9cK3DEUdctnQNqS+1twmUlpp+tuwDqJwJb7iHV P7OPN5EDlkEcNeKUGhHZqCTLWgaqK+k= -----END CERTIFICATE-----Generated at Mon Jun 16 20:53:49 2025 by rpki-client