$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa File: fbefcfd6-d05a-3671-bab5-b2929939a916.roa (raw, json) Hash identifier: jc2ZRg/zXFKj9Z1JXrtM6aXS1n1rcfzDVGqi8MWOccg= Subject key identifier: D7:D2:18:64:A2:C9:D4:84:54:AA:66:F1:F5:50:A6:6E:8E:26:40:20 Certificate issuer: /CN=6063814d-5183-49de-90ee-84cbbecde422 Certificate serial: 010D0C9F43285849A61F3AEDC10A24C1039FFAC0 Authority key identifier: FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa Signing time: Sat 26 Apr 2025 01:00:47 +0000 ROA not before: Sat 26 Apr 2025 01:00:47 +0000 ROA not after: Fri 25 Jul 2025 01:00:47 +0000 asID: 401307 IP address blocks: 136.228.36.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 03 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a6:1f:3a:ed:c1:0a:24:c1:03:9f:fa:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6063814d-5183-49de-90ee-84cbbecde422 Validity Not Before: Apr 26 01:00:47 2025 GMT Not After : Jul 25 01:00:47 2025 GMT Subject: CN=8cbffb9d-aeb5-4426-8b3d-3197e19bab00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:82:d0:80:43:e2:45:75:61:11:ff:67:b6:0c: a8:99:35:fd:53:7a:10:dd:1d:e8:be:b4:a6:d3:32: 53:32:e7:65:f0:25:0c:31:c2:1f:09:98:ce:4b:46: 0e:9e:40:43:1f:a9:63:bf:22:1d:8d:1e:d9:7f:18: 5a:ff:2f:17:3d:bb:0d:a7:b3:48:01:bf:ed:d2:95: c0:75:bd:0f:e7:d3:b7:06:8c:17:a3:31:89:b3:f8: ff:a1:41:b2:48:fc:9f:bc:65:75:a1:35:3f:7f:af: 96:28:9c:4a:4e:77:cb:72:4c:ad:20:b7:f4:98:3a: 18:bf:ab:22:a1:26:bf:bb:c6:4d:45:d7:23:b8:9d: 4d:7f:a1:27:f1:11:30:37:1c:05:8e:32:0c:85:a9: 37:a1:12:dc:a6:34:a9:0a:ae:ec:85:48:80:03:ec: 85:c2:81:1e:5e:30:bb:57:2d:30:10:87:49:f0:39: 08:e3:1e:83:b2:3d:d0:58:1d:75:61:79:8a:6a:c1: 30:59:fc:77:fe:cd:bc:1c:a9:92:ee:82:1b:f1:bb: c8:06:65:c2:d1:7e:73:6d:cc:64:f7:30:68:fc:52: bb:d0:9b:93:f0:20:8a:94:1f:cb:a7:f1:a5:09:92: eb:05:0f:8e:88:70:9a:30:40:a0:8f:21:24:13:80: 93:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:D2:18:64:A2:C9:D4:84:54:AA:66:F1:F5:50:A6:6E:8E:26:40:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/fbefcfd6-d05a-3671-bab5-b2929939a916.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422/6063814d-5183-49de-90ee-84cbbecde422.crl X509v3 Authority Key Identifier: keyid:FA:81:4A:59:8B:87:77:F0:0C:1A:FA:A0:60:0E:C3:86:5B:F7:01:C0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6063814d-5183-49de-90ee-84cbbecde422.cer sbgp-ipAddrBlock: critical IPv4: 136.228.36.