$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa File: 49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa (raw, json) Hash identifier: AmHozFVLt2yn6OxJtSdrDbpFQ45tiqh/4ErJnXbnLys= Subject key identifier: 42:9E:F9:70:64:C3:26:5B:BB:E3:F3:BE:3D:6A:20:68:79:AD:8A:B8 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24A1B0CEA3B7CC662FD140 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a1:b0:ce:a3:b7:cc:66:2f:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8a425209-f3fd-4728-918d-f93987d500ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:75:46:f3:82:42:12:d2:2e:bb:05:35:de:bf: e7:08:09:da:a0:44:bd:d8:b7:d5:60:56:6c:6c:1b: e1:ba:db:70:e7:1b:99:2d:b5:ea:3b:54:18:43:ae: 80:da:b1:c5:cc:47:9f:b5:c8:ab:c6:89:6c:20:72: 4c:ec:09:cd:d5:91:5c:ee:4c:83:f7:a6:af:8b:aa: 33:5e:c9:63:9b:89:62:91:50:56:07:48:51:be:d5: 6a:43:44:66:a1:48:39:48:fa:78:dd:99:51:a5:83: a0:37:65:e4:12:b6:e4:e9:b8:c2:63:9e:c4:1e:2a: 1d:d6:29:51:b0:69:55:32:70:ae:41:f1:01:25:4b: 9f:06:81:c6:44:7a:13:ed:64:0c:d2:c1:db:92:56: a7:5d:92:f9:d5:13:23:8b:2e:8e:81:2d:3d:73:bc: e1:2e:5a:ee:22:9f:95:73:f4:1c:f2:73:22:e4:05: ec:9c:4f:06:a6:b5:2c:b7:fc:9a:c4:14:96:3e:98: 17:5c:aa:62:63:87:85:b6:65:b0:1f:6a:3b:b0:e9: 48:5e:ce:38:a2:8a:9d:b4:e0:43:0c:ab:12:25:da: 60:6f:66:7b:ec:65:c3:9f:60:a4:c5:9a:b7:6c:90: f0:31:fa:bb:4c:c8:af:0f:15:46:96:6d:aa:e4:11: 07:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:9E:F9:70:64:C3:26:5B:BB:E3:F3:BE:3D:6A:20:68:79:AD:8A:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/49ee8a1a-ab4d-356b-95c9-6509fb28642c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:98:a0:b5:45:84:7a:f7:51:88:00:d0:74:ad:e2:1c:10:fb: e3:d4:80:e2:61:b3:1f:65:6e:55:fe:7a:fe:a0:26:d4:b6:63: e8:e3:2e:aa:2e:ce:83:af:5b:07:88:9c:0d:49:04:ae:a3:0c: e4:96:03:b3:d8:e0:51:62:21:32:42:76:35:77:d8:f5:5e:12: 6a:b2:fc:01:b7:06:c5:cd:74:87:5a:4b:27:4c:61:d5:62:c1: c7:15:51:1d:1a:ce:2a:01:ee:b0:80:80:19:12:2b:4e:12:0b: 8c:d6:e5:1f:bd:fa:fd:bd:e0:c9:61:7d:82:53:1e:2a:7e:d9: b0:ed:18:db:25:f6:33:3f:16:e0:67:63:7c:39:44:87:ef:65: 34:ff:75:9e:18:1e:13:48:c8:e4:df:88:a9:7e:87:15:dd:5f: 65:8a:86:a5:c7:80:1a:66:44:7a:b8:15:c8:9f:4d:db:44:e1: 0d:bc:d7:60:3b:77:f7:a8:d3:06:b6:b1:a5:af:fb:42:16:88: 99:cf:37:b0:62:fe:60:92:ec:95:a2:29:a2:40:c6:82:58:97: 45:f9:ef:b4:d4:2d:ba:58:29:ea:d8:53:75:f3:31:08:1a:c2: 0d:03:e7:c7:8e:d0:69:ab:6a:c8:67:6c:e7:2b:ed:c2:c0:fb: 88:e4:78:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKGwzqO3zGYv0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGE0MjUyMDktZjNmZC00NzI4LTkxOGQtZjkzOTg3ZDUwMGFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHVG84JCEtIuuwU13r/nCAnaoES92LfVYFZs bBvhuttw5xuZLbXqO1QYQ66A2rHFzEeftcirxolsIHJM7AnN1ZFc7kyD96avi6oz Xsljm4likVBWB0hRvtVqQ0RmoUg5SPp43ZlRpYOgN2XkErbk6bjCY57EHiod1ilR sGlVMnCuQfEBJUufBoHGRHoT7WQM0sHbklanXZL51RMjiy6OgS09c7zhLlruIp+V c/Qc8nMi5AXsnE8GprUst/yaxBSWPpgXXKpiY4eFtmWwH2o7sOlIXs44ooqdtOBD DKsSJdpgb2Z77GXDn2CkxZq3bJDwMfq7TMivDxVGlm2q5BEHswIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKe+XBkwyZbu+Pzvj1qIGh5rYq4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNDllZThhMWEtYWI0ZC0z NTZiLTk1YzktNjUwOWZiMjg2NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB6YoLVFhHr3UYgA0HSt4hwQ++PUgOJhsx9lblX+ev6gJtS2Y+jjLqou zoOvWweInA1JBK6jDOSWA7PY4FFiITJCdjV32PVeEmqy/AG3BsXNdIdaSydMYdVi wccVUR0azioB7rCAgBkSK04SC4zW5R+9+v294MlhfYJTHip+2bDtGNsl9jM/FuBn Y3w5RIfvZTT/dZ4YHhNIyOTfiKl+hxXdX2WKhqXHgBpmRHq4FcifTdtE4Q2812A7 d/eo0wa2saWv+0IWiJnPN7Bi/mCS7JWiKaJAxoJYl0X577TULbpYKerYU3XzMQga wg0D58eO0GmrashnbOcr7cLA+4jkeBk= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:17 2025 by rpki-client