$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa File: 1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa (raw, json) Hash identifier: VuIOpPaxIT/EJL1tpZGjU44g3i6lcBSljbVcmOqeuKI= Subject key identifier: 00:7C:0B:66:A9:C8:50:60:36:76:AE:04:AB:1F:EA:9F:7A:66:12:8A Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24B6F5A9F836CD1625E220 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b6:f5:a9:f8:36:cd:16:25:e2:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=6de93313-4e95-445f-bcdf-fc51d4f0e9d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:12:bc:75:5f:02:36:58:58:8b:54:69:63:69: 10:50:f6:4a:42:96:d2:01:e9:4b:cf:92:db:9a:07: db:7a:62:4b:10:d6:9b:b0:0f:cc:41:31:9f:7d:67: 39:2f:8b:c3:08:44:21:ae:b2:e2:f7:38:42:6c:de: de:2d:cb:3c:b6:f0:e3:84:bd:1b:c9:60:41:fb:e6: a5:c4:98:bd:0e:0c:7b:cf:b3:ef:42:e6:8d:f7:0c: 89:c2:94:a7:5d:fe:5b:88:7a:25:86:c5:6e:c3:32: 6e:08:37:be:3e:7b:2a:4d:f8:ec:0a:1f:9b:f2:ef: 2d:20:8d:70:ea:46:f2:8f:b7:66:57:1c:8d:f8:b1: 5e:b9:b9:54:5b:5c:9b:5b:db:6b:a2:d3:4e:7a:fa: 11:fa:eb:03:98:5c:a4:b1:3c:b9:75:9f:aa:13:21: 80:1a:08:3f:72:1d:54:26:3a:83:6b:a2:09:48:ac: 5e:49:f5:c6:04:a8:0a:33:d4:38:42:fb:4f:4c:b1: 2e:29:d3:df:fb:a2:90:59:f2:94:43:1d:81:d8:bc: 09:49:dc:04:af:27:74:24:0f:3d:14:9f:43:f2:a1: 08:a4:1d:06:1d:1c:b0:3d:4e:8c:de:d1:53:6e:f0: fb:74:ac:ad:8f:36:b1:e3:a0:1b:64:cf:7e:88:58: 4d:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:7C:0B:66:A9:C8:50:60:36:76:AE:04:AB:1F:EA:9F:7A:66:12:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/1656d45b-e397-38c9-bb5e-65ed9ec817d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 03:eb:5c:76:a5:b5:04:4b:b7:4e:38:0c:c5:76:80:8a:f9:db: 91:eb:83:1e:b6:3f:f4:38:a9:6d:de:ae:b1:f1:bc:19:13:ee: aa:87:2f:db:ca:0a:49:9c:1f:e6:df:4b:4c:99:86:2d:46:2e: 01:89:85:9e:ea:dd:84:80:ac:d2:c3:29:c7:0f:b4:74:0b:09: 6b:3b:51:4f:32:c3:1c:2b:ec:c1:fe:aa:28:17:ce:bc:e1:79: db:ac:3a:21:7b:3a:23:2f:9a:c9:2c:bc:87:6d:4d:ee:3b:a3: f7:84:64:76:9c:28:e3:41:8a:8e:e7:53:1b:d0:51:dd:da:f4: 65:ee:38:31:2a:e0:54:f3:b6:a9:80:4c:1f:98:2f:b3:eb:c1: 09:ef:79:6a:4c:56:ba:28:6e:20:43:83:ca:76:a7:9a:ff:9b: 93:92:f2:b5:12:76:36:6a:d0:12:4e:85:a9:0a:54:7d:10:77: 73:a0:32:72:d1:37:4a:bb:d1:28:f8:e3:e2:c7:83:c0:db:5c: a3:b0:b2:33:7a:d6:eb:3b:75:1f:ab:93:cd:8b:59:dd:09:38: 9a:0c:51:6a:35:c9:75:55:d9:49:d7:87:a0:bd:f0:e1:01:dc: 8f:bc:d3:74:17:e9:6a:e5:32:9e:63:4f:82:24:25:64:47:ca: 59:ce:c3:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLb1qfg2zRYl4iAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NmRlOTMzMTMtNGU5NS00NDVmLWJjZGYtZmM1MWQ0ZjBlOWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1BK8dV8CNlhYi1RpY2kQUPZKQpbSAelLz5Lb mgfbemJLENabsA/MQTGffWc5L4vDCEQhrrLi9zhCbN7eLcs8tvDjhL0byWBB++al xJi9Dgx7z7PvQuaN9wyJwpSnXf5biHolhsVuwzJuCDe+PnsqTfjsCh+b8u8tII1w 6kbyj7dmVxyN+LFeublUW1ybW9trotNOevoR+usDmFyksTy5dZ+qEyGAGgg/ch1U JjqDa6IJSKxeSfXGBKgKM9Q4QvtPTLEuKdPf+6KQWfKUQx2B2LwJSdwEryd0JA89 FJ9D8qEIpB0GHRywPU6M3tFTbvD7dKytjzax46AbZM9+iFhNOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAB8C2apyFBgNnauBKsf6p96ZhKKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMTY1NmQ0NWItZTM5Ny0z OGM5LWJiNWUtNjVlZDllYzgxN2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAPrXHaltQRLt044DMV2gIr525Hrgx62P/Q4qW3errHxvBkT7qqHL9vK CkmcH+bfS0yZhi1GLgGJhZ7q3YSArNLDKccPtHQLCWs7UU8ywxwr7MH+qigXzrzh edusOiF7OiMvmsksvIdtTe47o/eEZHacKONBio7nUxvQUd3a9GXuODEq4FTztqmA TB+YL7PrwQnveWpMVroobiBDg8p2p5r/m5OS8rUSdjZq0BJOhakKVH0Qd3OgMnLR N0q70Sj44+LHg8DbXKOwsjN61us7dR+rk82LWd0JOJoMUWo1yXVV2UnXh6C98OEB 3I+803QX6WrlMp5jT4IkJWRHylnOw8s= -----END CERTIFICATE-----Generated at Mon May 5 05:49:25 2025 by rpki-client