$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa File: 64ac54ef-441a-315c-a15a-4f7da8504a58.roa (raw, json) Hash identifier: /nDHaEaZRoiDrtsP0+Vct1Z6MX7QVkdq534SGRAV4jQ= Subject key identifier: 23:49:0B:AA:15:49:43:A8:54:9F:60:4D:EB:DB:0C:10:D0:FE:C1:52 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24C9675D79A2880274A0E0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c9:67:5d:79:a2:88:02:74:a0:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=781f2e15-2123-492e-8ad2-74d51937be7b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:6e:5e:f1:86:95:12:23:9d:e3:c8:37:e6:d0: 08:eb:e5:56:19:5f:76:af:27:04:b6:83:ee:a3:71: 71:3b:74:0e:46:75:24:70:06:87:49:0e:22:78:f1: 0f:06:7e:40:39:49:22:32:f9:95:16:a8:f0:d0:a7: 4a:33:0c:06:df:3a:be:85:3f:0a:49:e2:15:92:c6: 62:53:84:81:ab:2d:a8:60:58:59:a3:6e:b0:04:a4: fc:ec:54:24:db:be:7b:d0:3f:b8:d5:df:33:c5:2b: c0:8b:5b:07:99:d1:05:91:54:52:65:b9:02:84:c2: 73:79:fb:a4:88:44:a3:63:44:5b:3c:79:3f:5c:22: 12:0e:87:34:e5:29:83:84:2d:e8:36:32:ef:16:aa: 65:d3:78:b0:8a:e5:79:c5:23:d3:6e:35:86:89:be: 6a:66:f2:d6:dd:11:bd:8d:28:95:8e:c9:79:1d:13: 54:9f:b3:b0:75:da:f7:58:ef:06:ad:6f:16:b5:ed: d7:2c:b1:d6:28:82:8b:cf:44:ea:f9:07:54:12:a7: 26:b6:09:6a:f6:08:9e:fd:19:b3:14:13:0a:a1:ae: 84:e3:ff:e9:ec:12:8d:1f:05:a7:06:c3:6e:7d:3e: ab:0b:06:95:0c:c5:0c:99:a5:6f:0a:ef:8a:60:9a: 37:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:49:0B:AA:15:49:43:A8:54:9F:60:4D:EB:DB:0C:10:D0:FE:C1:52 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/64ac54ef-441a-315c-a15a-4f7da8504a58.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:20:fa:1b:96:42:59:f3:e7:b5:db:38:96:36:83:35:62:4b: 92:08:ac:e0:bd:08:25:8b:a3:aa:f8:65:39:ac:7e:02:4f:d3: 9e:51:d1:02:52:e8:43:db:d7:c5:eb:61:ca:30:1e:98:74:60: 3c:0f:58:3a:23:56:e2:7c:97:09:58:fe:1c:71:0e:63:7e:07: be:c5:b1:41:22:ef:c9:27:66:6b:6a:2b:16:e5:e4:ad:cc:37: 50:46:13:2b:69:4b:1c:35:88:e3:ba:53:7b:56:07:bf:13:13: a5:ea:c0:6b:e7:9f:1d:70:b7:37:ea:69:be:f9:39:6c:f4:7d: e5:00:f9:aa:13:58:28:41:62:8f:4b:ac:dc:56:b0:3c:3d:56: 55:4c:95:e0:54:56:cb:46:db:60:6e:7b:d3:c5:2e:5a:0c:ba: c8:d1:30:5e:b2:89:48:0b:df:b4:53:6f:42:65:55:5f:39:a6: f4:9f:85:d7:64:18:e1:63:37:96:7d:7d:53:c8:39:9c:28:d8: 7f:31:e8:19:e0:99:10:7a:3a:f4:cd:c7:c8:e9:5d:38:75:c7: 45:c9:19:21:df:4c:da:ba:0b:7a:09:2e:34:8d:be:44:26:f0: ac:31:af:cb:62:4b:1c:df:6b:c4:64:c2:7e:82:66:c9:ff:bf: ef:2e:98:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMlnXXmiiAJ0oOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzgxZjJlMTUtMjEyMy00OTJlLThhZDItNzRkNTE5MzdiZTdiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvm5e8YaVEiOd48g35tAI6+VWGV92rycEtoPu o3FxO3QORnUkcAaHSQ4iePEPBn5AOUkiMvmVFqjw0KdKMwwG3zq+hT8KSeIVksZi U4SBqy2oYFhZo26wBKT87FQk27570D+41d8zxSvAi1sHmdEFkVRSZbkChMJzefuk iESjY0RbPHk/XCISDoc05SmDhC3oNjLvFqpl03iwiuV5xSPTbjWGib5qZvLW3RG9 jSiVjsl5HRNUn7Owddr3WO8GrW8Wte3XLLHWKIKLz0Tq+QdUEqcmtglq9gie/Rmz FBMKoa6E4//p7BKNHwWnBsNufT6rCwaVDMUMmaVvCu+KYJo3tQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCNJC6oVSUOoVJ9gTevbDBDQ/sFSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjRhYzU0ZWYtNDQxYS0z MTVjLWExNWEtNGY3ZGE4NTA0YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAg+huWQlnz57XbOJY2gzViS5IIrOC9CCWLo6r4ZTmsfgJP055R0QJS 6EPb18XrYcowHph0YDwPWDojVuJ8lwlY/hxxDmN+B77FsUEi78knZmtqKxbl5K3M N1BGEytpSxw1iOO6U3tWB78TE6XqwGvnnx1wtzfqab75OWz0feUA+aoTWChBYo9L rNxWsDw9VlVMleBUVstG22Bue9PFLloMusjRMF6yiUgL37RTb0JlVV85pvSfhddk GOFjN5Z9fVPIOZwo2H8x6BngmRB6OvTNx8jpXTh1x0XJGSHfTNq6C3oJLjSNvkQm 8Kwxr8tiSxzfa8Rkwn6CZsn/v+8umCc= -----END CERTIFICATE-----Generated at Sun May 4 19:09:32 2025 by rpki-client