$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00a35b39-5848-35de-9215-4319534a9172.roa File: 00a35b39-5848-35de-9215-4319534a9172.roa (raw, json) Hash identifier: vxGg39jXSUG2ycv4UoavhvaB+Pc5ObAbBu3Rwhm3K9w= Subject key identifier: 5F:5A:7D:50:23:F3:FA:92:40:DD:43:34:B1:4B:5D:C6:F9:7D:73:7A Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BB7602775B23496273A9C0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00a35b39-5848-35de-9215-4319534a9172.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.244.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:76:02:77:5b:23:49:62:73:a9:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=53d5af74-d830-4464-abd6-964684c58780 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7e:28:fb:9f:ca:56:8e:c1:85:e8:99:02:72: ad:31:3e:c0:bd:da:f0:36:54:47:05:b3:62:53:de: 92:0a:52:c3:c8:71:cd:a4:d9:16:ac:1a:d9:c7:ba: 10:d6:7f:f2:d6:81:b4:e3:c6:69:33:7c:85:ff:40: c5:20:e1:6b:62:81:d8:0d:3d:12:62:8d:de:2f:2a: 5e:9b:00:26:ed:c6:86:e4:10:be:90:11:38:49:a7: cc:f9:28:5d:8f:e6:8f:dc:47:46:f4:2f:21:f1:7d: d2:47:d2:ee:db:b2:d8:30:c9:b9:38:a0:27:88:6b: b8:54:fe:32:b3:57:b3:e8:34:b7:2b:58:39:b2:13: c1:43:33:0c:f6:0a:ad:71:a0:54:54:94:a9:a5:52: ab:5d:9a:d7:99:aa:54:ae:49:92:c0:b3:04:c8:09: 7e:37:e2:cc:d9:5d:81:b6:a2:64:f1:01:e8:fb:9c: 9d:1f:3f:8b:a2:bf:62:8b:4d:dd:0a:91:c8:d7:65: 8a:a7:27:f7:cd:4a:22:7b:38:46:df:f4:67:6e:e7: af:5c:28:0f:07:b4:20:e8:20:76:81:70:16:81:d4: b0:fe:51:47:64:a4:fc:08:14:f4:03:fb:82:eb:40: 77:27:77:78:a7:49:86:db:7f:d6:56:21:81:26:79: 52:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:5A:7D:50:23:F3:FA:92:40:DD:43:34:B1:4B:5D:C6:F9:7D:73:7A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/00a35b39-5848-35de-9215-4319534a9172.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.244.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:45:52:95:24:5d:27:5c:fc:41:dc:03:f1:6c:96:54:64:87: a1:76:ca:91:7f:88:84:99:b7:83:0a:cb:85:10:96:fa:f1:d4: d0:c2:68:56:6a:a3:b5:1b:78:19:da:5b:40:6a:2b:33:23:c2: b8:ca:78:d0:96:ac:a9:22:f2:76:2d:59:a6:46:a3:4a:1e:50: c9:da:b3:e5:86:3a:71:74:51:f9:bb:64:e2:42:85:60:1d:dd: 97:a5:a9:83:4e:ca:44:f9:98:cd:0f:aa:e5:28:0a:61:82:b8: d9:b1:79:0f:58:91:80:c9:6d:66:b8:02:6b:1e:72:a8:b3:32: 9f:6e:6c:47:49:af:75:38:cf:2e:1f:a9:2c:12:4c:62:f7:a2: d0:6c:45:8b:82:e2:43:c6:8f:7a:53:f6:7b:3c:f0:d6:73:4c: f0:80:58:9a:81:fe:48:bc:56:3b:c4:a5:b1:81:a2:80:4b:2f: 5c:d6:1e:da:10:a7:5e:9e:25:1f:c0:19:1d:e1:85:14:f0:03: 62:b1:12:0b:bc:33:ee:43:83:01:0d:9c:dc:2a:e2:9b:73:c6: 30:05:d5:2a:5d:74:eb:21:c5:ef:3e:6c:e6:4c:e3:6e:94:c1: 9a:c7:b0:c5:cb:a8:df:e3:06:4b:7c:32:cd:e2:15:1a:49:60: 78:27:6c:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3YCd1sjSWJzqcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NTNkNWFmNzQtZDgzMC00NDY0LWFiZDYtOTY0Njg0YzU4NzgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1H4o+5/KVo7BheiZAnKtMT7AvdrwNlRHBbNi U96SClLDyHHNpNkWrBrZx7oQ1n/y1oG048ZpM3yF/0DFIOFrYoHYDT0SYo3eLype mwAm7caG5BC+kBE4SafM+Shdj+aP3EdG9C8h8X3SR9Lu27LYMMm5OKAniGu4VP4y s1ez6DS3K1g5shPBQzMM9gqtcaBUVJSppVKrXZrXmapUrkmSwLMEyAl+N+LM2V2B tqJk8QHo+5ydHz+Lor9ii03dCpHI12WKpyf3zUoiezhG3/RnbuevXCgPB7Qg6CB2 gXAWgdSw/lFHZKT8CBT0A/uC60B3J3d4p0mG23/WViGBJnlSswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF9afVAj8/qSQN1DNLFLXcb5fXN6MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDBhMzViMzktNTg0OC0z NWRlLTkyMTUtNDMxOTUzNGE5MTcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBb0MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9FUpUkXSdc/EHcA/FsllRkh6F2ypF/iISZt4MKy4UQlvrx1NDCaFZq o7UbeBnaW0BqKzMjwrjKeNCWrKki8nYtWaZGo0oeUMnas+WGOnF0Ufm7ZOJChWAd 3ZelqYNOykT5mM0PquUoCmGCuNmxeQ9YkYDJbWa4AmsecqizMp9ubEdJr3U4zy4f qSwSTGL3otBsRYuC4kPGj3pT9ns88NZzTPCAWJqB/ki8VjvEpbGBooBLL1zWHtoQ p16eJR/AGR3hhRTwA2KxEgu8M+5DgwENnNwq4ptzxjAF1SpddOshxe8+bOZM426U wZrHsMXLqN/jBkt8Ms3iFRpJYHgnbG8= -----END CERTIFICATE-----Generated at Sun Apr 27 04:09:15 2025 by rpki-client