$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa File: f529b062-9b30-3398-84a5-e7d5fad5abf1.roa (raw, json) Hash identifier: PiiveA+SvCWxplXKu5EeKfnSjF0Lk82g6KGYuBnX7So= Subject key identifier: C7:59:F1:67:2D:47:29:BF:F0:97:8F:70:44:87:10:83:5F:B9:0D:87 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D500739B4D0BE1BE4D00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d5:00:73:9b:4d:0b:e1:be:4d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=38fb58c7-fdd0-4d10-ace9-8eec5147f311 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:9b:40:9b:22:3a:0b:f5:5c:37:19:82:e5:c7: ab:1c:30:0b:fd:6f:9f:f6:ef:b8:91:d0:e8:74:f8: 39:f2:92:69:5e:04:02:36:22:94:4c:30:b0:b4:4f: 7c:49:cb:f8:b3:a2:43:7b:f7:1b:6e:3a:aa:dc:64: aa:63:d1:a9:7c:bb:d7:55:89:78:12:12:cd:39:9a: 70:b1:79:fe:f0:f1:f9:11:9c:c3:2d:a5:d3:db:c6: 3f:ee:5f:5b:f2:66:f7:3a:5e:5f:73:92:0c:51:ea: 71:56:5b:dc:1f:0d:1a:97:c8:be:c2:7e:1b:5a:ee: 9a:66:aa:cf:3f:68:79:b8:c0:b8:72:43:6a:01:79: 3b:17:4d:f5:15:62:44:54:66:f1:2f:46:5b:de:c6: a6:65:17:71:70:67:96:af:e3:38:60:89:06:f3:c9: 48:8d:c8:1d:7d:f6:39:29:42:f4:46:3c:ff:1f:52: 00:0b:50:23:94:cd:78:38:f0:ac:42:1d:52:cb:5a: 4b:2e:db:ca:96:b4:e3:e7:eb:73:9b:64:c1:13:2a: 0f:e4:80:f9:40:25:66:9a:48:44:ca:35:1a:86:2a: 81:f6:bc:d4:83:06:27:65:53:c2:7c:b7:6a:5c:e2: c9:8e:77:68:9a:37:7f:d1:be:22:fa:10:92:dd:0f: 46:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:59:F1:67:2D:47:29:BF:F0:97:8F:70:44:87:10:83:5F:B9:0D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f529b062-9b30-3398-84a5-e7d5fad5abf1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:2b:21:c8:f8:36:4c:a8:b0:90:3b:65:55:81:b9:ad:72:0f: 9a:a0:57:7b:60:4a:0b:ca:1b:df:55:f2:7f:3c:c9:f0:5c:97: 69:86:61:4f:58:7a:5d:8f:2c:14:a8:f1:5b:16:94:7f:97:2e: 89:04:4c:1a:96:8a:36:0d:98:aa:cd:89:09:4c:d9:5d:39:67: ae:f1:12:fd:db:fd:1d:02:80:e3:96:78:ee:ff:4d:50:1a:e3: 83:ad:bb:a7:aa:95:bf:22:8e:0e:f8:4b:a4:ed:60:52:42:7e: bb:71:a2:c5:f9:54:8c:db:82:66:43:c0:8f:73:7d:fd:21:c6: b7:82:c3:17:48:31:19:3a:e8:56:30:4b:13:1b:cb:88:e2:db: 4a:e8:cc:5a:a4:30:33:7b:93:a0:73:71:2d:7d:8c:79:3c:53: aa:7a:4a:4f:54:06:bd:fe:5e:49:41:72:96:21:14:c3:b6:e0: 03:76:12:20:e2:0f:f0:f4:20:6b:c5:8a:aa:c0:dd:1b:ce:04: b7:05:d2:dc:e9:64:97:60:e9:81:05:1f:c6:00:b0:16:02:d9: cf:00:4f:37:9f:9b:ed:e6:14:3c:9f:dd:3e:e0:07:81:e8:82: ff:38:a6:51:c8:14:c5:87:89:f2:6f:5a:2c:db:4e:a1:a0:ca: 52:30:7a:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNUAc5tNC+G+TQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MzhmYjU4YzctZmRkMC00ZDEwLWFjZTktOGVlYzUxNDdmMzExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZtAmyI6C/VcNxmC5cerHDAL/W+f9u+4kdDo dPg58pJpXgQCNiKUTDCwtE98Scv4s6JDe/cbbjqq3GSqY9GpfLvXVYl4EhLNOZpw sXn+8PH5EZzDLaXT28Y/7l9b8mb3Ol5fc5IMUepxVlvcHw0al8i+wn4bWu6aZqrP P2h5uMC4ckNqAXk7F031FWJEVGbxL0Zb3samZRdxcGeWr+M4YIkG88lIjcgdffY5 KUL0Rjz/H1IAC1AjlM14OPCsQh1Sy1pLLtvKlrTj5+tzm2TBEyoP5ID5QCVmmkhE yjUahiqB9rzUgwYnZVPCfLdqXOLJjndomjd/0b4i+hCS3Q9GmQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdZ8WctRym/8JePcESHEINfuQ2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjUyOWIwNjItOWIzMC0z Mzk4LTg0YTUtZTdkNWZhZDVhYmYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkrIcj4NkyosJA7ZVWBua1yD5qgV3tgSgvKG99V8n88yfBcl2mGYU9Y el2PLBSo8VsWlH+XLokETBqWijYNmKrNiQlM2V05Z67xEv3b/R0CgOOWeO7/TVAa 44Otu6eqlb8ijg74S6TtYFJCfrtxosX5VIzbgmZDwI9zff0hxreCwxdIMRk66FYw SxMby4ji20rozFqkMDN7k6BzcS19jHk8U6p6Sk9UBr3+XklBcpYhFMO24AN2EiDi D/D0IGvFiqrA3RvOBLcF0tzpZJdg6YEFH8YAsBYC2c8ATzefm+3mFDyf3T7gB4Ho gv84plHIFMWHifJvWizbTqGgylIwehw= -----END CERTIFICATE-----Generated at Sat May 10 10:20:20 2025 by rpki-client