$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa File: 7ed79959-9461-30e2-9940-e1c17e8114f2.roa (raw, json) Hash identifier: x451hWmNLrO+r+fppzMNrHwr5yqLDJo9hAkkLd3TrJE= Subject key identifier: 02:12:68:9D:AA:DD:2D:D7:01:68:01:3D:B8:CC:29:6A:5E:4E:E6:B3 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BACEDB349327D226D04180 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.28.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 05 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:ce:db:34:93:27:d2:26:d0:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=36c33c9c-1245-4480-b52a-7bb121ddbedd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:ba:a9:b3:0d:a7:d5:91:f0:e2:be:02:7c:fc: ca:b1:0d:a4:c2:73:e3:a3:88:72:c0:4b:07:0b:26: 76:b6:20:57:f0:3e:28:9b:70:57:cb:a1:cb:68:71: 17:7b:b5:7a:06:03:d5:43:b7:74:81:78:76:12:0d: 54:99:66:7e:5f:7b:93:c6:62:20:1b:6d:03:a1:52: c7:09:24:03:9f:e6:3a:fe:26:3e:a5:e1:e4:a4:8e: d0:ad:31:04:0c:64:e8:71:aa:0e:40:6b:c7:38:4c: 7a:24:1b:4e:d1:bc:ac:6c:a3:44:db:05:33:66:a4: d5:f4:24:9c:b0:72:ad:e9:4f:1a:97:e0:fd:16:2a: f7:fb:7f:d2:b4:4a:05:ca:40:52:d9:2b:4b:4d:c9: 50:75:7a:bd:91:d8:26:e1:6a:6e:09:25:c1:52:7d: 78:c9:e0:e0:12:0e:30:99:0e:78:62:7f:fb:f1:84: 6d:4b:21:36:cf:2c:c2:cf:be:a8:02:e3:eb:f0:ed: d6:b2:72:a5:58:7c:6d:16:ab:99:13:a9:a0:a0:cb: e6:c1:21:61:f3:c6:af:5b:a4:92:99:89:a1:cd:1e: 8a:36:01:f5:73:ee:b0:8e:04:3c:2c:7b:0f:36:39: b3:f4:57:81:53:77:84:dc:53:af:b2:50:36:52:b9: e2:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:12:68:9D:AA:DD:2D:D7:01:68:01:3D:B8:CC:29:6A:5E:4E:E6:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/7ed79959-9461-30e2-9940-e1c17e8114f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.22.28.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption cf:d6:b4:6f:5b:75:18:d0:0c:7e:a5:f8:18:6e:b4:f8:d5:4c: 6c:40:1e:54:32:0b:9e:98:c3:3d:99:8d:c5:e8:ba:7c:60:c4: 0a:b5:b7:99:7a:bf:5d:58:34:e4:5e:7f:32:1a:81:20:69:c1: de:97:ad:c3:bd:d0:9f:08:a6:32:71:40:d9:44:24:7b:9b:e2: 18:f3:56:91:43:2b:26:85:37:78:aa:04:9c:0a:e7:60:56:b2: bc:08:40:06:63:79:61:e2:db:fe:4b:43:bd:a5:30:1a:72:72: 91:c0:9e:a8:ae:48:ca:aa:27:0e:d1:8e:13:79:7e:63:b3:75: 9d:82:89:76:17:0a:55:18:77:c6:be:51:62:21:e8:5a:8f:61: 84:01:51:c6:13:8c:ea:f9:6d:f2:81:35:33:a4:79:c7:1b:cd: 54:0c:c0:60:97:6b:72:72:36:44:9f:5f:29:fd:42:62:9e:15: eb:f9:7c:66:cb:04:cb:f2:24:dc:1a:13:be:06:3c:fe:08:83: 51:ef:c6:9e:9f:15:95:26:2b:23:36:8b:a5:81:0b:a0:77:c8: 55:2b:a7:d8:fe:2a:21:51:f2:d5:fe:c7:e4:87:ec:dc:72:9a: 8f:96:87:4b:bc:3f:59:e0:bb:85:9b:81:4e:43:73:09:c4:0c: 36:76:39:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkus7bNJMn0ibQQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MzZjMzNjOWMtMTI0NS00NDgwLWI1MmEtN2JiMTIxZGRiZWRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArbqpsw2n1ZHw4r4CfPzKsQ2kwnPjo4hywEsH CyZ2tiBX8D4om3BXy6HLaHEXe7V6BgPVQ7d0gXh2Eg1UmWZ+X3uTxmIgG20DoVLH CSQDn+Y6/iY+peHkpI7QrTEEDGTocaoOQGvHOEx6JBtO0bysbKNE2wUzZqTV9CSc sHKt6U8al+D9Fir3+3/StEoFykBS2StLTclQdXq9kdgm4WpuCSXBUn14yeDgEg4w mQ54Yn/78YRtSyE2zyzCz76oAuPr8O3WsnKlWHxtFquZE6mgoMvmwSFh88avW6SS mYmhzR6KNgH1c+6wjgQ8LHsPNjmz9FeBU3eE3FOvslA2UrniAQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAISaJ2q3S3XAWgBPbjMKWpeTuazMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvN2VkNzk5NTktOTQ2MS0z MGUyLTk5NDAtZTFjMTdlODExNGYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBYcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAM/WtG9bdRjQDH6l+BhutPjVTGxAHlQyC56Ywz2ZjcXounxgxAq1t5l6 v11YNORefzIagSBpwd6XrcO90J8IpjJxQNlEJHub4hjzVpFDKyaFN3iqBJwK52BW srwIQAZjeWHi2/5LQ72lMBpycpHAnqiuSMqqJw7RjhN5fmOzdZ2CiXYXClUYd8a+ UWIh6FqPYYQBUcYTjOr5bfKBNTOkeccbzVQMwGCXa3JyNkSfXyn9QmKeFev5fGbL BMvyJNwaE74GPP4Ig1Hvxp6fFZUmKyM2i6WBC6B3yFUrp9j+KiFR8tX+x+SH7Nxy mo+Wh0u8P1ngu4WbgU5DcwnEDDZ2OYc= -----END CERTIFICATE-----Generated at Sun May 4 16:47:51 2025 by rpki-client