$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa File: bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa (raw, json) Hash identifier: vgI+QCpa1m/EYYl3ts0Te53FkhAbmtVa2rv/uJm3Li4= Subject key identifier: 17:F5:D5:4B:E3:4A:60:71:58:86:5B:68:58:DD:4E:A8:BA:5E:F3:2C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F4328584AAC299A7AE9EFF2BB7D8FE380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa Signing time: Mon 28 Jul 2025 21:43:37 +0000 ROA not before: Mon 28 Jul 2025 21:43:37 +0000 ROA not after: Sun 26 Oct 2025 21:43:37 +0000 asID: 16591 IP address blocks: 136.57.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 05 Aug 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ac:29:9a:7a:e9:ef:f2:bb:7d:8f:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jul 28 21:43:37 2025 GMT Not After : Oct 26 21:43:37 2025 GMT Subject: CN=99d27d91-be53-4c52-8c3c-42bac51e75a1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:a2:2d:e1:11:5b:4d:dc:c7:59:b2:a1:ac:48: ad:84:a5:b6:7a:49:bc:eb:50:bb:2d:c8:d0:e4:3c: bd:49:4d:8a:bb:08:bb:e2:6f:d5:8b:3c:03:cb:2e: de:83:bc:81:9d:c6:65:d2:8e:13:21:29:14:c4:c1: 03:03:3e:72:ee:4f:37:0a:cf:ee:60:56:5a:fe:fb: 39:ae:4d:3e:e6:2c:bc:1d:ac:1a:8c:33:7a:33:ac: 20:f5:33:f6:18:fa:ba:3f:bf:1b:ef:53:30:38:6d: 4c:4e:f6:8b:e5:3a:7b:7c:d2:42:ea:b7:1a:ce:e8: 00:eb:72:89:6d:1f:5a:8a:bb:f2:b4:7d:66:c3:64: 97:81:bd:53:93:8c:15:dd:7c:c1:80:0a:09:44:13: 6a:4b:55:ae:98:be:1a:2e:01:72:66:0a:ec:d6:8f: 2f:a1:c3:59:86:00:73:e6:5d:33:71:e3:a7:a2:bf: a7:e2:b8:29:95:65:5a:72:7a:e7:d5:0c:43:54:bf: 4f:05:3e:0d:31:2e:99:75:05:1c:09:f4:72:dc:98: 42:06:e4:0a:6c:6d:37:48:9a:4e:b0:d4:05:6e:83: 2a:70:5e:02:93:69:0e:8b:4c:e0:83:37:4c:69:28: f1:2b:9a:81:21:0c:6c:48:87:d1:c2:8e:db:b4:a6: 87:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F5:D5:4B:E3:4A:60:71:58:86:5B:68:58:DD:4E:A8:BA:5E:F3:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc24e59b-eee5-3721-b9e4-2847c23a1de1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:9f:3a:07:5d:02:c3:f8:39:5d:84:b6:fa:3d:83:e5:02:81: 81:9f:e1:b1:39:28:a7:a6:68:f8:3c:7a:5c:be:8a:25:f6:db: 25:83:24:f4:6b:66:94:49:bb:0b:b9:88:3c:27:7e:71:ed:ae: e3:4d:9d:e7:db:ea:dd:0f:25:fd:cf:05:3a:e3:d5:d7:d4:bf: 27:48:ee:a0:2a:ff:e2:64:04:ad:fd:8f:1d:c2:1f:0f:68:c1: bf:0c:f9:3c:2d:90:fe:18:87:6f:0e:cb:ad:1e:e2:a2:87:3e: e9:4e:b1:07:d8:60:44:be:1c:34:63:4d:e2:c4:c9:42:a9:59: e9:9c:42:05:70:54:f0:00:b4:11:c9:9d:d5:5d:e7:22:5a:42: c8:76:2e:e6:11:a1:2e:23:7e:e6:6f:e2:bb:a1:77:0f:47:f0: be:fb:b9:5d:2d:3c:07:df:b5:02:18:d5:17:c2:70:34:0c:20: 58:64:01:f1:86:90:e2:c9:bc:98:82:16:99:ed:e6:ed:44:12: 09:78:69:7a:26:7e:32:fc:fb:ed:08:e7:09:a3:fb:03:d2:41: 17:d9:56:25:21:b3:bd:04:b3:25:cc:cc:c1:cc:dd:08:3d:85: 6c:3f:21:86:c0:86:d9:4a:18:5b:42:f0:20:22:f5:1a:31:0d: ae:d3:12:bf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsKZp66e/yu32P44AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDcyODIxNDMzN1oXDTI1MTAyNjIxNDMzN1owLzEtMCsGA1UEAxMk OTlkMjdkOTEtYmU1My00YzUyLThjM2MtNDJiYWM1MWU3NWExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5aIt4RFbTdzHWbKhrEithKW2ekm861C7LcjQ 5Dy9SU2Kuwi74m/VizwDyy7eg7yBncZl0o4TISkUxMEDAz5y7k83Cs/uYFZa/vs5 rk0+5iy8HawajDN6M6wg9TP2GPq6P78b71MwOG1MTvaL5Tp7fNJC6rcazugA63KJ bR9airvytH1mw2SXgb1Tk4wV3XzBgAoJRBNqS1WumL4aLgFyZgrs1o8vocNZhgBz 5l0zceOnor+n4rgplWVacnrn1QxDVL9PBT4NMS6ZdQUcCfRy3JhCBuQKbG03SJpO sNQFboMqcF4Ck2kOi0zggzdMaSjxK5qBIQxsSIfRwo7btKaHjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf11UvjSmBxWIZbaFjdTqi6XvMsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMyNGU1OWItZWVlNS0z NzIxLWI5ZTQtMjg0N2MyM2ExZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDngMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFifOgddAsP4OV2Etvo9g+UCgYGf4bE5KKemaPg8ely+iiX22yWDJPRr ZpRJuwu5iDwnfnHtruNNnefb6t0PJf3PBTrj1dfUvydI7qAq/+JkBK39jx3CHw9o wb8M+TwtkP4Yh28Oy60e4qKHPulOsQfYYES+HDRjTeLEyUKpWemcQgVwVPAAtBHJ ndVd5yJaQsh2LuYRoS4jfuZv4ruhdw9H8L77uV0tPAfftQIY1RfCcDQMIFhkAfGG kOLJvJiCFpnt5u1EEgl4aXomfjL8++0I5wmj+wPSQRfZViUhs70EsyXMzMHM3Qg9 hWw/IYbAhtlKGFtC8CAi9RoxDa7TEr8= -----END CERTIFICATE-----Generated at Mon Aug 4 14:02:44 2025 by rpki-client