$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa File: 30f2817a-cce1-3566-964b-50f338defbbf.roa (raw, json) Hash identifier: zAc8X4D3H6WZv8sU0xYVbdEITmGD3J2QQ1NUBgxH1Bc= Subject key identifier: 41:A9:E2:82:30:8D:6C:72:72:B2:6A:FA:71:D9:56:5A:EF:E3:3D:D7 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24DCCD8C6D9F58DA56A600 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:dc:cd:8c:6d:9f:58:da:56:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3ae14a7a-98ea-477e-9b05-0cd4716d33fe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:af:63:92:22:3c:fc:aa:76:30:d4:f2:3b:4f: 13:e6:62:73:94:3a:56:d2:0b:ec:7f:d5:9d:9a:b5: 8e:56:b4:df:1a:eb:53:fa:a7:17:6e:85:3b:d3:cf: 6d:b0:df:32:dc:0b:42:d7:ab:4a:a9:c3:5d:f0:71: b2:9e:55:0a:9e:42:e3:25:2e:73:1d:76:c0:a4:f0: 1a:77:b3:ee:d2:5e:5b:3c:c9:b1:8d:c0:b4:d2:a7: b7:55:9f:28:a0:49:71:2d:aa:46:23:db:7c:95:e6: 86:58:36:8c:5e:33:e0:ad:35:fc:00:6f:0d:75:25: 98:cf:a0:d0:30:eb:ab:8f:a0:ba:73:56:30:59:b6: 6d:78:6a:10:73:1a:2f:92:37:37:92:1f:1c:d7:49: 6c:71:1c:55:a9:4d:cd:58:a3:2c:6a:4f:11:d0:ef: 61:c5:a6:22:ab:83:5c:5f:4f:fc:5f:e9:6c:34:7f: 02:80:ba:58:b0:36:30:97:aa:0b:71:65:2a:bd:08: 07:07:76:26:ff:21:7f:fc:e3:ab:19:92:ca:38:25: 81:70:c0:5e:50:df:46:b5:97:4f:93:af:26:88:31: f8:d7:b1:dc:fa:92:dc:83:a9:f7:04:30:d0:13:b2: de:9b:24:d4:1a:21:d1:54:70:3d:4e:ce:fd:ab:91: 86:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:A9:E2:82:30:8D:6C:72:72:B2:6A:FA:71:D9:56:5A:EF:E3:3D:D7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/30f2817a-cce1-3566-964b-50f338defbbf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:16:29:0f:fe:26:09:df:18:65:6a:6f:93:ac:10:8b:b0:ee: fe:76:12:72:c1:ea:78:51:ae:60:fd:3c:cf:9e:c7:1f:16:b7: e5:47:9a:3f:ad:8c:c7:b6:80:c1:eb:24:c4:8d:ca:4c:fd:4d: 18:4e:cc:42:84:5c:fe:19:bb:67:17:6b:a7:20:1a:df:72:f7: 1a:48:20:d5:f5:b0:29:cd:f3:28:f4:10:78:bf:3b:67:58:90: 42:a0:72:3c:6c:79:ba:78:53:9b:bc:30:cb:ed:5b:e8:b2:51: 26:47:c1:54:64:ea:7c:a5:26:65:87:c9:98:52:1a:21:1e:28: e8:51:88:9b:9f:47:ff:3d:93:03:d7:f2:b8:76:b5:21:84:e8: 58:5c:c2:66:3d:22:29:c5:ba:f5:e5:db:17:b8:2d:e5:b3:f7: e9:02:18:94:b6:68:df:f7:ad:26:3c:49:71:3e:17:25:1f:99: dc:7a:84:83:1b:c9:87:aa:03:de:69:04:21:7f:4f:50:56:84: 07:67:a8:a1:68:15:61:16:bc:19:aa:62:3d:a8:d3:86:24:b8: 34:c3:e9:1d:97:3b:17:b1:22:27:9d:19:70:57:3e:97:2e:13: 1b:10:d0:19:90:bf:b2:90:7a:a8:ae:75:af:a7:53:dc:c8:66: 1d:b8:64:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNzNjG2fWNpWpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2FlMTRhN2EtOThlYS00NzdlLTliMDUtMGNkNDcxNmQzM2ZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq9jkiI8/Kp2MNTyO08T5mJzlDpW0gvsf9Wd mrWOVrTfGutT+qcXboU7089tsN8y3AtC16tKqcNd8HGynlUKnkLjJS5zHXbApPAa d7Pu0l5bPMmxjcC00qe3VZ8ooElxLapGI9t8leaGWDaMXjPgrTX8AG8NdSWYz6DQ MOurj6C6c1YwWbZteGoQcxovkjc3kh8c10lscRxVqU3NWKMsak8R0O9hxaYiq4Nc X0/8X+lsNH8CgLpYsDYwl6oLcWUqvQgHB3Ym/yF//OOrGZLKOCWBcMBeUN9GtZdP k68miDH417Hc+pLcg6n3BDDQE7LemyTUGiHRVHA9Ts79q5GGoQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEGp4oIwjWxycrJq+nHZVlrv4z3XMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzBmMjgxN2EtY2NlMS0z NTY2LTk2NGItNTBmMzM4ZGVmYmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE8WKQ/+JgnfGGVqb5OsEIuw7v52EnLB6nhRrmD9PM+exx8Wt+VHmj+t jMe2gMHrJMSNykz9TRhOzEKEXP4Zu2cXa6cgGt9y9xpIINX1sCnN8yj0EHi/O2dY kEKgcjxsebp4U5u8MMvtW+iyUSZHwVRk6nylJmWHyZhSGiEeKOhRiJufR/89kwPX 8rh2tSGE6FhcwmY9IinFuvXl2xe4LeWz9+kCGJS2aN/3rSY8SXE+FyUfmdx6hIMb yYeqA95pBCF/T1BWhAdnqKFoFWEWvBmqYj2o04YkuDTD6R2XOxexIiedGXBXPpcu ExsQ0BmQv7KQeqiuda+nU9zIZh24ZLs= -----END CERTIFICATE-----Generated at Mon Apr 28 00:52:45 2025 by rpki-client