$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/edaa807f-e969-3b9d-8183-92b54229c6db.roa File: edaa807f-e969-3b9d-8183-92b54229c6db.roa (raw, json) Hash identifier: JDqjN2hfFeoyVEJ6lAYghviQoO94CY32lmYLpdupBzw= Subject key identifier: 6E:96:32:5B:8E:1B:E3:AC:98:50:17:26:10:2D:27:CE:48:B9:51:A6 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285849A4BB704677159D259D911880 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/edaa807f-e969-3b9d-8183-92b54229c6db.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.22.68.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:70:46:77:15:9d:25:9d:91:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=d99814a7-07cc-44dc-a00e-dac4f777f267 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:42:22:cf:fd:ea:f9:ca:7b:c7:91:56:dd:66: 72:42:37:e3:9a:4b:48:88:1c:93:63:a1:a1:3a:fc: a1:07:5e:d5:ee:f7:67:84:b8:c8:68:22:9d:9c:22: 26:8e:8a:04:36:c4:1e:9d:76:21:e1:64:97:cc:07: 68:69:d7:95:88:f2:07:73:5e:0b:e8:26:73:90:6c: 22:11:10:73:87:ea:b6:cd:fc:af:79:3d:ff:33:63: dd:3c:e2:42:06:9e:6d:21:cc:1c:e6:e3:9d:e5:f5: 91:49:2a:b3:af:fa:04:95:be:06:34:ed:57:34:12: 4b:94:82:ef:16:a3:57:d2:7a:d7:3f:4f:0e:a0:76: 16:1b:49:38:f9:3e:bb:44:72:83:85:6b:c7:6f:06: 66:86:dd:18:1e:57:ff:c7:c5:1a:92:34:df:4c:cb: ac:b0:9a:6b:d1:77:2b:aa:29:c6:7f:be:76:7b:9f: 04:62:27:65:c2:00:26:e8:3e:f5:82:5f:b7:ae:0e: 9e:51:bd:a1:94:d1:56:1d:06:bc:c3:a9:6a:27:97: e5:79:61:09:d4:b4:32:55:ea:43:e0:e2:fb:e8:12: a6:43:cb:a4:91:8c:74:7f:09:04:81:c5:5e:25:a2: a3:b0:36:dc:c5:b4:7f:34:21:a2:29:65:b7:69:dc: ce:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:96:32:5B:8E:1B:E3:AC:98:50:17:26:10:2D:27:CE:48:B9:51:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/edaa807f-e969-3b9d-8183-92b54229c6db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.68.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:9b:51:51:00:bd:75:73:46:23:1d:36:b8:af:df:c2:80:bf: 3a:fa:d9:0d:50:3e:eb:23:6c:d5:c9:25:1c:a4:77:bd:8f:ba: d8:be:21:2f:24:56:94:57:c1:53:8f:95:29:bd:8e:31:ff:4d: db:d9:ee:95:08:52:8f:7e:88:83:cd:a3:88:6f:3d:05:97:fb: 31:9b:9a:4d:ab:4e:94:9f:3b:9a:d1:28:c8:2c:7c:56:a4:de: a3:78:5d:c7:49:33:d0:3c:bd:e5:1f:44:2c:d8:20:f6:cb:c1: 22:3b:8b:1d:17:fa:0c:50:53:29:c9:d0:34:77:5e:5b:78:56: 7e:9d:e8:4e:ef:fd:d6:8f:f6:ba:f1:64:78:71:c9:ca:40:27: 72:5a:c1:7c:a0:11:6a:c6:89:db:52:1f:a6:87:ac:70:27:fa: bf:10:b3:39:f5:66:85:13:a0:1a:85:cd:b8:62:e8:7c:c3:d1: ad:78:fb:d2:a8:63:4a:33:5a:64:3b:b9:30:f0:b0:65:5c:d8: 4a:08:ad:08:e2:74:aa:d9:f8:23:fb:e2:b1:f8:90:60:10:17: 59:c0:2f:5f:5e:3c:87:16:6d:d8:a9:78:f4:88:2f:ba:12:9a: f0:e7:fc:2f:91:05:b2:b4:0f:ae:e9:74:7a:d5:40:44:54:94: c0:7c:82:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3BGdxWdJZ2RGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZDk5ODE0YTctMDdjYy00NGRjLWEwMGUtZGFjNGY3NzdmMjY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA20Iiz/3q+cp7x5FW3WZyQjfjmktIiByTY6Gh OvyhB17V7vdnhLjIaCKdnCImjooENsQenXYh4WSXzAdoadeViPIHc14L6CZzkGwi ERBzh+q2zfyveT3/M2PdPOJCBp5tIcwc5uOd5fWRSSqzr/oElb4GNO1XNBJLlILv FqNX0nrXP08OoHYWG0k4+T67RHKDhWvHbwZmht0YHlf/x8UakjTfTMussJpr0Xcr qinGf752e58EYidlwgAm6D71gl+3rg6eUb2hlNFWHQa8w6lqJ5fleWEJ1LQyVepD 4OL76BKmQ8ukkYx0fwkEgcVeJaKjsDbcxbR/NCGiKWW3adzOWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6WMluOG+OsmFAXJhAtJ85IuVGmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZWRhYTgwN2YtZTk2OS0z YjlkLTgxODMtOTJiNTQyMjljNmRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBZEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHSbUVEAvXVzRiMdNriv38KAvzr62Q1QPusjbNXJJRykd72Puti+IS8k VpRXwVOPlSm9jjH/TdvZ7pUIUo9+iIPNo4hvPQWX+zGbmk2rTpSfO5rRKMgsfFak 3qN4XcdJM9A8veUfRCzYIPbLwSI7ix0X+gxQUynJ0DR3Xlt4Vn6d6E7v/daP9rrx ZHhxycpAJ3JawXygEWrGidtSH6aHrHAn+r8Qszn1ZoUToBqFzbhi6HzD0a14+9Ko Y0ozWmQ7uTDwsGVc2EoIrQjidKrZ+CP74rH4kGAQF1nAL19ePIcWbdipePSIL7oS mvDn/C+RBbK0D67pdHrVQERUlMB8giU= -----END CERTIFICATE-----Generated at Sun Apr 27 17:58:26 2025 by rpki-client