$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa File: 9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa (raw, json) Hash identifier: UvygBDPZBWRLRQE8V6y/udFWECAwK6ZOE0jQRdE4rco= Subject key identifier: C2:29:F4:05:44:B9:F7:2A:B0:15:15:58:19:53:28:00:13:4A:92:19 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B6975A7810181039BD00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.136.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b6:97:5a:78:10:18:10:39:bd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=593feaa3-2e6e-4595-bdcb-cf0c8612a2d7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:32:8c:12:44:55:a3:65:d8:d5:e6:d6:bf:43: 10:54:13:af:02:d3:85:b1:f1:81:57:eb:64:a5:07: ca:8c:f1:fc:00:20:c1:3c:86:d8:fb:4c:f7:6f:ed: 8e:8b:41:7a:6d:1b:29:32:f2:ba:f2:37:d1:d6:dd: 81:2f:94:6d:13:75:8a:f6:4b:b3:bf:76:52:bf:a4: b9:be:67:0a:70:62:d0:98:3f:1a:a3:36:f2:35:2b: 01:2f:7d:74:e2:76:a8:82:14:10:80:0d:b1:d8:f5: 03:58:1c:a0:dc:45:f7:0d:16:16:42:a4:24:2a:fc: e7:3d:07:27:a0:f6:d5:d9:7f:3f:b7:1f:65:29:0a: 9e:50:16:35:34:47:49:e1:ae:6a:13:1f:ae:5e:95: 62:a0:9b:b2:59:3e:7d:8c:61:cb:03:0f:51:5b:15: 0f:26:a6:a5:08:ad:24:14:d4:e8:3f:45:71:30:24: f3:02:8d:5e:6b:b9:59:b9:e2:b1:8d:be:df:a1:d0: 8f:6a:6a:04:af:89:cc:a5:48:6a:11:68:93:fa:62: 18:c4:0d:50:6c:65:f3:c9:1d:16:59:17:f6:27:c6: 1d:fb:1f:73:e7:ec:28:54:02:c0:44:8d:af:1c:07: e7:b9:83:de:3c:2a:75:15:b5:27:84:2e:62:b5:ce: ab:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:29:F4:05:44:B9:F7:2A:B0:15:15:58:19:53:28:00:13:4A:92:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9dda49de-e3f5-3289-bbea-3ff50dfb5cf3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:e4:53:a2:66:59:6d:8b:e6:74:8f:37:14:4a:26:e2:02:24: 0f:ba:16:ed:fd:c1:e6:8d:63:8d:d6:3e:6e:f2:a7:d2:1f:d0: a6:03:dc:42:b1:1e:f8:05:cc:30:12:c3:fe:99:2f:31:e5:75: ac:27:85:2e:52:2d:31:e7:7f:1c:d0:4e:2a:9b:2f:de:cf:08: fc:fd:53:29:67:d5:c0:37:eb:26:20:f9:a6:7b:ea:40:14:ab: 4d:4a:e6:98:6a:9b:3e:3c:ca:38:99:a8:49:1c:da:88:86:84: a6:27:36:6b:46:3c:d1:7c:78:6a:c2:6a:c9:24:c9:a1:12:d4: f8:a0:cf:9e:c2:d9:5e:a4:d2:79:8b:1b:80:f9:94:7d:a1:26: 29:eb:5e:80:5e:ce:c1:ae:e7:2d:db:31:92:e6:40:8c:f8:9b: a4:44:f7:c8:33:60:55:90:24:08:8e:8c:fb:f6:b3:a3:ef:49: 7b:70:53:4c:cb:e6:5a:c3:7b:e0:a8:a9:53:3a:3f:40:2d:7a: e4:44:18:1d:5b:58:1a:b4:25:e4:26:ae:15:b0:16:9b:53:e4: 95:40:01:6e:83:54:13:bd:9b:ce:f7:18:55:36:e4:b3:59:19: 8b:63:da:65:58:97:ee:7f:06:fc:f8:a3:12:91:d7:15:c2:d7: e8:16:35:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLaXWngQGBA5vQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NTkzZmVhYTMtMmU2ZS00NTk1LWJkY2ItY2YwYzg2MTJhMmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTKMEkRVo2XY1ebWv0MQVBOvAtOFsfGBV+tk pQfKjPH8ACDBPIbY+0z3b+2Oi0F6bRspMvK68jfR1t2BL5RtE3WK9kuzv3ZSv6S5 vmcKcGLQmD8aozbyNSsBL3104naoghQQgA2x2PUDWByg3EX3DRYWQqQkKvznPQcn oPbV2X8/tx9lKQqeUBY1NEdJ4a5qEx+uXpVioJuyWT59jGHLAw9RWxUPJqalCK0k FNToP0VxMCTzAo1ea7lZueKxjb7fodCPamoEr4nMpUhqEWiT+mIYxA1QbGXzyR0W WRf2J8Yd+x9z5+woVALARI2vHAfnuYPePCp1FbUnhC5itc6r9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMIp9AVEufcqsBUVWBlTKAATSpIZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWRkYTQ5ZGUtZTNmNS0z Mjg5LWJiZWEtM2ZmNTBkZmI1Y2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/kU6JmWW2L5nSPNxRKJuICJA+6Fu39weaNY43WPm7yp9If0KYD3EKx HvgFzDASw/6ZLzHldawnhS5SLTHnfxzQTiqbL97PCPz9Uyln1cA36yYg+aZ76kAU q01K5phqmz48yjiZqEkc2oiGhKYnNmtGPNF8eGrCaskkyaES1Pigz57C2V6k0nmL G4D5lH2hJinrXoBezsGu5y3bMZLmQIz4m6RE98gzYFWQJAiOjPv2s6PvSXtwU0zL 5lrDe+CoqVM6P0AteuREGB1bWBq0JeQmrhWwFptT5JVAAW6DVBO9m873GFU25LNZ GYtj2mVYl+5/Bvz4oxKR1xXC1+gWNVU= -----END CERTIFICATE-----Generated at Sun May 4 18:56:10 2025 by rpki-client