$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa File: dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa (raw, json) Hash identifier: ooTs5OTUB9vGImxj1A0baJ40t1q/IA4IOx5/IMizXoU= Subject key identifier: 20:28:C3:30:94:91:31:43:92:FE:CF:8D:25:16:43:20:1C:0B:D3:F9 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F432858499F24D1350865FE1F61EB6380 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36492 IP address blocks: 136.22.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:35:08:65:fe:1f:61:eb:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=b64c2ec2-b0f8-46fd-8ab9-283403980abf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:61:56:ec:06:e3:a3:ea:9f:9f:cd:a6:a8:dd: a7:e9:79:e9:76:cf:48:0a:a7:a0:c5:60:2d:c0:0d: 12:1e:d2:05:6e:0a:9d:15:e2:35:5f:9b:73:a4:57: 30:57:e7:7d:ca:8f:fa:37:d8:4d:2b:90:20:8a:71: 92:ef:bd:27:b2:07:7c:83:4f:59:5a:59:50:30:c1: 7d:07:e0:70:31:8f:2b:c2:54:cc:c0:ac:81:c2:78: b0:8f:01:fb:67:13:2f:d2:ff:69:18:25:53:ce:d3: ea:3b:ee:cb:cf:96:43:0e:8a:33:f5:13:ea:3d:2e: 61:4b:32:63:d4:be:a7:91:6a:38:c6:e3:b9:03:16: 59:32:7f:6a:14:6e:6a:76:17:04:4f:85:0b:28:e2: 39:c1:3e:01:65:4f:dc:67:20:8c:36:cd:77:ca:62: 40:58:9e:9b:8a:47:5b:68:7d:b5:8c:26:2e:f0:7a: 2c:d5:02:6e:75:90:0e:af:5b:77:b1:ae:34:7b:20: 51:20:6b:57:8e:7c:e5:57:23:7e:d0:70:12:32:de: fc:1e:0b:0e:3a:8b:c9:1a:f9:42:a9:91:cd:7d:8e: 40:27:b1:c3:b8:fc:f5:31:19:9b:94:7a:3f:e3:91: 4d:e4:59:93:94:1c:47:08:98:18:2a:1b:fa:72:f3: 5c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:28:C3:30:94:91:31:43:92:FE:CF:8D:25:16:43:20:1C:0B:D3:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dfe8b943-4d87-3623-b87a-9b92e05a2a90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:fb:1a:fb:30:0f:02:46:45:dc:57:11:2a:03:b1:58:25:6c: 24:a6:35:dc:90:d7:98:48:5f:e2:e7:ab:da:e9:9f:9b:6f:bf: af:b2:1e:f5:cc:1c:8a:66:8b:53:a7:6f:8c:7c:1b:4f:b2:a0: b5:11:4a:d1:46:87:e0:3b:b2:48:38:fa:36:56:03:ce:8a:d1: da:20:a5:53:62:13:89:d6:cc:00:8a:b6:63:b2:a6:06:a3:fd: 00:21:e8:58:b6:10:4f:dd:0e:b2:75:17:ba:5b:a9:c6:e1:9f: 87:31:7e:44:ed:e1:8f:00:76:ea:0b:66:52:81:52:1f:9d:42: 81:c2:8a:96:7e:0e:e0:15:5e:c6:65:d4:58:f5:74:41:e5:dc: 43:fd:64:c2:d3:a0:4b:c6:b3:d8:b6:e7:14:e8:9e:63:a8:73: c8:b9:f0:77:b6:06:f2:09:ab:09:c2:af:d6:26:66:24:9f:5c: 5b:7b:3c:20:6d:08:a0:f2:5a:c7:3b:54:5a:82:c8:57:55:51: 11:78:86:d6:1c:5b:59:77:3a:38:13:b8:f3:c7:7a:11:09:68: e2:65:0e:48:be:c0:97:b6:f8:9b:a8:79:ef:1d:65:f1:3b:b3: 0d:58:1e:15:5c:32:5d:1a:34:b9:11:e2:85:74:d0:c2:e5:b3: 41:06:33:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNE1CGX+H2HrY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YjY0YzJlYzItYjBmOC00NmZkLThhYjktMjgzNDAzOTgwYWJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4GFW7Abjo+qfn82mqN2n6Xnpds9ICqegxWAt wA0SHtIFbgqdFeI1X5tzpFcwV+d9yo/6N9hNK5AginGS770nsgd8g09ZWllQMMF9 B+BwMY8rwlTMwKyBwniwjwH7ZxMv0v9pGCVTztPqO+7Lz5ZDDooz9RPqPS5hSzJj 1L6nkWo4xuO5AxZZMn9qFG5qdhcET4ULKOI5wT4BZU/cZyCMNs13ymJAWJ6bikdb aH21jCYu8Hos1QJudZAOr1t3sa40eyBRIGtXjnzlVyN+0HASMt78HgsOOovJGvlC qZHNfY5AJ7HDuPz1MRmblHo/45FN5FmTlBxHCJgYKhv6cvNc9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCAowzCUkTFDkv7PjSUWQyAcC9P5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGZlOGI5NDMtNGQ4Ny0z NjIzLWI4N2EtOWI5MmUwNWEyYTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBbRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGb7GvswDwJGRdxXESoDsVglbCSmNdyQ15hIX+Lnq9rpn5tvv6+yHvXM HIpmi1Onb4x8G0+yoLURStFGh+A7skg4+jZWA86K0dogpVNiE4nWzACKtmOypgaj /QAh6Fi2EE/dDrJ1F7pbqcbhn4cxfkTt4Y8AduoLZlKBUh+dQoHCipZ+DuAVXsZl 1Fj1dEHl3EP9ZMLToEvGs9i25xTonmOoc8i58He2BvIJqwnCr9YmZiSfXFt7PCBt CKDyWsc7VFqCyFdVURF4htYcW1l3OjgTuPPHehEJaOJlDki+wJe2+Juoee8dZfE7 sw1YHhVcMl0aNLkR4oV00MLls0EGM1E= -----END CERTIFICATE-----Generated at Sun Apr 27 00:13:48 2025 by rpki-client