$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa File: 36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa (raw, json) Hash identifier: RK/3/3LoM6MoB0WsE2hej+uPLhpV/zjmiYGHw05xOtQ= Subject key identifier: E7:F6:26:5C:09:CD:85:0F:F9:75:E8:BA:1A:87:8E:D6:A1:C0:2F:63 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D580F3DE437430BA2480 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.136.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d5:80:f3:de:43:74:30:ba:24:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=54a31b7c-a790-4319-9dae-a718ac90c534 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:82:3b:0c:04:05:bb:af:2b:e8:de:c0:9b:41: 39:56:8a:a8:50:bb:c3:a1:b3:42:54:70:e5:96:79: 6a:5e:f6:9f:1b:f5:e5:b1:b6:2e:90:97:83:e9:5d: 87:d8:68:ff:ac:5b:8e:df:fe:d3:59:10:43:c7:10: c9:8f:b9:c9:7e:1c:80:4f:3a:f3:cf:79:2e:1f:05: fd:79:d0:c9:75:dc:c8:0c:01:f3:3a:b6:3f:9d:fb: 50:ac:2d:90:e3:2b:0e:9b:ea:18:1f:b8:61:09:81: 14:55:6d:bf:b6:31:39:41:7a:57:8b:53:81:f6:17: d4:23:14:ab:21:e0:9c:dd:45:5f:2d:c9:3b:bc:7a: 48:37:fa:69:f7:32:83:7e:76:78:3b:ac:ed:fd:81: 49:33:78:5d:7a:d8:ae:6e:d6:44:3b:28:42:8c:26: 9a:54:16:ef:f0:b5:e6:8d:ae:e9:4d:b7:32:13:12: 7b:24:73:3e:d1:26:de:ba:c8:ac:d5:b4:84:90:7c: 59:3b:d7:18:08:10:73:28:21:99:7b:6f:56:34:28: 86:8d:c3:9b:10:b6:79:a9:03:ae:d8:73:ae:80:d5: a7:ee:0e:31:62:8a:90:b6:93:20:f8:fa:21:d1:d7: ee:19:db:84:60:c5:f0:a6:d1:1a:e0:a9:94:4a:69: fa:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F6:26:5C:09:CD:85:0F:F9:75:E8:BA:1A:87:8E:D6:A1:C0:2F:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/36dc80f0-76b0-39a9-9aaa-4b95a5a758e7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:34:8a:99:6e:a6:a1:9d:64:4d:3d:7a:46:b9:20:ab:2c:55: 97:32:b4:21:27:3c:1e:df:c3:8e:d1:08:2f:9a:af:9d:de:4f: 9c:07:a1:ac:d4:25:d4:74:3f:dd:8d:9c:86:cd:73:50:5b:b2: bd:96:d9:09:30:8d:dc:a4:75:4f:62:9a:e5:92:cd:2a:1f:ac: e9:3f:b5:cf:f5:d5:c4:e0:d0:fb:c1:26:0a:90:9c:74:86:32: 29:c0:fc:33:3d:e3:36:3d:49:76:de:36:d9:58:2c:6d:15:08: 45:b1:76:27:13:01:f1:57:dd:ca:2e:c2:b3:de:a2:ba:d3:e2: 50:1a:d5:a6:5c:16:3c:bb:c8:5b:e9:c7:04:70:35:eb:3e:e9: 39:2d:fe:1e:b3:c9:54:21:5c:72:f6:63:7d:2e:e1:6b:18:3a: 64:01:d0:94:c5:7d:86:a8:ca:69:4f:5f:16:43:72:b1:1f:7b: 7d:b5:f5:82:c8:e0:44:b6:5a:e7:b1:2b:df:ae:18:a7:5b:b7: 75:e8:d4:90:89:23:2b:4b:75:94:0a:70:29:73:94:da:64:fd: 1a:a9:b5:51:b8:96:4e:5b:81:85:45:da:f7:70:2f:4b:5d:c1: e0:bd:ea:17:1c:63:01:b6:a0:93:0a:f3:c0:1e:63:7a:a4:1b: 40:48:1e:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNWA895DdDC6JIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTRhMzFiN2MtYTc5MC00MzE5LTlkYWUtYTcxOGFjOTBjNTM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0oI7DAQFu68r6N7Am0E5VoqoULvDobNCVHDl lnlqXvafG/XlsbYukJeD6V2H2Gj/rFuO3/7TWRBDxxDJj7nJfhyATzrzz3kuHwX9 edDJddzIDAHzOrY/nftQrC2Q4ysOm+oYH7hhCYEUVW2/tjE5QXpXi1OB9hfUIxSr IeCc3UVfLck7vHpIN/pp9zKDfnZ4O6zt/YFJM3hdetiubtZEOyhCjCaaVBbv8LXm ja7pTbcyExJ7JHM+0Sbeusis1bSEkHxZO9cYCBBzKCGZe29WNCiGjcObELZ5qQOu 2HOugNWn7g4xYoqQtpMg+Poh0dfuGduEYMXwptEa4KmUSmn6kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf2JlwJzYUP+XXouhqHjtahwC9jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzZkYzgwZjAtNzZiMC0z OWE5LTlhYWEtNGI5NWE1YTc1OGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACw0iplupqGdZE09eka5IKssVZcytCEnPB7fw47RCC+ar53eT5wHoazU JdR0P92NnIbNc1Bbsr2W2QkwjdykdU9imuWSzSofrOk/tc/11cTg0PvBJgqQnHSG MinA/DM94zY9SXbeNtlYLG0VCEWxdicTAfFX3couwrPeorrT4lAa1aZcFjy7yFvp xwRwNes+6Tkt/h6zyVQhXHL2Y30u4WsYOmQB0JTFfYaoymlPXxZDcrEfe3219YLI 4ES2WuexK9+uGKdbt3Xo1JCJIytLdZQKcClzlNpk/RqptVG4lk5bgYVF2vdwL0td weC96hccYwG2oJMK88AeY3qkG0BIHkE= -----END CERTIFICATE-----Generated at Sun May 4 19:10:03 2025 by rpki-client