$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa File: da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa (raw, json) Hash identifier: 4d1aQKf/r+schVaMWuhzm4NpsymBejLXUagXeKVU98k= Subject key identifier: A8:18:D3:C6:E1:A3:B9:D1:E3:87:D4:F9:23:16:09:B3:3A:12:A5:68 Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422 Certificate serial: 010D0C9F43285849AA4F6817C2634918DE132640 Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa Signing time: Sun 27 Apr 2025 13:01:01 +0000 ROA not before: Sun 27 Apr 2025 13:01:01 +0000 ROA not after: Sat 26 Jul 2025 13:01:01 +0000 asID: 14241 IP address blocks: 136.228.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:aa:4f:68:17:c2:63:49:18:de:13:26:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422 Validity Not Before: Apr 27 13:01:01 2025 GMT Not After : Jul 26 13:01:01 2025 GMT Subject: CN=8f13d6fd-941a-43f9-ae15-6d5ad5482093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:0d:8c:bf:95:69:3a:19:e8:7b:b0:9b:0e:dd: ef:b2:0c:0c:c9:51:ef:45:3a:22:21:29:b4:05:32: 7a:2d:64:4b:7b:b6:4e:e9:ea:55:33:86:9a:42:d6: b6:b5:f6:ce:69:87:1a:86:83:c6:06:58:71:c3:b8: c9:59:b1:a7:3a:d4:e9:56:2b:58:6b:db:59:8f:78: 4f:48:dc:16:39:6a:c2:05:d6:e1:d7:ba:dd:15:31: ac:3e:d9:bd:ad:93:2a:e8:ad:e9:d3:b0:f5:94:57: 29:ad:02:99:42:65:77:13:99:51:38:b3:b8:74:7f: cf:fa:1a:5b:a4:02:cd:3b:f8:5a:4f:10:28:6a:66: 3f:64:fe:ca:c9:28:92:8c:1f:dc:a8:fa:1c:38:51: da:1d:46:56:06:45:82:c5:b6:d6:08:97:d2:35:96: 85:14:2a:8c:69:29:c4:6a:44:e9:4e:54:1b:fe:bc: 8f:4e:b7:46:c8:42:f6:63:b0:cf:37:14:03:ea:87: ce:6a:73:da:4f:02:ff:71:f4:f2:9c:8d:54:99:00: cc:30:75:96:b6:90:26:ce:9c:a7:0f:41:e8:50:9a: 7a:34:82:f9:82:2d:1e:8f:ae:a5:f1:08:13:32:c7: bc:60:64:0c:de:68:09:f9:16:be:1a:8b:cc:86:91: 52:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:18:D3:C6:E1:A3:B9:D1:E3:87:D4:F9:23:16:09:B3:3A:12:A5:68 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/da7f4729-e05f-3e1a-8770-0da9b2748dd1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl X509v3 Authority Key Identifier: keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer sbgp-ipAddrBlock: critical IPv4: 136.228.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:1f:bb:b7:5d:be:2f:5f:10:bd:87:10:e8:58:f5:70:92:18: 54:09:13:b8:3d:a3:a9:f2:34:cf:41:a7:95:c0:8e:f5:da:4b: 9f:a8:ba:cc:6d:9a:71:68:e0:e9:4c:94:97:de:a6:1c:d5:e6: 68:bb:3c:6b:06:d1:74:90:43:98:3a:2f:57:2d:76:5c:ec:e2: 0a:94:0c:51:de:61:8a:f5:00:c6:55:36:eb:54:73:f6:19:4e: be:bf:90:1d:5d:cb:38:b8:4a:b6:60:67:0b:a5:cf:4e:53:a7: 1b:f6:5a:b3:da:74:53:c3:a6:f9:e1:93:fb:b4:40:3b:df:9c: 7e:2e:53:f6:20:e5:9d:37:38:ec:fc:a6:82:ed:ce:09:62:01: 02:be:c3:bc:47:8b:33:65:c2:14:5c:16:ee:1c:15:36:fb:0d: d4:36:a1:90:de:b9:75:f7:ce:3d:80:d8:d6:95:80:17:a7:ef: eb:52:cc:2a:89:aa:e9:b3:4e:7d:b1:b2:d2:89:37:54:0e:aa: 70:9a:e6:ad:24:f0:78:ad:1c:9e:95:0f:1f:80:67:3c:ae:a2: 89:19:ab:18:f0:71:ca:da:91:1e:ef:c0:bf:57:2d:58:a3:27: cb:96:3c:77:8e:88:29:87:c7:91:47:be:b8:b4:30:59:05:33: df:de:37:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmqT2gXwmNJGN4TJkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl NDIyMB4XDTI1MDQyNzEzMDEwMVoXDTI1MDcyNjEzMDEwMVowLzEtMCsGA1UEAxMk OGYxM2Q2ZmQtOTQxYS00M2Y5LWFlMTUtNmQ1YWQ1NDgyMDkzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQ2Mv5VpOhnoe7CbDt3vsgwMyVHvRToiISm0 BTJ6LWRLe7ZO6epVM4aaQta2tfbOaYcahoPGBlhxw7jJWbGnOtTpVitYa9tZj3hP SNwWOWrCBdbh17rdFTGsPtm9rZMq6K3p07D1lFcprQKZQmV3E5lROLO4dH/P+hpb pALNO/haTxAoamY/ZP7KySiSjB/cqPocOFHaHUZWBkWCxbbWCJfSNZaFFCqMaSnE akTpTlQb/ryPTrdGyEL2Y7DPNxQD6ofOanPaTwL/cfTynI1UmQDMMHWWtpAmzpyn D0HoUJp6NIL5gi0ej66l8QgTMse8YGQM3mgJ+Ra+GovMhpFSMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKgY08bho7nR44fU+SMWCbM6EqVoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvZGE3ZjQ3MjktZTA1Zi0z ZTFhLTg3NzAtMGRhOWIyNzQ4ZGQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOQhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIfu7ddvi9fEL2HEOhY9XCSGFQJE7g9o6nyNM9Bp5XAjvXaS5+ousxt mnFo4OlMlJfephzV5mi7PGsG0XSQQ5g6L1ctdlzs4gqUDFHeYYr1AMZVNutUc/YZ Tr6/kB1dyzi4SrZgZwulz05Tpxv2WrPadFPDpvnhk/u0QDvfnH4uU/Yg5Z03OOz8 poLtzgliAQK+w7xHizNlwhRcFu4cFTb7DdQ2oZDeuXX3zj2A2NaVgBen7+tSzCqJ qumzTn2xstKJN1QOqnCa5q0k8HitHJ6VDx+AZzyuookZqxjwccrakR7vwL9XLVij J8uWPHeOiCmHx5FHvri0MFkFM9/eNzY= -----END CERTIFICATE-----Generated at Tue May 13 08:36:31 2025 by rpki-client