$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bbb64d7f-bbf6-386d-9a57-cc84af7e796c.roa File: bbb64d7f-bbf6-386d-9a57-cc84af7e796c.roa (raw, json) Hash identifier: vbKSzVEyhu2SDb8UsY1kFr7T27jwmsryHLO96V+Sxo4= Subject key identifier: 21:F0:10:D2:9B:AE:A0:37:B6:6C:84:CC:66:B5:37:8C:F1:E4:D7:10 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24DB0265C63E23ABFD9CE0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bbb64d7f-bbf6-386d-9a57-cc84af7e796c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:db:02:65:c6:3e:23:ab:fd:9c:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=01be259a-4376-45a0-9ca7-e86d048744a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:0b:01:de:05:74:c5:12:74:4c:c9:95:99:26: 71:57:a9:2d:65:7b:b9:ac:a3:09:b4:43:11:0c:88: 6f:d1:9b:c4:c9:f4:74:e6:e4:de:35:2b:13:4e:e9: a6:68:cd:be:ba:ac:d4:72:fc:5a:35:2f:86:b1:7a: ed:08:f3:54:a0:8a:03:91:01:84:eb:67:30:a4:bd: 82:1f:63:1b:aa:92:d9:22:aa:62:87:d7:dc:4d:ff: 41:c1:d5:55:f4:1d:50:05:b2:e6:c0:e6:ef:14:32: 2a:2b:88:da:9d:49:fe:1a:df:2b:d2:93:f3:31:06: 39:95:4d:a1:bd:0b:29:1b:d3:f0:9e:59:0c:03:b1: bd:30:06:af:22:e1:4b:54:ad:4b:f1:7b:89:50:1f: 4f:0c:36:b3:fc:26:b0:e5:49:4a:78:03:b6:89:94: b2:55:64:74:3c:70:79:b6:91:a7:81:b0:fa:d8:e4: 3f:a5:41:68:85:ff:f4:35:71:77:11:ba:2d:c8:d2: f5:27:e4:dc:10:f7:1b:1f:ad:d2:0a:aa:4f:4a:fe: 4f:30:04:a3:cd:d6:30:6d:5a:01:3e:4c:97:0b:cb: 60:7a:f3:b1:d8:74:9d:65:2f:bd:a2:fc:3c:02:86: a0:af:c6:bd:32:4b:79:67:29:89:bf:88:7d:30:68: b1:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:F0:10:D2:9B:AE:A0:37:B6:6C:84:CC:66:B5:37:8C:F1:E4:D7:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/bbb64d7f-bbf6-386d-9a57-cc84af7e796c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:b5:dd:2f:c7:6b:a7:a3:c1:40:d3:42:53:d5:35:bc:e8:0f: 94:01:92:5e:ee:7c:82:93:bf:1d:32:0b:e7:cf:1e:07:a5:92: b7:9d:d8:2c:da:4c:3d:1b:c5:cd:d0:c6:1a:2f:fb:d3:7f:ce: 18:70:54:09:0a:68:88:5a:19:36:b1:7b:03:c8:d6:13:8e:6c: af:a8:78:43:ce:51:29:9f:17:8d:5d:b6:f4:4b:4d:0b:28:56: f3:2d:a5:9d:60:02:37:30:b7:28:fd:6e:8a:ee:87:df:3f:88: 73:cc:30:f0:df:1c:ac:33:a9:86:52:97:44:b6:38:f0:68:d5: ed:37:24:f4:d4:cc:26:7e:59:6b:ce:ec:45:07:a7:ea:a7:56: 52:b2:8d:c6:74:3f:86:9c:0a:ea:07:32:41:00:15:a3:78:2e: 98:a8:7a:7f:19:9e:7a:12:f2:82:1e:06:f3:3d:4a:76:60:1d: cd:13:37:93:c2:46:0e:88:c4:f7:85:ce:f3:a1:ee:37:ee:6b: 06:4c:23:5e:e9:44:7a:52:db:35:23:ce:ae:5b:ff:c4:76:da: 70:9f:41:2d:64:65:ee:2f:cb:33:3a:94:0f:9d:b9:82:2d:0e: 36:e3:ef:2b:31:2a:14:0b:ae:86:55:69:a2:3e:ad:82:f7:f9: a6:e7:71:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNsCZcY+I6v9nOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MDFiZTI1OWEtNDM3Ni00NWEwLTljYTctZTg2ZDA0ODc0NGE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAsB3gV0xRJ0TMmVmSZxV6ktZXu5rKMJtEMR DIhv0ZvEyfR05uTeNSsTTummaM2+uqzUcvxaNS+GsXrtCPNUoIoDkQGE62cwpL2C H2MbqpLZIqpih9fcTf9BwdVV9B1QBbLmwObvFDIqK4janUn+Gt8r0pPzMQY5lU2h vQspG9PwnlkMA7G9MAavIuFLVK1L8XuJUB9PDDaz/Caw5UlKeAO2iZSyVWR0PHB5 tpGngbD62OQ/pUFohf/0NXF3EbotyNL1J+TcEPcbH63SCqpPSv5PMASjzdYwbVoB PkyXC8tgevOx2HSdZS+9ovw8Aoagr8a9Mkt5ZymJv4h9MGixnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCHwENKbrqA3tmyEzGa1N4zx5NcQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYmJiNjRkN2YtYmJmNi0z ODZkLTlhNTctY2M4NGFmN2U3OTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI+13S/Ha6ejwUDTQlPVNbzoD5QBkl7ufIKTvx0yC+fPHgelkred2Cza TD0bxc3Qxhov+9N/zhhwVAkKaIhaGTaxewPI1hOObK+oeEPOUSmfF41dtvRLTQso VvMtpZ1gAjcwtyj9boruh98/iHPMMPDfHKwzqYZSl0S2OPBo1e03JPTUzCZ+WWvO 7EUHp+qnVlKyjcZ0P4acCuoHMkEAFaN4Lpioen8ZnnoS8oIeBvM9SnZgHc0TN5PC Rg6IxPeFzvOh7jfuawZMI17pRHpS2zUjzq5b/8R22nCfQS1kZe4vyzM6lA+duYIt Djbj7ysxKhQLroZVaaI+rYL3+abncdU= -----END CERTIFICATE-----Generated at Mon May 5 09:43:59 2025 by rpki-client