$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa File: 35c38a7e-738b-346e-a848-9eba35a136f2.roa (raw, json) Hash identifier: nI81hkl4FgXqs9dK7yRAXJ9hJECj/+QijA0+DSDXwWs= Subject key identifier: BE:23:3F:76:CC:5B:A2:F6:AE:1B:8A:2E:E0:15:9A:C3:61:84:F7:22 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BB641256EC776DD194CA80 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.242.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:64:12:56:ec:77:6d:d1:94:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=0df2e8d0-fb07-46f9-bf8f-85c9c92193b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:a3:1b:d3:ed:54:e5:c0:92:53:b6:ed:d2:3e: ef:9d:48:9b:ce:35:72:bb:51:f0:76:d1:fa:21:84: 8a:66:36:93:36:71:f9:11:ca:e6:e2:b1:5e:25:aa: 6c:99:ea:9d:30:98:fb:c4:f9:b9:f5:9f:fc:65:12: 2c:34:d6:59:48:2e:de:86:1d:04:4f:68:ab:14:53: ff:4a:1f:a8:e6:c8:28:a3:ae:4e:12:f6:b9:2e:ff: e6:87:2d:db:e0:46:bd:31:35:02:7c:41:cd:b1:8d: 94:d3:59:b2:5b:35:00:47:26:9e:a4:7a:63:52:02: 50:d7:5f:47:bf:6b:c7:34:59:df:0f:41:f0:da:30: c0:65:61:a5:94:14:3a:f1:85:61:48:15:77:55:56: 2a:ab:93:1b:1f:86:16:06:72:f6:b6:d2:b8:b7:92: 03:6c:ae:2f:65:94:92:c2:e4:2d:2f:ba:5d:e4:10: 3a:fb:3e:22:38:33:90:43:3c:54:cf:f0:0a:8f:88: 92:ac:f9:a2:c5:7b:91:7f:30:1b:49:96:95:d7:1f: fc:49:75:38:de:6d:ff:65:17:a6:a2:f6:30:44:6e: fe:a1:aa:8b:cb:13:7f:25:00:36:a7:75:e8:88:fa: de:ca:8e:c5:7e:e7:11:da:6b:c8:c6:06:bb:bd:cf: 3f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:23:3F:76:CC:5B:A2:F6:AE:1B:8A:2E:E0:15:9A:C3:61:84:F7:22 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/35c38a7e-738b-346e-a848-9eba35a136f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.242.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:0b:14:b8:86:77:f0:1e:8f:7e:a3:e9:a2:b6:72:bc:90:6c: 7a:37:e0:2e:16:99:1c:4c:67:bc:51:48:61:95:3a:0f:2a:d0: a2:c4:07:6f:a9:e7:3d:31:4a:b9:bd:7a:c5:91:b2:be:ee:78: ba:e1:52:a2:be:ef:db:e6:14:77:7f:9b:ff:6b:18:9d:1d:d7: 64:6b:79:45:2f:65:4f:f7:1c:89:58:92:a0:be:91:ec:73:e2: e9:81:04:50:e2:02:4e:c1:07:24:96:f5:68:f8:a4:0e:de:8c: 74:48:38:8d:fa:8a:27:bd:49:66:68:46:a2:02:8a:09:cf:61: 69:8b:54:a7:33:8e:6e:0e:9d:58:21:17:92:8b:58:f2:44:7e: 1b:d4:15:37:61:12:ba:15:8f:4a:ab:b0:96:7f:73:52:62:11: 96:da:9d:8b:0e:99:bc:bc:5c:7c:90:18:8c:40:d1:23:16:cb: 8a:5d:03:c3:b8:17:99:41:99:a4:39:45:e4:88:63:c4:62:1e: da:f7:e5:9a:21:b9:f7:4e:32:e0:25:5e:ad:12:39:58:2a:a7: 1f:36:07:ee:58:08:11:ea:0b:16:c7:c2:a5:ca:aa:36:ad:c1: 53:15:91:a7:dd:63:4f:be:9d:b2:29:5c:0b:90:bc:2d:86:27: 92:29:cc:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2QSVux3bdGUyoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MGRmMmU4ZDAtZmIwNy00NmY5LWJmOGYtODVjOWM5MjE5M2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoaMb0+1U5cCSU7bt0j7vnUibzjVyu1HwdtH6 IYSKZjaTNnH5Ecrm4rFeJapsmeqdMJj7xPm59Z/8ZRIsNNZZSC7ehh0ET2irFFP/ Sh+o5sgoo65OEva5Lv/mhy3b4Ea9MTUCfEHNsY2U01myWzUARyaepHpjUgJQ119H v2vHNFnfD0Hw2jDAZWGllBQ68YVhSBV3VVYqq5MbH4YWBnL2ttK4t5IDbK4vZZSS wuQtL7pd5BA6+z4iODOQQzxUz/AKj4iSrPmixXuRfzAbSZaV1x/8SXU43m3/ZRem ovYwRG7+oaqLyxN/JQA2p3XoiPreyo7FfucR2mvIxga7vc8/NwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL4jP3bMW6L2rhuKLuAVmsNhhPciMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMzVjMzhhN2UtNzM4Yi0z NDZlLWE4NDgtOWViYTM1YTEzNmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbyMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEMLFLiGd/Aej36j6aK2cryQbHo34C4WmRxMZ7xRSGGVOg8q0KLEB2+p 5z0xSrm9esWRsr7ueLrhUqK+79vmFHd/m/9rGJ0d12RreUUvZU/3HIlYkqC+kexz 4umBBFDiAk7BBySW9Wj4pA7ejHRIOI36iie9SWZoRqICignPYWmLVKczjm4OnVgh F5KLWPJEfhvUFTdhEroVj0qrsJZ/c1JiEZbanYsOmby8XHyQGIxA0SMWy4pdA8O4 F5lBmaQ5ReSIY8RiHtr35ZohufdOMuAlXq0SOVgqpx82B+5YCBHqCxbHwqXKqjat wVMVkafdY0++nbIpXAuQvC2GJ5IpzEQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:19:29 2025 by rpki-client