$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa File: 36550130-e332-3d46-995b-52a6afa4ea05.roa (raw, json) Hash identifier: 7djHOa6dV/LwcBsUdCmOOzmPfsjirYQpxgzJZbKfFZo= Subject key identifier: C3:C0:89:98:B1:A1:53:E7:4D:17:D1:A1:AE:66:DD:8E:E5:63:B9:81 Certificate issuer: /CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Certificate serial: 010D0C9F4328584A9900C5093C3F2BE9F925F940 Authority key identifier: 0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa Signing time: Tue 22 Jul 2025 01:00:50 +0000 ROA not before: Tue 22 Jul 2025 01:00:50 +0000 ROA not after: Mon 20 Oct 2025 01:00:50 +0000 asID: 8014 IP address blocks: 204.236.76.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:99:00:c5:09:3c:3f:2b:e9:f9:25:f9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e3bd303b-738d-4c77-9c55-320fcfa93f75 Validity Not Before: Jul 22 01:00:50 2025 GMT Not After : Oct 20 01:00:50 2025 GMT Subject: CN=55ff2c92-fb4e-444a-b3a0-38701637a421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:42:9e:29:d6:d3:8a:30:d4:f2:e8:48:b1:cb: 54:54:72:0f:b4:c2:1f:46:64:b0:f0:5e:48:e6:e7: fc:84:cb:03:35:9b:bc:f7:85:fd:d9:25:3f:ca:c3: 4d:7d:5e:cc:d1:24:0f:cc:5d:e4:ab:68:75:3b:90: 36:cd:5c:30:84:01:6e:74:36:19:a9:7e:b1:25:22: 22:8b:86:b1:df:0f:f7:e5:4f:b0:64:bf:41:97:b3: 8d:37:0a:b5:78:13:67:73:dd:a4:b0:31:21:04:29: 1e:01:59:66:a1:f6:43:15:a8:22:d0:55:93:29:63: f9:f4:c2:d5:ac:6f:45:c3:c2:75:fc:c1:4c:53:86: 16:da:45:78:ed:6b:7e:64:8c:db:ed:d0:f8:6b:cc: 3f:e1:90:74:ff:88:76:66:07:0e:2b:0e:3c:e1:d6: 3c:e3:ad:5d:05:ec:d5:ba:b2:d5:2f:39:9b:41:2b: 58:39:b0:69:7d:ea:38:35:ef:87:e5:9f:67:d5:02: 73:0d:08:3b:29:03:9b:81:98:be:0c:75:dc:22:52: 76:8a:79:70:e6:ba:c7:da:50:7a:bb:c1:93:d9:95: 5e:98:5b:b0:78:67:25:c2:33:98:d3:9f:94:1c:61: 54:ad:36:dd:85:c1:e9:2a:fd:6e:be:e0:0b:b1:7f: ed:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:C0:89:98:B1:A1:53:E7:4D:17:D1:A1:AE:66:DD:8E:E5:63:B9:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/36550130-e332-3d46-995b-52a6afa4ea05.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75/e3bd303b-738d-4c77-9c55-320fcfa93f75.crl X509v3 Authority Key Identifier: keyid:0E:F7:13:06:91:D6:BD:1C:AD:48:C7:C9:2D:89:1D:96:DC:53:4D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e3bd303b-738d-4c77-9c55-320fcfa93f75.cer sbgp-ipAddrBlock: critical IPv4: 204.236.76.