$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa File: 4134f950-28af-3072-bb21-219f9bd36984.roa (raw, json) Hash identifier: 1f1/KJ5oPLLEKLc9sTb/0dWD/SN04Vmm4IwiOs7CAhk= Subject key identifier: 27:AE:57:ED:A5:2E:40:B3:5F:A5:28:60:E6:62:C9:C7:E1:67:F5:CE Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24A962488ACAEC06F52980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.205.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a9:62:48:8a:ca:ec:06:f5:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=e02f2080-b57d-4145-9998-2d07673a9caa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:ef:95:18:63:3d:43:69:c4:64:f8:d9:b4:76: 37:15:c2:3e:d1:32:52:0e:a3:8c:f0:cf:ee:e4:c4: 69:4b:f5:9a:e7:95:4a:03:66:30:dc:5a:b8:43:1a: c0:4a:7f:22:93:e7:47:b6:bb:e0:6c:9c:30:30:00: f5:dd:14:04:53:3d:4a:80:8a:ea:dd:b6:62:13:9b: 3f:6d:d9:1d:21:65:04:15:09:f1:b8:e3:fc:5d:04: be:8d:73:d1:ee:83:cf:b0:2e:c5:b5:a0:65:3a:41: df:66:b2:54:47:55:03:83:34:f2:21:8d:b8:9f:d8: 8f:9c:c8:9b:b0:21:7c:84:26:a0:4a:6d:15:4f:65: 09:04:b7:a9:66:d8:4d:9c:4f:5d:7d:33:1d:ce:06: cd:49:60:50:41:0e:7a:7f:5f:6e:c7:bd:c0:c0:a0: 9a:21:c8:30:fd:15:aa:f4:69:19:dd:ab:97:1b:36: 45:3d:4a:5f:be:77:69:f4:cc:8a:97:90:2a:3a:48: 1b:0a:96:54:ac:d7:86:e8:d1:ac:90:fa:8f:3f:40: 11:7d:65:f9:f0:98:41:54:71:00:ca:4c:48:be:c1: 06:9f:bd:85:76:d9:c5:13:e8:ec:ac:72:80:79:a3: f8:61:ad:e8:20:48:20:2d:df:4d:91:32:64:05:2e: 34:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:AE:57:ED:A5:2E:40:B3:5F:A5:28:60:E6:62:C9:C7:E1:67:F5:CE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4134f950-28af-3072-bb21-219f9bd36984.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.205.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:c8:d5:ef:92:6c:c5:6e:a6:8f:5d:2f:af:98:66:22:92:ee: 21:90:fb:c5:3b:58:84:73:38:59:58:57:54:df:e1:41:66:29: ae:09:8f:35:b5:d6:5d:d3:ab:90:e2:a2:8a:09:58:50:54:e4: 9e:28:e1:83:74:7d:67:8c:e5:df:4c:6b:f6:e0:f9:06:43:0e: 28:9b:b4:87:e3:20:c6:92:53:e8:20:44:34:b1:45:39:45:c7: 18:20:92:e3:2d:f9:17:d0:65:b9:b4:cd:a2:c6:e5:8a:07:bc: bd:3b:57:5c:94:80:6a:04:79:56:59:92:d3:b3:cd:3e:47:4a: f8:6b:ed:ec:31:7e:eb:af:4b:e7:0c:a4:28:40:3d:cf:d7:d0: 46:34:57:9f:48:61:46:e4:5d:23:b4:4f:df:3f:6c:5c:cb:12: 0a:9a:a8:30:56:e5:cf:e8:07:37:bc:6d:7e:b0:bc:c0:a5:06: 26:66:74:8f:44:4e:cc:a8:c3:49:0c:42:14:7c:34:52:e8:64: a3:e2:7f:98:39:09:22:b4:9a:24:48:99:7a:bd:0b:18:16:17: 3f:07:71:2a:85:40:a1:4d:93:06:e5:0b:da:aa:46:8c:70:95: fb:de:0b:4b:44:e5:f4:89:cf:f9:fe:0e:22:b7:e7:84:bf:4a: f0:ea:3d:0d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKliSIrK7Ab1KYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTAyZjIwODAtYjU3ZC00MTQ1LTk5OTgtMmQwNzY3M2E5Y2FhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAje+VGGM9Q2nEZPjZtHY3FcI+0TJSDqOM8M/u 5MRpS/Wa55VKA2Yw3Fq4QxrASn8ik+dHtrvgbJwwMAD13RQEUz1KgIrq3bZiE5s/ bdkdIWUEFQnxuOP8XQS+jXPR7oPPsC7FtaBlOkHfZrJUR1UDgzTyIY24n9iPnMib sCF8hCagSm0VT2UJBLepZthNnE9dfTMdzgbNSWBQQQ56f19ux73AwKCaIcgw/RWq 9GkZ3auXGzZFPUpfvndp9MyKl5AqOkgbCpZUrNeG6NGskPqPP0ARfWX58JhBVHEA ykxIvsEGn72FdtnFE+jsrHKAeaP4Ya3oIEggLd9NkTJkBS40zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeuV+2lLkCzX6UoYOZiycfhZ/XOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNDEzNGY5NTAtMjhhZi0z MDcyLWJiMjEtMjE5ZjliZDM2OTg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACXI1e+SbMVupo9dL6+YZiKS7iGQ+8U7WIRzOFlYV1Tf4UFmKa4JjzW1 1l3Tq5DioooJWFBU5J4o4YN0fWeM5d9Ma/bg+QZDDiibtIfjIMaSU+ggRDSxRTlF xxggkuMt+RfQZbm0zaLG5YoHvL07V1yUgGoEeVZZktOzzT5HSvhr7ewxfuuvS+cM pChAPc/X0EY0V59IYUbkXSO0T98/bFzLEgqaqDBW5c/oBze8bX6wvMClBiZmdI9E Tsyow0kMQhR8NFLoZKPif5g5CSK0miRImXq9CxgWFz8HcSqFQKFNkwblC9qqRoxw lfveC0tE5fSJz/n+DiK354S/SvDqPQ0= -----END CERTIFICATE-----Generated at Sun Apr 27 04:26:16 2025 by rpki-client