$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa File: 3f70c066-2334-345c-8e8d-a890ceb66284.roa (raw, json) Hash identifier: z5tA/qywYmsUWMLs+W3DNNhJoTv4TqSuICUVierYvQ4= Subject key identifier: 62:F1:A9:B5:49:6C:67:C9:19:50:1B:98:6E:DA:D9:27:AC:7E:8E:63 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24A73FD555430D3D2B6E80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.128.0/19 maxlen: 19 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a7:3f:d5:55:43:0d:3d:2b:6e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2a54d1a3-0fe3-4fa1-9f51-fa6ba5984ffe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:f6:2f:8c:1a:35:c2:5c:64:08:0c:b3:31:a0: 7f:58:b7:f8:41:8e:ee:e7:42:26:e1:e4:cb:6e:2a: e5:0b:76:ea:11:12:b9:34:d3:cf:9f:ba:be:08:92: c8:e0:f1:6b:ce:ff:5d:e4:c9:2a:6a:d9:a6:0c:02: 96:67:e9:5d:4a:06:07:0f:b7:7d:35:e5:88:3a:de: 8d:80:d7:03:dd:73:c6:d7:81:d7:83:71:4a:d2:af: fe:fa:f7:f5:e4:e6:72:26:65:bd:be:68:78:9f:02: 5a:7c:19:69:cb:3e:41:45:51:c1:05:48:08:a1:3c: e1:f8:a8:97:83:25:2d:52:90:35:ca:5e:49:1f:ee: 93:5a:17:f3:b0:fe:50:5e:dc:86:20:8a:39:9e:c3: df:88:bd:32:b4:00:3e:b2:54:19:69:b2:ef:c7:ab: 1a:f1:55:20:f0:38:41:5e:c2:f4:b9:6a:1c:48:23: a0:de:f3:95:44:d2:1a:a0:f2:e1:13:13:d9:01:e1: 3a:79:5d:7e:f7:91:00:6d:2c:8d:0f:c9:f6:50:a7: 16:fe:89:3d:09:1e:d6:3b:4d:33:6e:df:ef:7d:d4: fe:01:fc:29:ec:0b:05:be:76:39:c8:25:a9:4f:ba: 09:7f:c5:28:84:6b:1a:2d:b0:b3:05:14:aa:59:54: ca:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:F1:A9:B5:49:6C:67:C9:19:50:1B:98:6E:DA:D9:27:AC:7E:8E:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/3f70c066-2334-345c-8e8d-a890ceb66284.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:32:d7:cc:4f:6f:1a:a4:5b:18:33:09:7a:4d:bc:a4:09:19: 5a:9e:32:b3:b5:42:03:f1:27:16:18:54:5e:e9:85:c6:da:81: 7d:fc:01:92:d9:a4:bf:4f:2d:b7:87:1a:cf:31:b1:53:45:33: a3:b6:d1:4f:dc:bc:06:3c:37:92:78:ba:cc:03:1d:2f:08:81: c7:a4:2a:0c:c4:96:5c:99:55:65:78:be:ea:54:bb:2e:ec:80: c6:d8:6d:14:91:c7:df:11:0a:21:80:69:2d:1f:2d:74:2c:98: 54:ef:bf:ca:8f:e6:af:30:78:7f:3e:78:d3:0f:b7:ff:0d:f1: 53:e7:11:55:0e:80:af:77:84:bb:f7:ea:b4:77:50:d5:91:a3: 2d:65:ca:84:54:25:ca:8f:9f:45:6d:fe:02:3c:15:49:0f:5f: c2:2a:36:da:ee:d6:ee:7c:49:02:33:58:81:4a:24:c3:e6:84: 87:d8:c8:43:61:f8:fb:fa:91:da:06:19:8f:98:cc:58:d3:b8: 5a:81:c6:55:8a:0d:c3:48:c4:c5:47:cb:ad:40:2e:f8:da:22: c3:25:3b:f7:3a:62:69:1c:0a:8e:43:bf:a2:6a:9c:b0:3c:bb: 52:c3:b0:e6:ba:9d:a3:a4:82:5f:ee:ca:4d:af:b5:09:08:76: 13:1c:05:9c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKc/1VVDDT0rboAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmE1NGQxYTMtMGZlMy00ZmExLTlmNTEtZmE2YmE1OTg0ZmZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvYvjBo1wlxkCAyzMaB/WLf4QY7u50Im4eTL birlC3bqERK5NNPPn7q+CJLI4PFrzv9d5MkqatmmDAKWZ+ldSgYHD7d9NeWIOt6N gNcD3XPG14HXg3FK0q/++vf15OZyJmW9vmh4nwJafBlpyz5BRVHBBUgIoTzh+KiX gyUtUpA1yl5JH+6TWhfzsP5QXtyGIIo5nsPfiL0ytAA+slQZabLvx6sa8VUg8DhB XsL0uWocSCOg3vOVRNIaoPLhExPZAeE6eV1+95EAbSyND8n2UKcW/ok9CR7WO00z bt/vfdT+Afwp7AsFvnY5yCWpT7oJf8UohGsaLbCzBRSqWVTKWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGLxqbVJbGfJGVAbmG7a2Sesfo5jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvM2Y3MGMwNjYtMjMzNC0z NDVjLThlOGQtYTg5MGNlYjY2Mjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF8y18xPbxqkWxgzCXpNvKQJGVqeMrO1QgPxJxYYVF7phcbagX38AZLZ pL9PLbeHGs8xsVNFM6O20U/cvAY8N5J4uswDHS8IgcekKgzEllyZVWV4vupUuy7s gMbYbRSRx98RCiGAaS0fLXQsmFTvv8qP5q8weH8+eNMPt/8N8VPnEVUOgK93hLv3 6rR3UNWRoy1lyoRUJcqPn0Vt/gI8FUkPX8IqNtru1u58SQIzWIFKJMPmhIfYyENh +Pv6kdoGGY+YzFjTuFqBxlWKDcNIxMVHy61ALvjaIsMlO/c6YmkcCo5Dv6JqnLA8 u1LDsOa6naOkgl/uyk2vtQkIdhMcBZw= -----END CERTIFICATE-----Generated at Sun May 4 20:53:14 2025 by rpki-client