$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa File: 2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa (raw, json) Hash identifier: zuWmS6JYMj1diG8Mk859ZmwzJDkL8+stplJZqLsMUPM= Subject key identifier: EC:5B:E3:BB:29:C7:A7:11:D3:F2:1C:D6:08:89:FD:5E:CC:5A:94:A8 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24C8B9EF2E12F29DE49F00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.128.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c8:b9:ef:2e:12:f2:9d:e4:9f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=16255334-ccf0-4993-9370-2a167df264a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bc:0e:6d:1a:b3:6b:f6:6e:4b:3a:a6:d7:2f: c2:5c:00:f6:7b:19:d5:14:f7:32:a1:36:ad:7a:5e: 53:35:51:44:18:3e:c8:d8:71:3d:34:a2:8c:8c:e3: 5e:84:3e:84:86:5e:1c:85:06:83:f7:c4:16:80:9b: 19:9e:72:a0:12:1c:fb:10:86:7e:21:d5:b6:04:a3: 57:fa:54:ec:2d:9e:bb:b9:81:82:65:a4:8b:08:b5: 75:36:24:81:af:90:7d:18:72:45:35:74:a1:b3:62: b2:17:67:fa:7a:09:af:52:df:88:cb:69:79:20:33: 05:6d:c3:95:0d:5b:d4:b4:62:9f:93:4b:e2:18:78: 31:6f:81:78:a1:39:6e:48:8c:24:4c:0f:fb:51:d7: 34:64:23:4a:4a:e8:34:94:19:c4:0f:0c:42:6c:04: fd:f5:6e:c5:a6:70:96:61:ea:42:d2:c1:29:ab:2a: 7a:1d:a5:43:de:ea:78:8a:88:7d:58:e9:35:6c:52: de:42:5c:f5:92:04:ca:c2:c1:87:26:01:77:f3:ed: 32:af:da:73:52:9b:ac:c3:bb:0c:c1:a1:36:8b:1a: b0:35:2f:81:ce:26:cd:27:f2:71:5e:52:67:a7:73: e7:48:63:1f:92:fc:83:e1:61:fd:23:be:0f:44:13: b5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:5B:E3:BB:29:C7:A7:11:D3:F2:1C:D6:08:89:FD:5E:CC:5A:94:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/2defbbc0-3484-3cc4-b4a9-8e9d4c14125c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:80:92:3d:66:d4:9b:d1:9f:54:8b:81:f8:9b:6d:c3:77:46: 8a:aa:b2:11:d7:72:b3:4f:71:63:2a:88:9f:e5:a6:b7:26:fe: 1c:d5:97:12:ee:af:69:7c:ef:e4:f2:ce:fd:d1:21:47:ec:4b: 2d:f0:10:29:b6:96:1b:1f:4c:bd:3a:a2:96:25:b4:c4:bb:31: b7:4a:cd:89:44:2f:fd:79:58:d8:61:fa:e9:0d:b8:40:f5:0a: 37:82:73:b6:05:0d:44:db:db:c8:b1:60:a5:fa:22:e8:b4:46: 6a:d4:28:54:dd:09:02:81:00:1d:82:67:7b:e4:fc:5e:ec:ce: 40:38:6a:8b:c5:35:fc:ff:d8:a8:48:86:3c:6e:92:cd:b4:3e: 30:db:40:b3:84:2a:c5:a1:0b:5e:7f:5e:4b:9a:3f:07:2a:09: f3:73:3f:27:3e:6f:23:ab:06:a9:fa:61:bf:c5:56:5e:2b:db: 47:8e:c8:b3:3e:84:66:1d:61:cc:7c:88:fa:68:3c:b9:10:c8: ce:10:1a:25:5c:8d:0c:81:c6:e7:11:04:b0:8e:7e:e7:82:f4: 5b:66:60:18:9e:fc:cb:6a:cf:cc:36:e6:82:77:06:04:6a:bf: 55:07:83:d0:f4:46:cb:85:22:d7:be:e9:dd:b7:74:f6:60:23: 40:f2:fe:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMi57y4S8p3knwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MTYyNTUzMzQtY2NmMC00OTkzLTkzNzAtMmExNjdkZjI2NGE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiLwObRqza/ZuSzqm1y/CXAD2exnVFPcyoTat el5TNVFEGD7I2HE9NKKMjONehD6Ehl4chQaD98QWgJsZnnKgEhz7EIZ+IdW2BKNX +lTsLZ67uYGCZaSLCLV1NiSBr5B9GHJFNXShs2KyF2f6egmvUt+Iy2l5IDMFbcOV DVvUtGKfk0viGHgxb4F4oTluSIwkTA/7Udc0ZCNKSug0lBnEDwxCbAT99W7FpnCW YepC0sEpqyp6HaVD3up4ioh9WOk1bFLeQlz1kgTKwsGHJgF38+0yr9pzUpusw7sM waE2ixqwNS+BzibNJ/JxXlJnp3PnSGMfkvyD4WH9I74PRBO1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxb47spx6cR0/Ic1giJ/V7MWpSoMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMmRlZmJiYzAtMzQ4NC0z Y2M0LWI0YTktOGU5ZDRjMTQxMjVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHOAkj1m1JvRn1SLgfibbcN3RoqqshHXcrNPcWMqiJ/lprcm/hzVlxLu r2l87+Tyzv3RIUfsSy3wECm2lhsfTL06opYltMS7MbdKzYlEL/15WNhh+ukNuED1 CjeCc7YFDUTb28ixYKX6Iui0RmrUKFTdCQKBAB2CZ3vk/F7szkA4aovFNfz/2KhI hjxuks20PjDbQLOEKsWhC15/XkuaPwcqCfNzPyc+byOrBqn6Yb/FVl4r20eOyLM+ hGYdYcx8iPpoPLkQyM4QGiVcjQyBxucRBLCOfueC9FtmYBie/Mtqz8w25oJ3BgRq v1UHg9D0RsuFIte+6d23dPZgI0Dy/jQ= -----END CERTIFICATE-----Generated at Mon Apr 28 12:49:35 2025 by rpki-client