$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa File: 68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa (raw, json) Hash identifier: ne1PZv0UpuRQ1gtBrJar5e35QfNkksc9fjskub6gnGk= Subject key identifier: C7:70:F6:87:9A:C1:10:E3:A3:D3:6C:91:2D:E5:46:C4:A5:17:36:24 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BACE739CBC9E5C6F9D1A37 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.24.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ce:73:9c:bc:9e:5c:6f:9d:1a:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=8b0177f0-d062-44ac-b678-b53259b46473 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:25:08:93:8f:be:38:28:53:ea:b0:04:9f:f7: 1a:53:08:fc:af:fb:2a:a8:3c:3b:d5:3f:a3:c9:f5: 5c:cb:c2:72:3b:7d:73:1d:e8:25:26:ac:1b:f3:dd: 47:ed:bb:0e:93:ca:f6:b8:76:05:bb:9e:d9:a8:82: 22:22:74:36:2d:59:d9:0e:b0:32:2f:88:db:ae:e1: 30:40:58:25:36:1c:fc:b9:7b:b6:f4:93:83:bc:62: b1:0f:9a:2f:4d:05:52:ef:a2:67:cf:17:cb:69:db: d1:4b:a3:79:c8:b2:13:26:4e:ed:04:8a:43:8e:14: 26:65:5e:0e:42:91:cf:58:8c:9c:e8:72:c4:3b:06: 8f:f4:52:f5:b4:87:a3:6b:18:57:bf:f7:5d:e6:1a: c3:33:f8:db:08:d3:ba:62:08:38:a5:fc:a1:75:c9: 11:f1:18:9c:a2:3b:6e:fa:2f:9f:b7:c6:3e:8b:51: 6b:3b:11:b8:3d:94:19:21:db:d3:48:19:63:93:0d: 71:8a:c4:75:35:a9:10:c1:93:64:dd:aa:25:8d:8a: e1:af:06:24:4f:31:d5:9d:00:75:e4:11:50:3c:70: 2a:d7:52:b4:67:68:89:21:30:0b:9e:e6:b6:db:8c: a9:64:ab:b4:d5:a2:45:ea:99:bb:7c:3e:fb:f5:56: 8a:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:70:F6:87:9A:C1:10:E3:A3:D3:6C:91:2D:E5:46:C4:A5:17:36:24 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/68c8938b-8a4f-3d3c-b66e-b6f3c395b406.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.22.24.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8f:52:9d:98:14:27:5d:66:da:a0:94:0e:0c:52:be:ee:13:22: c1:94:97:b5:dc:87:8e:0c:13:16:f6:05:bb:1e:b4:44:f7:3a: 63:7d:f1:05:5d:b8:6e:f2:56:d2:28:88:65:ba:a6:a0:bf:3c: 61:40:82:56:d7:50:a7:26:1a:29:eb:f5:9b:7c:0e:6b:98:07: 67:61:67:09:4d:83:24:ec:69:54:23:f7:b9:7e:d1:65:c3:7e: 9f:c8:26:7b:46:29:84:1f:1d:8f:63:5e:fa:05:8f:a8:a2:ce: 71:8a:b4:b1:01:97:43:80:c2:5f:f4:0c:6d:5a:c3:8b:d4:72: 63:03:99:eb:03:ca:8a:5d:36:bb:87:8b:74:6d:54:78:43:79: 30:2b:45:bf:99:7b:df:76:ed:06:48:80:4b:82:7b:a9:bb:f6: 6b:52:a7:e9:16:89:62:d8:40:af:06:89:59:3c:99:01:d2:2f: 83:12:dd:52:f3:84:f2:08:98:94:74:c0:cf:46:41:36:fe:56: 53:a5:2c:57:bd:a9:01:e8:40:97:1e:4a:3d:7c:9c:ef:ba:7b: 9b:e1:be:d6:36:ef:8e:07:9f:c2:56:d9:de:dd:ce:6b:6f:08: 2d:59:d3:12:01:39:32:9e:6e:b3:19:dd:98:34:a7:22:7b:1f: 73:23:d2:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus5znLyeXG+dGjcwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk OGIwMTc3ZjAtZDA2Mi00NGFjLWI2NzgtYjUzMjU5YjQ2NDczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoiUIk4++OChT6rAEn/caUwj8r/sqqDw71T+j yfVcy8JyO31zHeglJqwb891H7bsOk8r2uHYFu57ZqIIiInQ2LVnZDrAyL4jbruEw QFglNhz8uXu29JODvGKxD5ovTQVS76JnzxfLadvRS6N5yLITJk7tBIpDjhQmZV4O QpHPWIyc6HLEOwaP9FL1tIejaxhXv/dd5hrDM/jbCNO6Ygg4pfyhdckR8Ricojtu +i+ft8Y+i1FrOxG4PZQZIdvTSBljkw1xisR1NakQwZNk3aoljYrhrwYkTzHVnQB1 5BFQPHAq11K0Z2iJITALnua224ypZKu01aJF6pm7fD779VaKawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdw9oeawRDjo9NskS3lRsSlFzYkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNjhjODkzOGItOGE0Zi0z ZDNjLWI2NmUtYjZmM2MzOTViNDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBYYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI9SnZgUJ11m2qCUDgxSvu4TIsGUl7Xch44MExb2BbsetET3OmN98QVd uG7yVtIoiGW6pqC/PGFAglbXUKcmGinr9Zt8DmuYB2dhZwlNgyTsaVQj97l+0WXD fp/IJntGKYQfHY9jXvoFj6iiznGKtLEBl0OAwl/0DG1aw4vUcmMDmesDyopdNruH i3RtVHhDeTArRb+Ze9927QZIgEuCe6m79mtSp+kWiWLYQK8GiVk8mQHSL4MS3VLz hPIImJR0wM9GQTb+VlOlLFe9qQHoQJceSj18nO+6e5vhvtY2744Hn8JW2d7dzmtv CC1Z0xIBOTKebrMZ3Zg0pyJ7H3Mj0jA= -----END CERTIFICATE-----Generated at Sun May 4 18:15:00 2025 by rpki-client