$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa File: 663f96fa-2ade-331e-9061-72f4a88645ab.roa (raw, json) Hash identifier: C90GS56tBk4txxos6ssVocTdE1lG4d5f4dkEj2V3yQM= Subject key identifier: 8C:AA:42:D9:C0:98:27:5A:DE:19:E6:B8:ED:13:25:7E:A0:F6:16:32 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BABFA2905B2FE01BCA0A00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.228.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:ba:bf:a2:90:5b:2f:e0:1b:ca:0a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=7d9460d9-16b5-43d0-a170-c8101a9ed710 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:ab:be:df:ac:dc:54:e0:ca:cb:e2:89:f5:b9: 68:64:bb:47:0e:66:d1:8a:0a:3b:7a:a3:d3:b9:b8: 69:b5:2b:38:e6:62:2e:d8:06:e4:fe:24:4d:4d:35: 40:6d:fb:31:83:01:17:71:14:6e:2c:6e:76:7c:a1: 63:0a:9b:52:84:3c:c6:c9:37:cf:e8:2f:66:cf:5e: bf:12:4d:75:1e:c4:fe:60:18:0e:86:c2:f5:21:cd: 3a:86:da:47:ac:fc:0a:ca:9b:a6:32:96:c4:ee:e5: 82:17:24:53:9f:2a:ed:97:d4:6c:f7:9d:a6:ff:8a: 7b:bc:d7:0f:0e:a4:12:27:cf:9e:80:3f:9b:ef:00: f2:77:66:73:bb:ae:72:a1:72:12:87:c6:56:45:5a: fb:86:cf:93:7d:28:12:75:62:0e:e4:ef:9e:b4:bd: 96:43:7e:eb:92:ac:0d:ea:49:40:b1:95:38:08:5d: 79:39:34:e0:cb:09:61:9b:01:58:cf:d0:2f:ff:91: 42:75:ad:cc:71:fc:5f:57:d4:f9:73:8f:1a:ae:90: 58:84:26:a4:4e:0b:65:d9:38:0a:8f:f9:cf:08:0e: 34:54:53:2c:0c:94:40:78:58:54:fd:0a:b6:2f:9e: c6:e0:e1:f9:25:2f:fe:fe:5f:1e:2c:db:25:87:18: 74:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:AA:42:D9:C0:98:27:5A:DE:19:E6:B8:ED:13:25:7E:A0:F6:16:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/663f96fa-2ade-331e-9061-72f4a88645ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.228.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:5a:37:f4:d9:e0:35:36:58:74:96:de:42:90:32:50:37:4e: b7:8c:01:16:54:c7:dd:b7:4d:7e:d8:10:f5:9b:58:95:36:84: c4:80:80:a3:1f:66:2c:2b:1d:e9:03:80:3e:c5:64:fd:d9:ff: a7:8b:34:d9:08:38:85:8b:15:3b:c5:4d:92:7e:b9:f1:be:bf: 38:de:79:77:89:cc:a5:88:df:cc:fe:54:e2:43:d2:5a:08:6a: 2f:7b:c8:d5:b3:76:94:c0:a0:2c:d1:02:83:b8:31:95:ce:6c: 36:1a:0b:53:6d:e9:25:60:08:ad:0a:e9:8a:f8:db:79:5d:8a: bf:5b:31:11:9c:0f:1a:6f:1d:38:72:ad:0c:eb:7c:c9:50:3f: e6:83:27:15:04:1e:75:61:b6:e2:8c:ef:3a:b4:a6:aa:05:5b: 82:3e:a7:2f:5a:5f:fb:aa:18:f0:16:ad:90:d4:ef:2e:b8:46: 94:b7:b6:69:84:fb:e4:75:32:36:be:61:06:20:30:2c:60:82: 52:92:65:9d:9e:19:7c:bd:4a:27:cb:c2:9f:ab:5c:24:fb:b1: 10:e3:fc:e4:61:db:1b:e2:5b:19:99:dd:9c:16:1c:e8:c4:2e: a3:63:dd:68:88:8e:3f:e7:7a:2c:ea:a1:24:be:c2:19:3f:4a: e2:9c:72:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkur+ikFsv4BvKCgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk N2Q5NDYwZDktMTZiNS00M2QwLWExNzAtYzgxMDFhOWVkNzEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6u+36zcVODKy+KJ9bloZLtHDmbRigo7eqPT ubhptSs45mIu2Abk/iRNTTVAbfsxgwEXcRRuLG52fKFjCptShDzGyTfP6C9mz16/ Ek11HsT+YBgOhsL1Ic06htpHrPwKypumMpbE7uWCFyRTnyrtl9Rs952m/4p7vNcP DqQSJ8+egD+b7wDyd2Zzu65yoXISh8ZWRVr7hs+TfSgSdWIO5O+etL2WQ37rkqwN 6klAsZU4CF15OTTgywlhmwFYz9Av/5FCda3McfxfV9T5c48arpBYhCakTgtl2TgK j/nPCA40VFMsDJRAeFhU/Qq2L57G4OH5JS/+/l8eLNslhxh0DwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIyqQtnAmCda3hnmuO0TJX6g9hYyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvNjYzZjk2ZmEtMmFkZS0z MzFlLTkwNjEtNzJmNGE4ODY0NWFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBbkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJaN/TZ4DU2WHSW3kKQMlA3TreMARZUx923TX7YEPWbWJU2hMSAgKMf ZiwrHekDgD7FZP3Z/6eLNNkIOIWLFTvFTZJ+ufG+vzjeeXeJzKWI38z+VOJD0loI ai97yNWzdpTAoCzRAoO4MZXObDYaC1Nt6SVgCK0K6Yr423ldir9bMRGcDxpvHThy rQzrfMlQP+aDJxUEHnVhtuKM7zq0pqoFW4I+py9aX/uqGPAWrZDU7y64RpS3tmmE ++R1Mja+YQYgMCxgglKSZZ2eGXy9SifLwp+rXCT7sRDj/ORh2xviWxmZ3ZwWHOjE LqNj3WiIjj/neizqoSS+whk/SuKccog= -----END CERTIFICATE-----Generated at Sun Apr 27 01:37:42 2025 by rpki-client