$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa File: b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa (raw, json) Hash identifier: 7Je3GpDv9GqboaOW3yG8ykyo9CUN3DWTujFKocLegvc= Subject key identifier: 08:66:F9:0A:D8:9A:0A:12:8E:77:63:BD:30:54:78:BA:2D:EB:6C:90 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24A2244F302C16E735D380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a2:24:4f:30:2c:16:e7:35:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2df4f3aa-29a9-4a69-8941-64d35a3cb43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ff:6b:c6:b4:46:0a:92:e9:14:d9:e9:8b:6e: 41:0a:1c:67:ec:4c:ee:1f:f1:d8:6f:87:10:cd:5d: 05:37:68:91:43:e0:a2:25:91:c1:ef:7c:5c:00:84: f3:ce:d1:4d:b9:83:94:cb:37:cc:0e:c5:f3:9b:e1: b8:a9:b9:e8:cb:2f:15:da:af:ed:0c:e5:6f:6c:32: ff:9e:13:a5:f4:a4:5c:e3:74:dc:0c:8f:e5:2f:80: 93:51:11:81:d6:6b:8f:cf:fd:3a:05:9a:76:d4:a9: dd:37:de:52:0f:18:c9:4f:34:72:de:c1:39:23:31: 7d:f4:91:59:21:6c:ca:0c:10:71:ca:37:88:c9:97: bf:64:ab:e4:12:86:e6:dc:46:82:62:fc:4e:0c:cb: 47:47:a1:ae:02:5c:d8:20:7b:4f:e0:80:7f:ef:71: 56:19:b8:de:17:2c:8b:d2:bf:26:f8:80:f6:74:8d: 54:ed:1a:66:46:12:8a:ee:9a:71:4b:84:e4:8d:42: 42:87:37:b8:8b:f4:41:11:1d:e5:85:15:5e:5e:2d: cb:48:94:e3:52:a6:ea:8d:85:cd:2f:1a:4d:d5:39: f5:6d:42:77:b9:29:03:78:ef:72:3a:61:1c:da:b3: 46:bb:28:2c:a1:83:e3:4b:f7:b6:24:dc:ca:9a:76: 43:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:66:F9:0A:D8:9A:0A:12:8E:77:63:BD:30:54:78:BA:2D:EB:6C:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b644c0db-cfe2-318a-9c89-2a7bef5e56d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 29:ce:f7:76:47:ac:e1:a5:3c:64:9b:60:d8:40:8c:d9:cf:06: 89:4b:74:c6:79:39:e9:24:54:cc:fc:e0:7d:91:be:e3:23:67: eb:4a:bc:6f:15:e5:47:4b:8c:d6:98:2b:ac:a7:48:92:7a:0e: 3f:ed:09:4b:f4:5d:0f:29:fb:77:d1:c1:e0:73:24:9f:84:f6: 36:e9:3a:21:88:88:f7:d8:82:0b:5c:b9:94:af:d6:b2:17:7e: f3:c8:05:c3:df:ae:ba:f6:7e:87:cd:3e:2e:ae:1b:40:75:af: 87:e5:f0:14:0b:ca:a7:aa:65:ce:66:31:f7:c9:dd:18:a9:7d: 3d:39:ca:39:1a:ae:69:ba:05:41:ae:89:e4:11:be:80:04:16: 0e:b0:b1:5a:c1:01:8c:c2:24:cb:0b:e5:0d:4f:31:21:ae:52: 51:02:e8:42:33:9a:3f:7d:d4:65:63:d0:1b:65:d6:ee:8d:53: 79:57:6a:8e:8b:4d:e0:27:d0:77:cd:21:2a:43:92:02:02:d0: 1f:2e:85:ab:21:ba:a6:d7:a4:e4:56:f7:76:dc:ec:ce:4b:c2: 43:db:fc:b3:4b:0d:8c:be:3a:a3:77:6d:58:c2:68:fd:4d:70: 5d:9d:4b:e5:22:e8:24:18:6d:e6:55:38:3e:d0:11:a6:3c:ea: 90:df:52:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKIkTzAsFuc104AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmRmNGYzYWEtMjlhOS00YTY5LTg5NDEtNjRkMzVhM2NiNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsv9rxrRGCpLpFNnpi25BChxn7EzuH/HYb4cQ zV0FN2iRQ+CiJZHB73xcAITzztFNuYOUyzfMDsXzm+G4qbnoyy8V2q/tDOVvbDL/ nhOl9KRc43TcDI/lL4CTURGB1muPz/06BZp21KndN95SDxjJTzRy3sE5IzF99JFZ IWzKDBBxyjeIyZe/ZKvkEobm3EaCYvxODMtHR6GuAlzYIHtP4IB/73FWGbjeFyyL 0r8m+ID2dI1U7RpmRhKK7ppxS4TkjUJChze4i/RBER3lhRVeXi3LSJTjUqbqjYXN LxpN1Tn1bUJ3uSkDeO9yOmEc2rNGuygsoYPjS/e2JNzKmnZDLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAhm+QrYmgoSjndjvTBUeLot62yQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjY0NGMwZGItY2ZlMi0z MThhLTljODktMmE3YmVmNWU1NmQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACnO93ZHrOGlPGSbYNhAjNnPBolLdMZ5OekkVMz84H2RvuMjZ+tKvG8V 5UdLjNaYK6ynSJJ6Dj/tCUv0XQ8p+3fRweBzJJ+E9jbpOiGIiPfYggtcuZSv1rIX fvPIBcPfrrr2fofNPi6uG0B1r4fl8BQLyqeqZc5mMffJ3RipfT05yjkarmm6BUGu ieQRvoAEFg6wsVrBAYzCJMsL5Q1PMSGuUlEC6EIzmj991GVj0Btl1u6NU3lXao6L TeAn0HfNISpDkgIC0B8uhashuqbXpORW93bc7M5LwkPb/LNLDYy+OqN3bVjCaP1N cF2dS+Ui6CQYbeZVOD7QEaY86pDfUhU= -----END CERTIFICATE-----Generated at Sun May 4 20:35:37 2025 by rpki-client