$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b96a345c-3a08-33d1-85ea-39e4fc81a9d8.roa File: b96a345c-3a08-33d1-85ea-39e4fc81a9d8.roa (raw, json) Hash identifier: DlMtK9gJ4dort2jyZ88am04q0V0R1QDO2zZIWk65qVc= Subject key identifier: AB:29:F7:38:23:40:68:7B:CC:53:61:4A:39:CB:3A:10:0B:A2:49:90 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24AD57FA8B836B5BA20FB0 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b96a345c-3a08-33d1-85ea-39e4fc81a9d8.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ad:57:fa:8b:83:6b:5b:a2:0f:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=7b904131-068a-432b-b431-b0d922b3c337 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:92:cf:cd:ad:3f:dd:e3:56:16:f1:57:2a:d5: 99:9e:d6:08:f3:7f:b0:8f:d9:32:ba:83:26:1b:9a: 14:6f:6f:19:3c:b5:28:2f:7e:8f:bc:2e:68:10:36: 07:1c:16:db:ee:d7:99:0a:08:aa:d8:e0:c4:de:f5: 18:4b:37:a1:5f:a1:74:95:33:05:5e:cc:a6:c8:0a: 27:e8:95:ef:66:51:17:c7:7e:45:76:bd:87:69:e8: 2a:68:9e:1f:c2:81:0f:52:9f:d4:e9:97:2a:85:8c: 40:fe:16:06:aa:92:ba:aa:37:7d:a7:27:95:c7:a8: fc:3b:cf:ea:ad:7e:80:6e:c2:fd:73:13:b2:f4:b6: e2:35:c4:07:a7:a1:87:44:3a:8b:06:03:25:35:4b: ef:a9:06:6a:37:ae:08:b8:8d:df:03:ef:ef:35:19: a7:6e:4d:f0:78:e5:59:f8:33:56:2b:3a:39:69:b2: 32:c0:1e:a6:3f:75:4f:c7:12:82:f2:85:e3:5d:48: 72:09:80:ae:0d:57:45:53:db:6c:a8:30:cf:4e:c4: 47:a4:c9:ed:5a:24:c0:10:78:58:fa:86:81:d1:5b: 17:bc:6d:3c:1d:fd:40:98:55:1e:ea:2e:c5:6a:1d: a0:84:37:a2:14:74:70:ba:c0:cb:e9:b4:d3:d8:5c: b4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:29:F7:38:23:40:68:7B:CC:53:61:4A:39:CB:3A:10:0B:A2:49:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b96a345c-3a08-33d1-85ea-39e4fc81a9d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2e:6b:90:ed:94:b0:76:c7:5e:39:53:04:e5:ee:a0:a3:d0:43: 68:5a:d7:bb:16:b4:63:45:77:06:6d:86:2a:29:5a:e1:e0:de: b8:88:c3:52:39:b1:f9:83:02:96:c2:15:6c:de:38:e7:4c:ec: 5b:58:f7:77:a2:de:76:36:09:33:57:62:8e:86:ed:09:5d:dd: 51:d1:98:9b:17:4c:56:69:7d:9a:91:3e:8c:92:dc:c7:eb:a9: fa:89:18:d1:5d:90:bc:0c:5a:75:f5:10:76:29:0c:17:8e:2c: 3a:29:e7:a7:77:95:90:3d:b0:c0:26:4c:ad:1d:3d:42:86:34: 54:a9:2e:5c:1f:cc:0b:1c:e9:b5:46:f0:11:17:42:1c:b7:31: 2b:c5:1f:be:64:4b:70:9e:0c:41:fc:f2:ae:ae:ad:9e:87:d1: 6b:e4:57:87:da:7a:50:bc:76:04:80:d6:23:e4:c2:3e:07:e7: 99:48:06:da:65:40:47:62:e4:b8:18:41:bb:cb:26:4c:0b:47: 07:62:43:59:9a:ea:db:84:d6:4e:6c:27:47:e5:6f:64:73:97: f8:09:f3:b3:fc:ad:71:7f:5a:1e:53:89:60:cb:29:f0:4a:13: 07:df:ca:c0:66:c7:fd:ee:8d:61:7d:1c:16:a9:0a:67:5b:83: 98:b7:b9:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK1X+ouDa1uiD7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk N2I5MDQxMzEtMDY4YS00MzJiLWI0MzEtYjBkOTIyYjNjMzM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpLPza0/3eNWFvFXKtWZntYI83+wj9kyuoMm G5oUb28ZPLUoL36PvC5oEDYHHBbb7teZCgiq2ODE3vUYSzehX6F0lTMFXsymyAon 6JXvZlEXx35Fdr2HaegqaJ4fwoEPUp/U6ZcqhYxA/hYGqpK6qjd9pyeVx6j8O8/q rX6AbsL9cxOy9LbiNcQHp6GHRDqLBgMlNUvvqQZqN64IuI3fA+/vNRmnbk3weOVZ +DNWKzo5abIywB6mP3VPxxKC8oXjXUhyCYCuDVdFU9tsqDDPTsRHpMntWiTAEHhY +oaB0VsXvG08Hf1AmFUe6i7Fah2ghDeiFHRwusDL6bTT2Fy0YQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKsp9zgjQGh7zFNhSjnLOhALokmQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjk2YTM0NWMtM2EwOC0z M2QxLTg1ZWEtMzllNGZjODFhOWQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZ5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC5rkO2UsHbHXjlTBOXuoKPQQ2ha17sWtGNFdwZthiopWuHg3riIw1I5 sfmDApbCFWzeOOdM7FtY93ei3nY2CTNXYo6G7Qld3VHRmJsXTFZpfZqRPoyS3Mfr qfqJGNFdkLwMWnX1EHYpDBeOLDop56d3lZA9sMAmTK0dPUKGNFSpLlwfzAsc6bVG 8BEXQhy3MSvFH75kS3CeDEH88q6urZ6H0WvkV4faelC8dgSA1iPkwj4H55lIBtpl QEdi5LgYQbvLJkwLRwdiQ1ma6tuE1k5sJ0flb2Rzl/gJ87P8rXF/Wh5TiWDLKfBK EwffysBmx/3ujWF9HBapCmdbg5i3udM= -----END CERTIFICATE-----Generated at Mon Apr 28 00:38:00 2025 by rpki-client