$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa File: 980080a2-72d2-314d-82d9-d9da50db7505.roa (raw, json) Hash identifier: FQqkigG8i8I2b5IJ4vIh7BsypSaaPpPwJTGX7qxdnmE= Subject key identifier: 73:F4:8A:40:D7:64:0F:10:9A:F7:0D:79:A5:D1:B9:03:BD:D3:64:EA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584AA42B710FCFF7386E15994300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa Signing time: Sat 26 Jul 2025 01:00:49 +0000 ROA not before: Sat 26 Jul 2025 01:00:49 +0000 ROA not after: Fri 24 Oct 2025 01:00:49 +0000 asID: 16591 IP address blocks: 136.58.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:a4:2b:71:0f:cf:f7:38:6e:15:99:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 26 01:00:49 2025 GMT Not After : Oct 24 01:00:49 2025 GMT Subject: CN=103cd2c0-6cb9-415a-8c5b-79c9a7e74e3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:6a:0f:f1:f3:6e:7c:dc:dc:27:47:09:1d:fe: 54:8f:ae:36:ee:72:6c:7b:12:38:83:0e:65:7f:dc: f9:76:36:2e:63:18:6e:28:73:b4:fa:77:b4:37:c5: 43:44:55:a6:9e:94:fe:0e:11:c2:b3:73:30:dc:03: e5:8a:3a:ae:63:7e:43:06:64:e1:61:46:26:ea:53: e3:df:ca:f7:69:f2:66:e8:c2:3f:f7:b9:d4:61:29: 02:14:7b:7d:b6:57:20:37:e3:34:08:23:dc:07:81: db:17:19:d4:54:79:b8:fe:be:cf:94:4f:a6:67:25: 4e:c2:8f:0b:7b:28:e9:66:98:d2:c2:9f:3c:67:ef: d5:68:e9:de:b2:d2:01:e6:e2:11:19:84:f7:20:aa: 28:76:d5:2a:35:d3:ba:5f:1b:78:c4:d3:c7:7c:f4: 99:f9:e8:3d:00:ac:ec:cb:9e:43:22:83:10:c8:3d: 6e:ad:ad:df:d1:41:bf:fb:31:69:e6:18:1b:24:95: 50:da:ac:2d:19:d9:f6:8d:f0:68:a0:0f:39:c6:f4: e8:29:75:21:77:6c:ef:4d:c9:cb:f3:47:2c:3a:f1: d0:76:cb:c9:7f:7e:dd:56:93:34:dd:7a:e5:5d:63: 13:a5:83:6f:2a:dc:e4:07:1a:7a:d6:db:c6:d4:af: e7:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:F4:8A:40:D7:64:0F:10:9A:F7:0D:79:A5:D1:B9:03:BD:D3:64:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/980080a2-72d2-314d-82d9-d9da50db7505.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.58.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:58:89:f4:fe:42:1d:03:e9:93:63:a6:26:94:e8:84:5e:45: 55:f9:cf:65:c2:81:9c:fc:a4:e8:13:73:46:64:38:16:9b:42: fc:40:36:d5:e4:3d:fb:ae:66:8e:49:35:be:9e:c9:88:f7:19: 40:4e:8a:65:1d:24:bd:b9:c3:fe:25:48:80:b7:97:92:a7:a6: b5:33:ce:83:43:a6:cc:fa:6f:29:21:8c:9d:a9:1b:b1:7d:b0: 0c:94:a1:fd:00:9d:a3:99:ec:a8:ff:27:41:60:f4:73:6f:ae: 17:36:33:8d:3b:2a:67:e6:a9:28:65:89:c5:4e:c3:ac:8f:5a: 55:20:0f:39:1b:bb:be:48:3c:d4:ed:7b:10:4d:50:29:d6:81: d9:88:41:79:d3:54:1d:f2:22:1e:46:4d:49:8f:6a:49:72:9b: d1:13:a7:80:5e:04:d9:11:87:2d:a8:47:a3:50:b8:ee:ea:fe: 80:7e:f3:9b:5a:d4:5f:93:db:e9:bf:7c:47:7d:2c:6b:9b:50: d9:54:08:18:d3:77:ba:77:e3:c5:8a:06:99:e3:0e:cb:f8:e8: 3e:d9:cb:74:df:17:7e:b3:95:25:ed:1c:02:63:b3:73:a3:4d: 1b:ee:2f:ab:31:d9:a6:5e:10:5a:92:79:7e:c8:cc:ef:f3:32: 45:f5:95:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3EPz/c4bhWZQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk MTAzY2QyYzAtNmNiOS00MTVhLThjNWItNzljOWE3ZTc0ZTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1moP8fNufNzcJ0cJHf5Uj6427nJsexI4gw5l f9z5djYuYxhuKHO0+ne0N8VDRFWmnpT+DhHCs3Mw3APlijquY35DBmThYUYm6lPj 38r3afJm6MI/97nUYSkCFHt9tlcgN+M0CCPcB4HbFxnUVHm4/r7PlE+mZyVOwo8L eyjpZpjSwp88Z+/VaOnestIB5uIRGYT3IKoodtUqNdO6Xxt4xNPHfPSZ+eg9AKzs y55DIoMQyD1ura3f0UG/+zFp5hgbJJVQ2qwtGdn2jfBooA85xvToKXUhd2zvTcnL 80csOvHQdsvJf37dVpM03XrlXWMTpYNvKtzkBxp61tvG1K/ngwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHP0ikDXZA8QmvcNeaXRuQO902TqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTgwMDgwYTItNzJkMi0z MTRkLTgyZDktZDlkYTUwZGI3NTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDqAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJYifT+Qh0D6ZNjpiaU6IReRVX5z2XCgZz8pOgTc0ZkOBabQvxANtXk PfuuZo5JNb6eyYj3GUBOimUdJL25w/4lSIC3l5KnprUzzoNDpsz6bykhjJ2pG7F9 sAyUof0AnaOZ7Kj/J0Fg9HNvrhc2M407KmfmqShlicVOw6yPWlUgDzkbu75IPNTt exBNUCnWgdmIQXnTVB3yIh5GTUmPaklym9ETp4BeBNkRhy2oR6NQuO7q/oB+85ta 1F+T2+m/fEd9LGubUNlUCBjTd7p348WKBpnjDsv46D7Zy3TfF36zlSXtHAJjs3Oj TRvuL6sx2aZeEFqSeX7IzO/zMkX1lQI= -----END CERTIFICATE-----Generated at Mon Aug 4 15:30:40 2025 by rpki-client