$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa File: 16d32892-c3eb-30da-a6a2-9342916a0080.roa (raw, json) Hash identifier: +sFellXAyKCscagG/nu/1nTJRau9q+RIjcIg6wrAFMQ= Subject key identifier: A4:37:9E:C7:2B:23:AF:0B:0E:BE:A3:3B:7F:35:B5:0A:4B:6D:8E:FD Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D8AC7D8EEDC681E19900 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.148.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d8:ac:7d:8e:ed:c6:81:e1:99:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=54e2246d-05c9-4be4-b19f-12dd2d33123b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ca:62:36:b9:62:23:19:85:0a:b2:0b:c6:99: f2:fe:b0:9e:9f:fd:41:62:bf:8b:8c:a7:be:98:5e: 50:6f:89:f5:db:cb:af:73:67:a7:b6:7a:93:a8:4b: 70:f4:12:99:2a:45:f4:30:67:3a:ec:70:4c:6c:63: 88:62:83:2c:44:c8:0a:4d:f0:93:27:eb:fc:50:7a: 58:2e:00:22:d2:fc:fb:0e:2d:dc:8f:51:75:0b:7b: bf:ba:c9:30:be:ce:87:4f:ec:05:b1:da:0f:7d:01: b4:ee:a9:54:b5:b3:bc:5b:0f:3e:3c:e3:dc:62:ac: 50:9b:59:75:29:f0:b1:97:3d:d8:5a:60:f6:15:64: 05:1d:6f:bf:e5:52:e4:11:72:62:70:30:bb:ca:58: 99:65:22:8b:c4:e4:4d:34:90:82:83:d7:6c:34:02: 14:1d:f2:a5:8c:a6:2b:3a:11:7b:42:81:2c:9a:be: e1:68:a0:92:1e:08:ad:0e:67:d9:ac:dd:59:26:42: c8:a9:61:0c:f6:e4:b2:e6:da:c0:f2:aa:05:c0:1a: fa:65:da:1f:2d:43:0f:b8:a5:bb:4b:9b:94:f2:54: e0:b9:e8:5f:00:36:4c:a0:40:d5:92:5e:63:63:03: a2:76:45:9d:4e:7f:60:e4:a0:d7:c1:c1:5e:26:cd: 9c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:37:9E:C7:2B:23:AF:0B:0E:BE:A3:3B:7F:35:B5:0A:4B:6D:8E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/16d32892-c3eb-30da-a6a2-9342916a0080.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.148.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:b5:86:47:c8:f5:ab:cc:75:96:94:65:fe:82:3b:e7:6e:02: 86:29:47:c2:00:90:e0:26:eb:0b:20:2a:c9:34:46:d8:f4:b1: c9:61:a2:1c:5f:99:d9:06:01:96:66:f6:3f:56:c5:4f:44:3f: 95:9f:5e:2c:af:e5:d7:df:15:80:e5:c1:97:c9:db:6a:aa:26: c9:5c:53:1e:11:f4:48:0a:f9:7e:af:99:ce:0f:d6:ab:06:8a: 6f:96:46:23:0f:9e:75:39:9b:bb:da:81:37:19:25:d9:1c:3f: a9:14:2d:cd:11:63:96:25:c4:33:8f:8f:0a:66:41:fc:9a:69: 42:23:15:63:d9:75:d4:f9:3f:83:b5:33:db:ae:73:31:16:d4: 05:d6:a3:85:19:74:66:8a:aa:03:81:85:53:97:fd:1b:38:96: a7:84:07:50:bf:54:b9:8d:3d:59:2c:95:91:72:0e:51:71:3d: 65:4e:dd:a2:8a:e2:57:e5:20:a6:ca:d9:fb:58:80:5b:08:84: fd:e3:d9:a6:0f:58:41:9d:63:72:34:4a:08:b9:22:08:b6:bd: 06:37:df:6b:ce:18:de:86:a6:82:dc:d6:20:f8:af:89:94:17: ec:98:8e:e2:69:70:a0:85:35:56:2b:2b:76:ae:57:dd:66:ec: c9:25:ec:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNisfY7txoHhmQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTRlMjI0NmQtMDVjOS00YmU0LWIxOWYtMTJkZDJkMzMxMjNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvspiNrliIxmFCrILxpny/rCen/1BYr+LjKe+ mF5Qb4n128uvc2entnqTqEtw9BKZKkX0MGc67HBMbGOIYoMsRMgKTfCTJ+v8UHpY LgAi0vz7Di3cj1F1C3u/uskwvs6HT+wFsdoPfQG07qlUtbO8Ww8+POPcYqxQm1l1 KfCxlz3YWmD2FWQFHW+/5VLkEXJicDC7yliZZSKLxORNNJCCg9dsNAIUHfKljKYr OhF7QoEsmr7haKCSHgitDmfZrN1ZJkLIqWEM9uSy5trA8qoFwBr6ZdofLUMPuKW7 S5uU8lTguehfADZMoEDVkl5jYwOidkWdTn9g5KDXwcFeJs2cZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKQ3nscrI68LDr6jO381tQpLbY79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMTZkMzI4OTItYzNlYi0z MGRhLWE2YTItOTM0MjkxNmEwMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEa1hkfI9avMdZaUZf6CO+duAoYpR8IAkOAm6wsgKsk0Rtj0sclhohxf mdkGAZZm9j9WxU9EP5WfXiyv5dffFYDlwZfJ22qqJslcUx4R9EgK+X6vmc4P1qsG im+WRiMPnnU5m7vagTcZJdkcP6kULc0RY5YlxDOPjwpmQfyaaUIjFWPZddT5P4O1 M9uuczEW1AXWo4UZdGaKqgOBhVOX/Rs4lqeEB1C/VLmNPVkslZFyDlFxPWVO3aKK 4lflIKbK2ftYgFsIhP3j2aYPWEGdY3I0Sgi5Igi2vQY332vOGN6GpoLc1iD4r4mU F+yYjuJpcKCFNVYrK3auV91m7Mkl7EA= -----END CERTIFICATE-----Generated at Sun May 4 19:26:41 2025 by rpki-client