$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa File: 538ac9de-4a75-3f69-b455-da6a5cb4052d.roa (raw, json) Hash identifier: X/UyHL8ePNLEZr2FumS3URDqIOmByOsA3tDLCmThxa4= Subject key identifier: 90:9E:5B:44:0C:AB:76:FA:01:85:89:29:8E:D6:14:7F:4B:3F:74:53 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BB70B1CD555BA7AB6F0DC0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.248.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:70:b1:cd:55:5b:a7:ab:6f:0d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=1768973b-c86a-4205-90bf-4470672e037e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:3e:a8:f4:66:3f:d2:a4:e5:ad:3d:72:b5:c7: 85:c0:c9:fa:50:ee:ed:0b:68:35:66:88:41:63:f6: 0f:9d:ba:92:6a:b0:eb:94:a5:16:2d:00:e1:66:fd: 07:d1:64:a5:1e:4f:23:c4:fc:df:70:d8:cd:68:e3: a7:37:f7:f6:e8:d6:76:0b:a4:a7:40:65:b0:65:af: df:70:9f:e1:d7:84:a3:c2:9c:6f:e6:a1:e3:46:b5: 6e:9d:88:f6:42:9b:ad:c1:5a:76:e4:57:92:cb:9c: dc:d6:22:a3:63:c2:fd:c3:cb:da:01:b6:c2:5d:9e: 09:4e:5e:ee:09:5c:0b:9e:71:3f:11:bb:8e:8b:c3: e6:db:8d:1e:6b:46:48:0e:8f:00:77:67:50:7d:3d: 8c:60:91:be:8c:2c:95:89:05:cd:c1:cc:d1:fa:ba: 40:76:be:99:3a:b7:5e:49:6d:7d:a0:c8:ed:d4:dc: b5:1b:19:bb:fc:b0:fd:7c:30:9c:d8:f8:59:bf:49: 4b:7a:3d:b6:8c:e9:0c:fa:06:9f:84:c3:f4:33:f2: 80:0a:db:79:db:77:a0:27:09:d7:71:8c:ae:e5:31: b6:b6:25:5a:82:72:6e:13:76:44:8f:5a:46:89:f8: 50:ac:f8:7f:03:db:e9:db:6b:c9:d5:39:14:07:98: 6a:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9E:5B:44:0C:AB:76:FA:01:85:89:29:8E:D6:14:7F:4B:3F:74:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/538ac9de-4a75-3f69-b455-da6a5cb4052d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.248.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:b7:7b:17:3c:68:39:b9:ac:1a:1d:61:1c:f1:b4:31:17:84: e0:c9:ac:6f:dd:66:14:d9:40:aa:bd:0f:47:38:36:11:7c:a6: 4f:22:c5:03:db:f0:07:6d:0a:57:9d:a2:ab:21:b3:2c:00:62: 0e:bf:4e:62:f4:3a:40:54:76:a2:eb:b3:f2:e4:f6:57:8e:b7: 84:f1:b0:30:10:03:45:c3:82:f0:d8:dd:ab:ad:fa:96:30:bd: 03:7d:2e:52:36:18:94:3a:9e:cc:7b:47:07:a8:56:d2:39:ac: 20:27:cf:82:8c:45:6d:3e:d6:bb:3c:96:3a:e8:e7:78:db:8c: 03:d3:40:1a:3e:f1:61:2d:d7:f0:7a:65:7c:c9:fe:cb:2a:eb: 44:e3:62:35:91:4a:15:3f:11:45:d4:ee:cc:4c:0e:1e:e6:9a: 21:6e:e5:a2:99:3e:c6:7f:55:8b:25:47:48:86:7c:66:bc:0a: a7:c5:79:48:c0:8b:73:eb:52:54:16:20:63:b3:c1:8b:31:f6: f8:8b:87:b3:11:36:41:b1:04:89:15:69:ff:2e:6c:3c:ca:56: f5:92:73:82:2d:93:ef:2b:6f:11:ed:5a:2f:80:96:e3:d0:1c: 25:f9:d6:74:90:6e:45:c4:c5:1e:50:34:4d:19:c0:47:32:d7: df:ab:88:68 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3CxzVVbp6tvDcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MTc2ODk3M2ItYzg2YS00MjA1LTkwYmYtNDQ3MDY3MmUwMzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAij6o9GY/0qTlrT1ytceFwMn6UO7tC2g1ZohB Y/YPnbqSarDrlKUWLQDhZv0H0WSlHk8jxPzfcNjNaOOnN/f26NZ2C6SnQGWwZa/f cJ/h14Sjwpxv5qHjRrVunYj2QputwVp25FeSy5zc1iKjY8L9w8vaAbbCXZ4JTl7u CVwLnnE/EbuOi8Pm240ea0ZIDo8Ad2dQfT2MYJG+jCyViQXNwczR+rpAdr6ZOrde SW19oMjt1Ny1Gxm7/LD9fDCc2PhZv0lLej22jOkM+gafhMP0M/KACtt523egJwnX cYyu5TG2tiVagnJuE3ZEj1pGifhQrPh/A9vp22vJ1TkUB5hqtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJCeW0QMq3b6AYWJKY7WFH9LP3RTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNTM4YWM5ZGUtNGE3NS0z ZjY5LWI0NTUtZGE2YTVjYjQwNTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBb4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJC3exc8aDm5rBodYRzxtDEXhODJrG/dZhTZQKq9D0c4NhF8pk8ixQPb 8AdtCledoqshsywAYg6/TmL0OkBUdqLrs/Lk9leOt4TxsDAQA0XDgvDY3aut+pYw vQN9LlI2GJQ6nsx7RweoVtI5rCAnz4KMRW0+1rs8ljro53jbjAPTQBo+8WEt1/B6 ZXzJ/ssq60TjYjWRShU/EUXU7sxMDh7mmiFu5aKZPsZ/VYslR0iGfGa8CqfFeUjA i3PrUlQWIGOzwYsx9viLh7MRNkGxBIkVaf8ubDzKVvWSc4Itk+8rbxHtWi+AluPQ HCX51nSQbkXExR5QNE0ZwEcy19+riGg= -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:33 2025 by rpki-client