$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa File: 23032a6b-2d78-3ea6-abeb-c2770f474e29.roa (raw, json) Hash identifier: 7vyUxaqTMsoaTRhTMt0Rc3d0Q0TkBvH0B0/QBFm5snY= Subject key identifier: 4B:70:3B:87:EF:B3:87:64:05:4F:88:B1:2F:0C:30:84:B7:D9:2E:FD Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BB77377594BB3E3FFE3300 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:77:37:75:94:bb:3e:3f:fe:33:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=cfa5bba6-9649-4166-9e23-85742db8e568 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c5:7e:bb:23:b4:4d:48:9a:18:77:97:cc:55: cb:6e:a6:8f:e8:14:13:e4:2d:b1:ad:2e:6a:d1:30: 98:d7:11:cd:ca:fc:c1:9a:76:3c:89:d5:8c:10:17: 77:f9:b4:87:12:31:fb:97:25:ff:ba:0a:b3:4e:62: 62:f7:b0:85:e6:f8:5c:bb:30:87:e0:c2:1d:10:5e: 69:35:1a:46:2c:08:ae:85:40:ec:d2:84:3e:6a:3e: 32:48:e0:4f:ec:2c:79:7d:8f:ee:61:83:63:ad:78: 17:59:46:f5:e2:6d:1f:b9:42:5d:75:83:3c:83:b8: 85:3f:14:38:3f:cc:cf:8b:da:ee:d7:e7:13:60:c6: eb:46:70:7d:c9:d8:4f:66:95:c7:a0:5f:59:4e:8b: 89:db:c3:0e:05:8c:58:18:37:3a:7b:ad:af:75:a9: 3a:d2:b5:fc:05:d3:c9:7a:0f:8c:f9:1b:ea:e4:ec: 90:f5:ed:06:bc:43:8d:05:60:99:83:74:ae:df:b8: c7:29:5b:6b:b8:dc:4f:bf:6f:e4:87:66:f9:22:c6: 28:03:d1:fc:5e:4c:67:6c:ce:a8:72:d9:40:ee:82: 37:df:75:e1:0c:f0:df:57:c0:d1:3c:64:39:bb:55: 51:a9:6d:d4:26:5c:44:e6:dd:8c:12:12:54:6a:c1: 3f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:70:3B:87:EF:B3:87:64:05:4F:88:B1:2F:0C:30:84:B7:D9:2E:FD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/23032a6b-2d78-3ea6-abeb-c2770f474e29.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:da:cd:6f:f5:6c:0c:03:10:b9:40:d7:da:2c:08:1d:56:28: 6a:f3:b4:c0:11:33:bd:ca:a3:e4:e5:bf:3c:78:ad:7f:f8:df: 53:e1:5f:a1:bd:5e:a8:14:30:3c:cd:01:9b:10:44:c7:52:22: f1:d8:39:91:99:b7:b2:ae:84:1d:9c:40:0c:33:cd:c2:38:85: 04:23:d1:ee:d9:9c:e4:69:f8:fd:44:3c:a8:8f:98:8a:36:ce: 47:01:b7:54:c5:9f:24:b8:ec:1a:7b:fa:26:66:05:82:6d:bd: 40:92:fb:c1:80:3c:77:88:05:8d:cd:12:24:cf:89:70:d7:6c: 19:0c:a0:40:89:d1:dc:75:69:0f:39:5c:ec:a2:01:df:ba:0d: e6:9e:24:65:96:72:22:9a:f4:df:f4:6f:aa:88:54:47:b3:d8: 34:64:eb:f1:b2:39:e2:d5:2d:89:03:a1:00:3c:01:4c:f3:25: 94:06:0a:c4:ab:b1:27:08:5d:9d:b5:8c:66:37:5e:86:46:89: 6b:b5:bc:42:0c:14:5b:77:8b:cc:2b:04:4d:8e:d3:5b:e7:07: ec:89:66:2d:05:3e:b6:33:8b:9e:ef:a8:8b:73:74:04:59:c9: ed:b6:e9:55:4b:0b:67:34:77:0f:22:1a:06:8f:57:0f:8c:10: aa:b1:81:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3c3dZS7Pj/+MwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk Y2ZhNWJiYTYtOTY0OS00MTY2LTllMjMtODU3NDJkYjhlNTY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsV+uyO0TUiaGHeXzFXLbqaP6BQT5C2xrS5q 0TCY1xHNyvzBmnY8idWMEBd3+bSHEjH7lyX/ugqzTmJi97CF5vhcuzCH4MIdEF5p NRpGLAiuhUDs0oQ+aj4ySOBP7Cx5fY/uYYNjrXgXWUb14m0fuUJddYM8g7iFPxQ4 P8zPi9ru1+cTYMbrRnB9ydhPZpXHoF9ZTouJ28MOBYxYGDc6e62vdak60rX8BdPJ eg+M+Rvq5OyQ9e0GvEONBWCZg3Su37jHKVtruNxPv2/kh2b5IsYoA9H8XkxnbM6o ctlA7oI333XhDPDfV8DRPGQ5u1VRqW3UJlxE5t2MEhJUasE/iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEtwO4fvs4dkBU+IsS8MMIS32S79MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMjMwMzJhNmItMmQ3OC0z ZWE2LWFiZWItYzI3NzBmNDc0ZTI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI7azW/1bAwDELlA19osCB1WKGrztMARM73Ko+Tlvzx4rX/431PhX6G9 XqgUMDzNAZsQRMdSIvHYOZGZt7KuhB2cQAwzzcI4hQQj0e7ZnORp+P1EPKiPmIo2 zkcBt1TFnyS47Bp7+iZmBYJtvUCS+8GAPHeIBY3NEiTPiXDXbBkMoECJ0dx1aQ85 XOyiAd+6DeaeJGWWciKa9N/0b6qIVEez2DRk6/GyOeLVLYkDoQA8AUzzJZQGCsSr sScIXZ21jGY3XoZGiWu1vEIMFFt3i8wrBE2O01vnB+yJZi0FPrYzi57vqItzdARZ ye226VVLC2c0dw8iGgaPVw+MEKqxgbE= -----END CERTIFICATE-----Generated at Sun Apr 27 12:47:58 2025 by rpki-client