$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa File: 33af6a38-02b6-3f92-bf22-40f73c436cc1.roa (raw, json) Hash identifier: 5xG2P9jYRG73t+FRmzkur7cn6XkvZE568DbADHp14Qk= Subject key identifier: 58:F3:FA:3C:92:93:DA:A8:9A:F5:96:67:EA:4B:E8:70:58:C7:F8:2B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B32A3AA85590F39A3500 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.136.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b3:2a:3a:a8:55:90:f3:9a:35:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=c572b7d1-fbcc-44fe-9bcb-388758f6521d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:a5:73:6d:c9:e3:ca:3c:f9:6a:cd:05:8e:4d: 4d:76:b3:32:68:6b:57:04:79:51:88:03:d8:10:c1: 0f:17:5d:84:40:7d:ef:d7:6e:b4:81:41:19:95:6c: ea:05:f1:3b:43:fd:d1:78:f7:96:5a:9d:9d:8b:d4: de:7f:93:2a:a2:e2:22:02:dd:a6:4f:10:7d:2f:c0: ec:74:a7:a8:15:13:7a:74:b1:39:a9:ba:9f:3e:6f: 73:c0:2f:b3:ab:a6:ed:18:87:b2:ff:44:2c:06:79: d6:05:3d:dc:da:37:8d:99:5e:f3:02:7c:b3:39:70: c6:3b:f3:49:81:9a:03:81:ea:1e:49:c3:be:c8:62: b7:46:41:9e:df:23:07:10:60:8f:40:66:bc:00:7e: 2c:fe:ff:ab:a2:8b:1b:40:f0:6c:76:78:5e:b7:14: 3c:35:8c:b8:d6:9b:be:6f:f6:ff:1a:35:8c:a6:18: 24:77:ea:57:ea:4f:35:91:0b:1f:a9:bb:d6:9b:39: 36:3d:43:c0:34:ce:6b:87:1d:14:64:e5:49:7d:6c: 72:96:e1:79:e6:c8:b4:dc:78:5d:fc:34:b4:3d:87: 33:3f:03:85:06:c8:fe:98:87:50:1c:8d:c2:96:ba: c9:b3:b9:2d:5f:f9:ac:88:ba:9f:3e:95:b4:d7:5f: b0:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F3:FA:3C:92:93:DA:A8:9A:F5:96:67:EA:4B:E8:70:58:C7:F8:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/33af6a38-02b6-3f92-bf22-40f73c436cc1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:62:c2:0f:64:03:de:e0:93:6f:e5:72:77:ad:8b:9e:3e:3d: f9:56:e0:8f:1f:69:64:43:92:7c:1b:b9:d3:3f:1e:48:92:c7: b6:01:b4:f4:e1:96:21:46:c9:db:cc:b0:6f:70:21:d3:30:fc: 66:02:13:ad:38:50:84:df:d1:b5:30:3f:b7:6b:61:3d:5e:7b: 02:d9:5b:d3:ac:22:65:e9:47:b0:5d:98:88:4c:05:72:bd:d4: e2:49:6a:c7:c9:82:2b:85:c8:3e:5d:ed:26:b4:c0:32:e8:94: 9b:0e:fc:61:48:25:7e:bc:76:76:80:da:f9:fe:46:19:4e:94: ed:59:78:b0:d0:53:a2:db:93:25:05:cb:c8:7b:6c:7d:6d:d4: 27:57:e2:a2:8a:ca:eb:6b:7e:1c:29:13:bf:96:27:b8:cd:a9: 1b:77:e1:b2:ce:db:bf:d9:c0:53:21:7b:57:ca:39:9d:6c:37: 4c:02:8a:14:9f:3e:78:c5:bd:ab:bf:b4:16:b7:17:73:ed:98: 1c:48:0e:c5:23:81:de:14:c0:59:32:b5:fa:c4:b8:2b:c8:d9: 33:d7:9f:e9:05:e1:7f:7f:a7:7b:c2:d6:35:a0:d5:e0:aa:08: 20:12:9c:65:5e:55:d9:cf:a0:22:cc:85:cf:8f:db:7b:4b:b4: a6:fd:f6:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLMqOqhVkPOaNQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YzU3MmI3ZDEtZmJjYy00NGZlLTliY2ItMzg4NzU4ZjY1MjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKVzbcnjyjz5as0Fjk1NdrMyaGtXBHlRiAPY EMEPF12EQH3v1260gUEZlWzqBfE7Q/3RePeWWp2di9Tef5MqouIiAt2mTxB9L8Ds dKeoFRN6dLE5qbqfPm9zwC+zq6btGIey/0QsBnnWBT3c2jeNmV7zAnyzOXDGO/NJ gZoDgeoeScO+yGK3RkGe3yMHEGCPQGa8AH4s/v+roosbQPBsdnhetxQ8NYy41pu+ b/b/GjWMphgkd+pX6k81kQsfqbvWmzk2PUPANM5rhx0UZOVJfWxyluF55si03Hhd /DS0PYczPwOFBsj+mIdQHI3ClrrJs7ktX/msiLqfPpW011+wlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjz+jySk9qomvWWZ+pL6HBYx/grMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvMzNhZjZhMzgtMDJiNi0z ZjkyLWJmMjItNDBmNzNjNDM2Y2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHtiwg9kA97gk2/lcneti54+PflW4I8faWRDknwbudM/HkiSx7YBtPTh liFGydvMsG9wIdMw/GYCE604UITf0bUwP7drYT1eewLZW9OsImXpR7BdmIhMBXK9 1OJJasfJgiuFyD5d7Sa0wDLolJsO/GFIJX68dnaA2vn+RhlOlO1ZeLDQU6LbkyUF y8h7bH1t1CdX4qKKyutrfhwpE7+WJ7jNqRt34bLO27/ZwFMhe1fKOZ1sN0wCihSf PnjFvau/tBa3F3PtmBxIDsUjgd4UwFkytfrEuCvI2TPXn+kF4X9/p3vC1jWg1eCq CCASnGVeVdnPoCLMhc+P23tLtKb99vI= -----END CERTIFICATE-----Generated at Mon Apr 28 15:38:28 2025 by rpki-client