$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa File: b12d692f-f0ca-3180-8f64-68af10c175d1.roa (raw, json) Hash identifier: cM1AW7wkgjE6lHvDKRm7rMM/RZtbxW+ixepKDt8UB1k= Subject key identifier: 06:DC:0F:6E:E6:7B:8D:4D:FC:6D:8E:3A:23:AA:D3:72:1E:57:E1:80 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24D95DC1EF823CBE808800 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.212.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d9:5d:c1:ef:82:3c:be:80:88:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=06d31ecb-0f3b-40e1-a7a6-6d2c27465cd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ca:db:cc:88:2d:37:d5:8d:e3:1a:95:00:90: 1a:c7:3a:7b:60:0c:e6:05:41:63:6f:57:30:d3:df: a8:26:9a:50:aa:2b:34:67:68:ff:74:07:b8:27:20: 78:4e:18:59:78:ee:37:0f:bf:a2:df:42:9a:ea:b3: 31:7c:67:ae:21:a8:d8:72:70:27:02:54:d8:dd:70: d8:2a:91:f3:3d:82:85:a5:8a:26:66:3f:06:8c:e1: a1:c8:fc:f1:1d:97:5a:e7:aa:65:c2:7b:c6:29:af: 72:45:17:1a:09:ba:ab:f3:39:d5:de:49:e0:b5:ce: 74:b9:8c:76:6f:88:c5:d4:c1:86:72:12:70:b4:f3: 23:a1:d6:ac:4c:d1:df:86:72:2c:2e:32:fd:fe:fa: 2a:a4:10:29:f1:0e:ab:6a:3d:dd:b5:76:a9:08:8d: b2:b4:a2:c8:56:c9:d8:52:9e:95:86:27:0b:19:4d: 2d:b2:da:89:b2:16:04:42:d3:be:24:23:65:06:fc: b6:da:c6:86:2a:c9:f6:a2:5e:60:bf:54:bb:fc:4c: b7:38:d7:3a:39:cd:41:e2:60:3b:8f:00:9a:86:28: 72:2f:fa:07:16:a7:8a:04:02:13:62:99:16:e4:c7: 2d:43:e9:d4:1e:9a:68:6e:0a:34:5b:fc:37:f0:8f: 89:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:DC:0F:6E:E6:7B:8D:4D:FC:6D:8E:3A:23:AA:D3:72:1E:57:E1:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b12d692f-f0ca-3180-8f64-68af10c175d1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.212.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:ca:48:ea:ed:fe:d0:ad:a9:8a:4a:78:23:68:82:3a:fe:1b: 0e:eb:f1:0b:bc:91:00:3b:c0:ad:32:ad:5a:12:c4:6a:f5:5f: 58:f8:31:ab:a7:81:7a:92:f2:5e:5e:ee:a9:7d:3c:44:93:b8: bc:e7:0a:f3:4e:92:5c:b2:cc:86:0f:a7:85:66:bf:a4:f5:58: 76:58:b3:90:a2:09:d7:06:bc:1b:f7:64:ae:04:ce:92:7c:f0: c7:eb:1c:54:ab:29:18:92:b8:76:0d:a4:a1:11:37:d7:86:d6: ab:53:33:92:b4:6f:a0:fb:f1:fd:12:a7:89:99:dc:85:48:74: 01:d5:16:2c:e5:82:e8:4f:2e:cd:e8:12:43:a1:b9:fe:9b:58: e5:7a:3a:fb:0e:9d:75:7d:a9:02:d1:98:d5:e7:e7:ff:10:c3: 27:83:4c:0d:74:13:71:92:99:5e:fd:bc:c3:d9:98:05:ba:36: 86:f7:77:d7:84:e7:94:76:ec:aa:f9:3f:c2:d2:3b:3e:6e:2a: c3:f8:88:75:e4:c3:fa:ee:7f:de:57:13:be:34:d7:39:92:f1: 67:72:4a:d0:c0:2a:3c:95:f1:6b:69:bd:38:d6:69:a0:7b:4a: e7:54:95:25:56:3a:60:3b:97:e1:42:5f:f3:76:4e:f4:a9:c8: 92:ef:45:16 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNldwe+CPL6AiAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MDZkMzFlY2ItMGYzYi00MGUxLWE3YTYtNmQyYzI3NDY1Y2Q3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisrbzIgtN9WN4xqVAJAaxzp7YAzmBUFjb1cw 09+oJppQqis0Z2j/dAe4JyB4ThhZeO43D7+i30Ka6rMxfGeuIajYcnAnAlTY3XDY KpHzPYKFpYomZj8GjOGhyPzxHZda56plwnvGKa9yRRcaCbqr8znV3kngtc50uYx2 b4jF1MGGchJwtPMjodasTNHfhnIsLjL9/voqpBAp8Q6raj3dtXapCI2ytKLIVsnY Up6VhicLGU0tstqJshYEQtO+JCNlBvy22saGKsn2ol5gv1S7/Ey3ONc6Oc1B4mA7 jwCahihyL/oHFqeKBAITYpkW5MctQ+nUHppobgo0W/w38I+JDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAbcD27me41N/G2OOiOq03IeV+GAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjEyZDY5MmYtZjBjYS0z MTgwLThmNjQtNjhhZjEwYzE3NWQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBbUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFLKSOrt/tCtqYpKeCNogjr+Gw7r8Qu8kQA7wK0yrVoSxGr1X1j4Maun gXqS8l5e7ql9PESTuLznCvNOklyyzIYPp4Vmv6T1WHZYs5CiCdcGvBv3ZK4EzpJ8 8MfrHFSrKRiSuHYNpKERN9eG1qtTM5K0b6D78f0Sp4mZ3IVIdAHVFizlguhPLs3o EkOhuf6bWOV6OvsOnXV9qQLRmNXn5/8QwyeDTA10E3GSmV79vMPZmAW6Nob3d9eE 55R27Kr5P8LSOz5uKsP4iHXkw/ruf95XE7401zmS8WdyStDAKjyV8WtpvTjWaaB7 SudUlSVWOmA7l+FCX/N2TvSpyJLvRRY= -----END CERTIFICATE-----Generated at Sun Apr 27 10:40:56 2025 by rpki-client