$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa File: 072c3318-f424-3218-b587-7fa656d7bc1d.roa (raw, json) Hash identifier: Tae/h25mj/v/uh3g4dD3sQX6hh/Gzw1nvNllomZ5Faw= Subject key identifier: B2:28:1D:E9:14:1A:6A:3F:63:4B:25:57:22:FB:6F:8E:58:80:B7:E3 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F43285849806F1F2E74E09A46A560B490 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 16509 IP address blocks: 136.226.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:1f:2e:74:e0:9a:46:a5:60:b4:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=bd229ca8-0c20-4acc-8d23-8f2daffbe54a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:5c:2a:55:72:74:67:db:50:55:72:85:4e:5a: e6:5b:60:7f:31:63:b4:60:ca:d7:47:19:92:07:7e: 3e:a0:ad:74:90:f9:c3:cf:53:ba:58:1a:8e:43:7f: 3c:dd:b5:ab:98:cd:40:a6:d0:a3:e2:f2:4a:99:19: 67:2a:d0:ed:1c:77:49:77:a6:79:89:c7:f7:cb:c1: 83:8d:c8:52:f4:ea:49:a5:39:60:fa:43:d4:23:8f: 14:cd:c7:43:fc:c2:f1:22:00:14:28:ed:cc:fc:b8: ad:e9:8a:3e:33:9c:b4:38:cd:73:5e:46:5c:cf:5c: ff:15:3a:59:52:37:87:21:91:40:55:c8:e2:89:74: 3e:53:4e:ce:45:af:f8:56:b1:99:45:77:b0:c0:eb: 9b:48:24:fc:e5:69:c5:4d:bf:de:10:fc:49:6a:95: c5:4f:97:eb:50:21:21:47:a3:4f:48:6d:7a:74:a5: be:ec:70:6f:a3:28:35:5b:a9:8c:14:e5:7a:f8:c4: 01:cb:10:46:f4:df:1c:f4:4d:ee:00:07:c2:9e:03: 3d:26:bd:16:ee:f5:cf:b8:c8:29:1d:ab:9e:94:cd: f2:47:bd:c0:d2:83:60:b9:9f:6a:46:a5:b8:2f:1e: 49:44:07:75:28:32:5b:b1:4d:15:e6:7b:92:35:02: 3e:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:28:1D:E9:14:1A:6A:3F:63:4B:25:57:22:FB:6F:8E:58:80:B7:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/072c3318-f424-3218-b587-7fa656d7bc1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b0:30:9b:b9:72:4f:0e:49:71:94:c0:24:8c:d1:6b:1d:ad:69: b4:07:4e:41:00:7e:84:35:03:0a:d0:13:41:b0:64:c8:41:83: 28:e3:34:6d:df:7b:1a:36:1d:51:e5:3f:fc:e7:61:30:3b:80: da:46:4d:46:67:52:35:e0:b7:cd:59:37:89:f3:2b:f9:f1:f3: 19:02:64:17:f4:89:3b:da:e7:eb:cf:7d:ce:d8:a4:83:8b:89: b7:27:5c:57:7a:a7:c7:67:31:cd:15:1b:56:cc:8f:45:4e:2e: 63:54:14:92:80:fa:69:1d:66:b5:2c:9f:0e:8f:db:bb:ba:02: 34:66:8d:0a:00:90:51:f4:f6:e6:02:de:25:21:09:5f:ca:3a: d6:26:10:c7:b9:71:20:ee:93:c7:16:cc:57:42:39:13:5d:f7: 4e:da:21:91:f9:c9:8e:3d:51:ed:13:1e:3c:6a:15:9a:9f:54: 32:da:00:a9:b4:71:46:42:8a:ea:77:e6:f1:46:dd:7f:72:92: 73:c5:ff:08:4d:f3:7f:66:a1:2f:42:4d:81:e3:47:90:09:bc: 8d:75:26:19:96:94:b0:9b:ab:66:cb:6f:5c:ba:da:07:8c:24: 4b:18:d9:2b:7b:45:fb:3f:dd:94:17:4f:b1:30:db:b1:51:d4: 25:df:28:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbx8udOCaRqVgtJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk YmQyMjljYTgtMGMyMC00YWNjLThkMjMtOGYyZGFmZmJlNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxFwqVXJ0Z9tQVXKFTlrmW2B/MWO0YMrXRxmS B34+oK10kPnDz1O6WBqOQ3883bWrmM1AptCj4vJKmRlnKtDtHHdJd6Z5icf3y8GD jchS9OpJpTlg+kPUI48UzcdD/MLxIgAUKO3M/Lit6Yo+M5y0OM1zXkZcz1z/FTpZ UjeHIZFAVcjiiXQ+U07ORa/4VrGZRXewwOubSCT85WnFTb/eEPxJapXFT5frUCEh R6NPSG16dKW+7HBvoyg1W6mMFOV6+MQByxBG9N8c9E3uAAfCngM9Jr0W7vXPuMgp HauelM3yR73A0oNguZ9qRqW4Lx5JRAd1KDJbsU0V5nuSNQI+uQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIoHekUGmo/Y0slVyL7b45YgLfjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvMDcyYzMzMTgtZjQyNC0z MjE4LWI1ODctN2ZhNjU2ZDdiYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOLcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALAwm7lyTw5JcZTAJIzRax2tabQHTkEAfoQ1AwrQE0GwZMhBgyjjNG3f exo2HVHlP/znYTA7gNpGTUZnUjXgt81ZN4nzK/nx8xkCZBf0iTva5+vPfc7YpIOL ibcnXFd6p8dnMc0VG1bMj0VOLmNUFJKA+mkdZrUsnw6P27u6AjRmjQoAkFH09uYC 3iUhCV/KOtYmEMe5cSDuk8cWzFdCORNd907aIZH5yY49Ue0THjxqFZqfVDLaAKm0 cUZCiup35vFG3X9yknPF/whN839moS9CTYHjR5AJvI11JhmWlLCbq2bLb1y62geM JEsY2St7Rfs/3ZQXT7Ew27FR1CXfKMc= -----END CERTIFICATE-----Generated at Sat Apr 26 16:14:47 2025 by rpki-client