$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa File: 21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa (raw, json) Hash identifier: SUKIOnFq2SviCuDe4lOoVU1mk9YCCMyo6F8jnPt2oe8= Subject key identifier: 80:5A:0B:A3:3C:89:5A:C1:4E:19:C9:A1:A1:AE:06:8C:6E:69:66:CF Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24A8170E2EE6C7BC3BE380 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a8:17:0e:2e:e6:c7:bc:3b:e3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=a3cb885f-a313-4b95-b717-80df507e9a87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:61:06:24:a2:36:85:1f:08:30:ae:6a:7d:79: 11:83:0a:a5:cd:87:e2:34:c6:5f:d4:d4:69:40:f1: 4a:d4:ce:fb:95:32:00:9f:3e:35:25:43:89:e5:7a: b2:7d:89:83:89:9c:6f:a8:f1:bf:54:f2:68:44:4c: 2f:cd:9e:07:3f:57:07:29:64:14:ef:c3:70:cb:11: 13:34:68:88:0e:ec:87:ec:8d:20:65:00:28:6d:2f: 0b:a8:bc:fe:7b:89:6a:74:d1:f5:20:43:39:d7:8b: 7a:b3:06:5e:78:77:cb:c9:ad:a1:30:85:f2:c7:a1: 5e:e9:28:40:42:04:05:05:d2:e9:3c:a3:5e:ed:f4: 5c:d1:cd:7f:d7:f9:b2:79:34:59:c1:59:3d:da:77: 9d:50:c3:ba:c9:94:98:a3:34:79:7e:1e:1e:f4:d3: 49:30:85:63:bc:b5:5d:75:bd:e5:6f:e0:c9:10:9f: d8:12:d4:c1:6e:fa:e4:5d:dc:6e:7f:93:f8:15:e6: f3:fa:e7:9e:fc:b0:84:c6:9e:01:fe:d4:90:58:d5: 6f:16:46:c5:e9:33:8a:cf:47:03:1b:d2:d3:42:ea: 35:1d:c4:6d:7a:ad:40:27:75:77:68:a8:24:f3:cd: e1:fd:8d:c4:d4:55:21:18:ac:cb:5f:cc:f0:84:79: 3a:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:5A:0B:A3:3C:89:5A:C1:4E:19:C9:A1:A1:AE:06:8C:6E:69:66:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/21bcce1a-2f0e-39da-b0c6-c2b20402cba5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:f9:b9:3e:c9:73:07:eb:89:62:5c:e2:fb:c1:2a:2e:5c:9c: 8e:b4:2d:3e:08:18:df:d7:df:ec:98:11:ff:09:f0:a7:e2:0d: 8a:f8:96:ca:30:89:4b:89:10:c0:50:5f:71:32:a7:ab:c3:45: 48:7f:0f:6e:8a:4c:c7:a5:ba:8b:b4:61:ab:f7:20:47:e5:0c: ef:5c:5a:9b:a0:b0:dc:fd:95:ab:c4:3b:eb:91:80:cd:10:e2: ca:1d:5e:c7:34:ce:d8:11:c3:4c:23:ba:84:07:ec:1b:c2:4a: ea:b2:c8:44:23:92:37:bd:1f:ef:26:e8:00:0c:6b:d8:d2:a8: bb:92:10:32:62:c0:a7:84:de:8a:14:1d:f9:c1:ec:4d:c1:9d: 78:c7:97:a5:56:0b:a6:cc:83:d8:5a:1f:80:96:25:34:59:3a: a0:2f:c7:b1:82:de:37:c1:1f:0e:0d:7f:5c:1f:f8:1d:2c:d1: 70:92:e3:a7:76:bf:56:f6:da:cd:11:37:f5:0d:47:ed:43:2c: c4:c9:f0:51:05:3b:d3:48:94:d6:3f:f2:bb:ab:39:d4:0c:3f: 60:6a:e6:33:2a:4d:2a:d2:b6:ea:46:78:c1:28:a6:37:9b:47: e6:7e:21:7a:e2:2a:65:6e:27:5a:10:28:f8:5e:7f:0b:45:1b: 0a:dd:a4:28 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKgXDi7mx7w744AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YTNjYjg4NWYtYTMxMy00Yjk1LWI3MTctODBkZjUwN2U5YTg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGEGJKI2hR8IMK5qfXkRgwqlzYfiNMZf1NRp QPFK1M77lTIAnz41JUOJ5XqyfYmDiZxvqPG/VPJoREwvzZ4HP1cHKWQU78NwyxET NGiIDuyH7I0gZQAobS8LqLz+e4lqdNH1IEM514t6swZeeHfLya2hMIXyx6Fe6ShA QgQFBdLpPKNe7fRc0c1/1/myeTRZwVk92nedUMO6yZSYozR5fh4e9NNJMIVjvLVd db3lb+DJEJ/YEtTBbvrkXdxuf5P4Febz+uee/LCExp4B/tSQWNVvFkbF6TOKz0cD G9LTQuo1HcRteq1AJ3V3aKgk883h/Y3E1FUhGKzLX8zwhHk6uwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIBaC6M8iVrBThnJoaGuBoxuaWbPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMjFiY2NlMWEtMmYwZS0z OWRhLWIwYzYtYzJiMjA0MDJjYmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEP5uT7JcwfriWJc4vvBKi5cnI60LT4IGN/X3+yYEf8J8KfiDYr4lsow iUuJEMBQX3Eyp6vDRUh/D26KTMeluou0Yav3IEflDO9cWpugsNz9lavEO+uRgM0Q 4sodXsc0ztgRw0wjuoQH7BvCSuqyyEQjkje9H+8m6AAMa9jSqLuSEDJiwKeE3ooU HfnB7E3BnXjHl6VWC6bMg9haH4CWJTRZOqAvx7GC3jfBHw4Nf1wf+B0s0XCS46d2 v1b22s0RN/UNR+1DLMTJ8FEFO9NIlNY/8rurOdQMP2Bq5jMqTSrStupGeMEopjeb R+Z+IXriKmVuJ1oQKPhefwtFGwrdpCg= -----END CERTIFICATE-----Generated at Sun Apr 27 23:56:10 2025 by rpki-client