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption bb:30:61:90:f8:a6:18:7a:ea:31:14:1b:25:a1:9e:a2:ff:20: 85:b6:1c:db:cb:d0:d4:6a:33:d9:85:34:9e:ca:b4:9f:c9:8f: e9:f4:91:aa:22:56:5b:64:ef:6e:d6:9a:61:39:35:06:48:7d: d3:32:cd:ff:b2:11:ba:2b:f8:30:0c:9b:2f:ce:7a:61:fe:be: 8c:6b:44:2b:ee:9a:59:5c:a7:6f:ef:01:d3:b3:b3:a8:d8:df: 17:e3:13:c1:be:3c:c2:84:53:b3:2d:55:b1:77:05:97:1c:8f: cd:1f:d2:3d:d7:0e:50:2e:e3:be:0f:ad:c4:ff:55:5b:ce:01: a5:38:a1:97:65:86:65:53:b4:e1:13:0f:74:ef:30:1d:62:18: 91:5f:bf:45:68:7a:b2:5a:1c:0f:86:91:91:db:cf:4f:b1:bd: 0b:ec:68:e0:d1:85:99:ae:6f:a6:32:d3:70:ff:56:07:28:4f: 78:1c:47:a7:ba:5b:50:32:d1:b9:e1:57:07:54:b6:e2:52:60: 5a:01:5e:fd:f5:83:21:44:c0:8b:f5:db:77:bc:cd:66:c3:d9: 91:36:8e:a3:ab:90:ed:ef:16:c7:ec:59:35:12:dd:a6:0b:18: c7:ba:81:f9:28:32:d7:90:55:21:7b:26:63:0a:55:a1:15:be: 3c:98:c5:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMUJPD8r6fkl+UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTNiZDMwM2ItNzM4ZC00Yzc3LTljNTUtMzIwZmNmYTkz Zjc1MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk NTVmZjJjOTItZmI0ZS00NDRhLWIzYTAtMzg3MDE2MzdhNDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlEKeKdbTijDU8uhIsctUVHIPtMIfRmSw8F5I 5uf8hMsDNZu894X92SU/ysNNfV7M0SQPzF3kq2h1O5A2zVwwhAFudDYZqX6xJSIi i4ax3w/35U+wZL9Bl7ONNwq1eBNnc92ksDEhBCkeAVlmofZDFagi0FWTKWP59MLV rG9Fw8J1/MFMU4YW2kV47Wt+ZIzb7dD4a8w/4ZB0/4h2ZgcOKw484dY8461dBezV urLVLzmbQStYObBpfeo4Ne+H5Z9n1QJzDQg7KQObgZi+DHXcIlJ2inlw5rrH2lB6 u8GT2ZVemFuweGclwjOY05+UHGFUrTbdhcHpKv1uvuALsX/tVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMPAiZixoVPnTRfRoa5m3Y7lY7mBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lM2Jk MzAzYi03MzhkLTRjNzctOWM1NS0zMjBmY2ZhOTNmNzUvMzY1NTAxMzAtZTMzMi0z ZDQ2LTk5NWItNTJhNmFmYTRlYTA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTNiZDMwM2ItNzM4ZC00Yzc3LTlj NTUtMzIwZmNmYTkzZjc1L2UzYmQzMDNiLTczOGQtNGM3Ny05YzU1LTMyMGZjZmE5 M2Y3NS5jcmwwHwYDVR0jBBgwFoAUDvcTBpHWvRytSMfJLYkdltxTTVowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9lM2JkMzAzYi03MzhkLTRjNzctOWM1NS0zMjBm Y2ZhOTNmNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzOxMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALswYZD4phh66jEUGyWhnqL/IIW2HNvL0NRqM9mFNJ7KtJ/Jj+n0kaoi Vltk727WmmE5NQZIfdMyzf+yEbor+DAMmy/OemH+voxrRCvumllcp2/vAdOzs6jY 3xfjE8G+PMKEU7MtVbF3BZccj80f0j3XDlAu474PrcT/VVvOAaU4oZdlhmVTtOET D3TvMB1iGJFfv0VoerJaHA+GkZHbz0+xvQvsaODRhZmub6Yy03D/VgcoT3gcR6e6 W1Ay0bnhVwdUtuJSYFoBXv31gyFEwIv123e8zWbD2ZE2jqOrkO3vFsfsWTUS3aYL GMe6gfkoMteQVSF7JmMKVaEVvjyYxQA= -----END CERTIFICATE-----Generated at Wed Aug 6 00:33:46 2025 by rpki-client