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:1b:c5:3f:95:49:cc:9a:28:98:45:1e:c7:7b:f8:ea:58:ed: 3f:f0:cf:06:d2:51:6a:7a:fe:01:86:e7:ad:da:b6:db:97:f5: 3f:09:a5:fa:1d:0d:4e:ba:b7:a1:1c:dc:e2:c3:56:58:08:88: 54:6b:57:35:fc:9a:80:bc:7a:aa:84:31:2f:1b:28:fc:36:06: c1:03:87:15:0e:cc:74:17:8b:42:f5:b0:80:72:b0:96:30:f8: 87:f1:c3:76:73:54:32:7b:64:f2:42:35:7a:7d:2f:9d:a4:c2: 14:5d:68:b6:a8:23:97:9b:a5:65:cf:4f:4e:4f:6a:c4:0e:9f: 39:c2:e7:2c:06:97:cd:7e:36:ef:e7:0c:3a:e5:25:44:db:88: 98:0a:c7:ef:35:fb:f6:de:12:ca:c6:35:c3:d8:40:1c:e8:b5: c6:94:50:25:ea:81:32:99:0b:b8:b5:9b:51:be:85:71:3f:11: 52:9f:b5:2e:94:41:0e:71:38:08:49:3e:bc:1c:37:63:06:1a: 68:59:b3:1c:06:49:86:0d:30:30:36:04:91:54:78:ac:7c:97: fd:2c:eb:e4:71:44:46:8a:b9:6c:9b:67:39:c5:94:41:1a:c8: 9d:38:25:b4:c8:7f:7f:ad:16:62:15:e0:0d:39:ac:c0:41:3b: 76:97:69:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmHzrtwQokwQOf+sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjA2MzgxNGQtNTE4My00OWRlLTkwZWUtODRjYmJlY2Rl NDIyMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk OGNiZmZiOWQtYWViNS00NDI2LThiM2QtMzE5N2UxOWJhYjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0YLQgEPiRXVhEf9ntgyomTX9U3oQ3R3ovrSm 0zJTMudl8CUMMcIfCZjOS0YOnkBDH6ljvyIdjR7Zfxha/y8XPbsNp7NIAb/t0pXA db0P59O3BowXozGJs/j/oUGySPyfvGV1oTU/f6+WKJxKTnfLckytILf0mDoYv6si oSa/u8ZNRdcjuJ1Nf6En8REwNxwFjjIMhak3oRLcpjSpCq7shUiAA+yFwoEeXjC7 Vy0wEIdJ8DkI4x6Dsj3QWB11YXmKasEwWfx3/s28HKmS7oIb8bvIBmXC0X5zbcxk 9zBo/FK70JuT8CCKlB/Lp/GlCZLrBQ+OiHCaMECgjyEkE4CTKQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfSGGSiydSEVKpm8fVQpm6OJkAgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MDYz ODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNiYmVjZGU0MjIvZmJlZmNmZDYtZDA1YS0z NjcxLWJhYjUtYjI5Mjk5MzlhOTE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjA2MzgxNGQtNTE4My00OWRlLTkw ZWUtODRjYmJlY2RlNDIyLzYwNjM4MTRkLTUxODMtNDlkZS05MGVlLTg0Y2JiZWNk ZTQyMi5jcmwwHwYDVR0jBBgwFoAU+oFKWYuHd/AMGvqgYA7Dhlv3AcAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MDYzODE0ZC01MTgzLTQ5ZGUtOTBlZS04NGNi YmVjZGU0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOQkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgbxT+VScyaKJhFHsd7+OpY7T/wzwbSUWp6/gGG563attuX9T8Jpfod DU66t6Ec3OLDVlgIiFRrVzX8moC8eqqEMS8bKPw2BsEDhxUOzHQXi0L1sIBysJYw +Ifxw3ZzVDJ7ZPJCNXp9L52kwhRdaLaoI5ebpWXPT05PasQOnznC5ywGl81+Nu/n DDrlJUTbiJgKx+81+/beEsrGNcPYQBzotcaUUCXqgTKZC7i1m1G+hXE/EVKftS6U QQ5xOAhJPrwcN2MGGmhZsxwGSYYNMDA2BJFUeKx8l/0s6+RxREaKuWybZznFlEEa yJ04JbTIf3+tFmIV4A05rMBBO3aXaak= -----END CERTIFICATE-----Generated at Fri May 2 13:52:02 2025 by rpki-client