$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa File: 7257db57-885c-3616-9770-9cdc08337427.roa (raw, json) Hash identifier: sa3nTCa7Ve5u7t1rwSurtbeLCuNoMp+pWpe0hAmTIus= Subject key identifier: D1:98:38:C6:87:C1:31:92:EF:88:E0:E7:AC:9B:7A:FA:23:E9:94:C5 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24CB09DC23826A922B9E78 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.134.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cb:09:dc:23:82:6a:92:2b:9e:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=73495092-a8ad-4a82-b2a3-bda993e86015 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:89:ac:59:f9:04:7b:8a:ef:73:54:69:a3:16: 10:c6:b8:6f:14:29:fc:b7:07:5e:8e:8c:a5:fb:bc: df:cc:8d:5e:8d:ef:27:65:9c:a2:33:f3:83:9e:1e: b2:17:95:2b:66:ae:74:63:83:a9:0a:c3:04:38:23: 19:cf:f3:10:a5:d4:31:6d:81:bb:83:41:ff:4d:b9: 2d:94:50:11:e2:0f:78:b8:28:74:32:10:e1:9c:18: 83:6a:1c:81:83:3c:da:27:97:05:30:88:fe:f2:22: 8e:d5:3c:7e:12:d1:f7:c5:39:1f:0d:fe:14:b3:eb: ba:0a:24:64:55:cf:88:c9:b2:99:c3:ff:a4:95:eb: 34:56:03:4e:b1:33:c6:ea:d6:57:04:23:dd:44:86: 85:c1:31:86:0b:bd:85:64:31:a6:3d:51:09:50:ce: 60:be:df:ca:7a:0c:22:89:4b:0c:84:3d:53:ac:01: fe:9d:96:1b:28:21:9f:a8:57:ff:aa:61:8c:c5:32: f9:ab:30:05:c6:0e:c0:44:09:18:e2:19:ac:e9:4b: 09:6d:4b:e3:63:03:13:fe:d4:4e:30:1b:2d:2b:58: 67:78:8b:95:b9:92:7c:79:49:51:9d:9f:d5:9d:2c: 5a:49:7e:c6:6f:9a:f8:1c:29:d5:19:46:7e:f8:c0: 90:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:98:38:C6:87:C1:31:92:EF:88:E0:E7:AC:9B:7A:FA:23:E9:94:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7257db57-885c-3616-9770-9cdc08337427.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.134.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:ec:16:4a:db:c7:43:65:c7:a1:fc:2b:19:fe:2a:23:b3:ed: b6:60:9a:9b:95:13:1b:75:80:96:bc:02:43:ff:8b:83:31:f3: 67:fb:a1:c0:62:8f:f9:39:e8:66:00:c7:b9:02:a0:a3:d3:3c: ba:d5:de:10:3a:37:94:99:65:a7:17:cd:d6:70:25:3b:13:4b: cb:0b:27:e5:68:b8:d5:45:34:81:50:52:5c:b6:d9:b6:7e:7d: af:16:f3:f0:70:2a:fd:0b:da:fe:02:fa:0d:5d:ef:71:62:eb: 26:42:ef:64:9d:ac:20:41:68:e4:3e:3f:9a:0e:40:a4:17:34: d4:62:d3:ca:35:88:69:a5:8a:4a:8b:40:7d:a6:23:01:66:0a: b7:5e:f4:7e:08:1a:3e:00:2d:36:e6:83:95:1a:af:e9:bf:9a: d2:8b:d1:5e:ce:a0:42:67:fb:56:01:2b:30:b1:a1:d2:31:d3: 50:bb:0f:4b:c5:22:fb:b2:da:40:f2:0e:57:46:56:59:d4:7f: 37:b8:aa:ce:8d:ec:e2:f8:1c:77:15:41:c7:b6:e1:9b:fc:3a: 65:62:4d:31:9b:c7:d1:96:97:bc:82:17:01:05:b6:f5:f0:61: 62:9c:88:1c:dd:90:9d:90:70:11:12:07:73:c3:a0:4b:e1:de: df:70:ee:a3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMsJ3COCapIrnngwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzM0OTUwOTItYThhZC00YTgyLWIyYTMtYmRhOTkzZTg2MDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkImsWfkEe4rvc1RpoxYQxrhvFCn8twdejoyl +7zfzI1eje8nZZyiM/ODnh6yF5UrZq50Y4OpCsMEOCMZz/MQpdQxbYG7g0H/Tbkt lFAR4g94uCh0MhDhnBiDahyBgzzaJ5cFMIj+8iKO1Tx+EtH3xTkfDf4Us+u6CiRk Vc+IybKZw/+kles0VgNOsTPG6tZXBCPdRIaFwTGGC72FZDGmPVEJUM5gvt/Kegwi iUsMhD1TrAH+nZYbKCGfqFf/qmGMxTL5qzAFxg7ARAkY4hms6UsJbUvjYwMT/tRO MBstK1hneIuVuZJ8eUlRnZ/VnSxaSX7Gb5r4HCnVGUZ++MCQWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNGYOMaHwTGS74jg56ybevoj6ZTFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNzI1N2RiNTctODg1Yy0z NjE2LTk3NzAtOWNkYzA4MzM3NDI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABvsFkrbx0Nlx6H8Kxn+KiOz7bZgmpuVExt1gJa8AkP/i4Mx82f7ocBi j/k56GYAx7kCoKPTPLrV3hA6N5SZZacXzdZwJTsTS8sLJ+VouNVFNIFQUly22bZ+ fa8W8/BwKv0L2v4C+g1d73Fi6yZC72SdrCBBaOQ+P5oOQKQXNNRi08o1iGmlikqL QH2mIwFmCrde9H4IGj4ALTbmg5Uar+m/mtKL0V7OoEJn+1YBKzCxodIx01C7D0vF Ivuy2kDyDldGVlnUfze4qs6N7OL4HHcVQce24Zv8OmViTTGbx9GWl7yCFwEFtvXw YWKciBzdkJ2QcBESB3PDoEvh3t9w7qM= -----END CERTIFICATE-----Generated at Sun Apr 27 16:35:42 2025 by rpki-client