$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa File: 619e354c-81d0-3a65-8f58-b153e3edfc38.roa (raw, json) Hash identifier: 3bgMjQk75+D3s4a5jCPkJA9kx9FZroZhmO6j3uw7PBY= Subject key identifier: 71:73:A9:E5:0C:B1:F3:A7:35:8D:09:B9:12:9E:F1:A1:85:3B:F3:20 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24DA78B24739D7157B04A0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.157.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:da:78:b2:47:39:d7:15:7b:04:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=a45c8802-6a89-48b6-a698-352846b936fa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b6:74:2a:16:4d:7a:95:6e:53:bb:f4:df:cb: 2f:19:4c:4c:e3:b9:2e:b2:ba:1a:d1:56:92:28:ae: fa:84:62:bf:ae:19:42:52:f4:7f:af:ed:c4:51:19: db:8b:2a:c4:54:80:ab:c6:0c:d0:f8:66:d4:6e:01: c8:e6:14:20:73:ba:cd:ad:7b:6e:59:f8:e6:d7:62: 42:8b:ce:56:9e:dc:29:80:11:69:97:d2:b2:76:07: dd:ac:b2:aa:a0:65:e6:ca:0f:9c:10:44:ff:6d:ac: ec:54:c1:84:4a:73:ee:63:9e:2f:8d:a0:c4:09:3d: 70:ac:6e:a6:59:f7:dd:3d:13:6a:39:0d:49:88:81: f2:2f:5e:3a:2d:63:78:c5:70:5a:fb:ad:df:a5:7e: 04:9f:e1:28:25:6d:f8:fc:b0:5a:6c:dc:c2:4f:cb: 24:72:f5:9d:ea:ce:bd:96:fc:f1:7a:26:4e:a5:30: 89:c2:08:fa:0c:c0:94:59:aa:a1:fc:d3:d5:89:5e: da:2e:2c:25:40:bb:a1:e2:cc:3b:e9:ed:be:6d:26: 1d:2b:de:b6:b3:c4:9a:88:8f:34:c7:6b:51:31:d2: e4:17:64:6f:cc:af:39:e6:36:62:99:76:d5:ad:9a: 8b:f5:73:0e:68:e7:8f:68:00:cf:95:19:0a:56:45: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:73:A9:E5:0C:B1:F3:A7:35:8D:09:B9:12:9E:F1:A1:85:3B:F3:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/619e354c-81d0-3a65-8f58-b153e3edfc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.157.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:7e:a0:4d:4a:8f:dd:2b:dc:c2:9c:4a:c4:af:e0:11:5f:73: 04:3e:bb:ca:1e:1e:52:8b:8c:43:e1:ce:e8:23:8e:1a:1b:7c: 54:69:66:e8:5e:16:f6:9c:98:57:22:22:21:4d:5b:3f:ae:b1: 47:94:a6:d2:49:18:e2:dc:fa:b5:ba:71:61:16:54:47:01:8a: be:63:56:69:33:e3:1b:0b:ec:08:63:e9:1a:f2:91:ff:69:e0: 52:dd:b2:36:95:69:68:4b:02:9d:6d:ec:30:70:c6:76:ae:9b: 4a:dd:38:9b:63:ca:a5:07:88:02:c3:62:a9:94:2c:bb:81:90: 57:0e:2f:d0:37:a8:bc:45:18:bd:37:db:e2:3c:55:43:ef:a9: db:47:6d:9a:89:6f:28:9f:dc:08:a7:46:85:67:3e:d5:5f:74: 03:e7:a3:6b:46:85:2a:a1:02:d7:3c:95:34:fe:57:4c:15:1d: 32:04:b7:9c:44:bc:22:57:71:52:81:f0:b6:16:0d:bc:60:28: 53:c1:75:7c:31:18:6d:2a:9e:e3:9d:74:14:12:20:f8:1e:f7: 95:9d:bd:3e:28:ab:ee:b6:b0:cc:88:6a:dc:8b:39:4a:90:58: a8:d9:c3:31:80:fc:3a:d2:20:21:2f:e5:2c:e8:72:dd:48:31: 8a:c5:a5:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNp4skc51xV7BKAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YTQ1Yzg4MDItNmE4OS00OGI2LWE2OTgtMzUyODQ2YjkzNmZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLZ0KhZNepVuU7v038svGUxM47kusroa0VaS KK76hGK/rhlCUvR/r+3EURnbiyrEVICrxgzQ+GbUbgHI5hQgc7rNrXtuWfjm12JC i85WntwpgBFpl9KydgfdrLKqoGXmyg+cEET/bazsVMGESnPuY54vjaDECT1wrG6m WffdPRNqOQ1JiIHyL146LWN4xXBa+63fpX4En+EoJW34/LBabNzCT8skcvWd6s69 lvzxeiZOpTCJwgj6DMCUWaqh/NPViV7aLiwlQLuh4sw76e2+bSYdK962s8SaiI80 x2tRMdLkF2RvzK855jZimXbVrZqL9XMOaOePaADPlRkKVkXFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHFzqeUMsfOnNY0JuRKe8aGFO/MgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjE5ZTM1NGMtODFkMC0z YTY1LThmNTgtYjE1M2UzZWRmYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBadMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZ+oE1Kj90r3MKcSsSv4BFfcwQ+u8oeHlKLjEPhzugjjhobfFRpZuhe FvacmFciIiFNWz+usUeUptJJGOLc+rW6cWEWVEcBir5jVmkz4xsL7Ahj6Rrykf9p 4FLdsjaVaWhLAp1t7DBwxnaum0rdOJtjyqUHiALDYqmULLuBkFcOL9A3qLxFGL03 2+I8VUPvqdtHbZqJbyif3AinRoVnPtVfdAPno2tGhSqhAtc8lTT+V0wVHTIEt5xE vCJXcVKB8LYWDbxgKFPBdXwxGG0qnuOddBQSIPge95WdvT4oq+62sMyIatyLOUqQ WKjZwzGA/DrSICEv5Szoct1IMYrFpSo= -----END CERTIFICATE-----Generated at Sun Apr 27 22:58:19 2025 by rpki-client