$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa File: 75bcbd78-4640-3856-8f93-24ae6f3712f4.roa (raw, json) Hash identifier: X7iwqdtEsnUgqBd4jnRgT1m1dGFDAe4wC8ui3sy6AIM= Subject key identifier: A7:48:86:72:B9:07:12:37:87:9C:2F:0A:2F:99:52:C8:CC:93:98:D0 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24A047CD4EB1039710C280 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a0:47:cd:4e:b1:03:97:10:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=809891f5-ec5e-480e-81b9-d391a5233543 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:35:0d:df:5f:b9:46:c5:b0:5e:30:2c:f1:a6: 49:4e:55:6f:5c:8f:ed:88:08:02:c0:da:ce:72:87: 13:7b:fb:51:eb:45:53:1d:5b:5f:37:19:d0:33:fe: 8f:30:08:2c:38:49:ad:1b:e3:d5:7c:d1:79:ab:36: c7:82:f8:27:71:3a:6c:78:28:fa:a6:33:bf:c5:40: f4:d6:8c:c2:f2:06:a3:96:6d:c8:bd:fb:1c:70:a2: 71:33:85:6c:4c:f0:28:c3:74:a8:ce:99:af:01:c0: 3b:20:de:c1:ba:b9:3d:ef:ae:5c:2d:19:47:89:63: 95:4a:28:88:05:7f:0b:e3:69:05:2f:65:c7:3d:fa: 88:fa:32:c4:ef:ac:68:1e:8a:2b:89:c5:10:69:e7: d9:6f:10:d7:22:b5:ca:63:b3:5a:43:96:82:98:75: fe:cd:1d:50:f0:13:68:ed:3e:cd:d1:a8:83:f1:a0: 54:bf:0c:72:d1:f7:96:fe:da:63:79:f2:f5:12:77: 68:68:d8:f1:98:9f:e8:58:73:88:32:5a:eb:e3:e7: 0c:20:84:bd:07:64:aa:c9:58:0a:4a:2d:cf:be:4a: 82:0f:07:e6:58:7a:d3:12:7c:f5:30:30:a6:b6:ec: 1a:1b:04:13:fe:0c:f8:87:71:2e:52:23:6e:a0:28: 51:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:48:86:72:B9:07:12:37:87:9C:2F:0A:2F:99:52:C8:CC:93:98:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/75bcbd78-4640-3856-8f93-24ae6f3712f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:39:61:f1:2c:e4:b1:9a:b4:60:23:46:68:f1:b1:8a:59:62: e9:ef:38:2b:00:7e:0d:d5:62:b1:e8:de:52:6e:6b:bf:07:78: ac:7e:16:71:67:e1:51:aa:54:5d:5f:a2:37:38:51:15:4a:aa: f0:58:f0:bf:b9:9a:92:18:da:ca:14:e4:be:8a:68:24:a2:6b: 7f:8c:af:d7:11:79:92:47:34:19:2c:91:f7:6e:28:2a:b4:63: 77:77:b1:23:0d:2d:ed:f9:14:b4:a0:d5:50:35:de:e5:47:ea: 27:13:b8:fa:1d:be:b4:68:67:ea:27:f6:4b:35:c6:94:78:6a: f1:32:2d:53:6e:f8:26:79:ed:71:a6:db:bb:e1:fb:33:65:e7: 77:22:8b:ac:e8:56:60:eb:cc:95:82:ee:21:74:f3:ae:39:15: 96:85:f2:bb:04:da:c3:18:78:82:22:20:92:54:b9:40:29:90: 4c:42:00:d1:1f:01:80:fe:e8:c4:42:89:1b:6f:2f:72:d1:a7: 04:00:f9:20:99:7d:50:4c:19:58:b0:ca:7d:ed:8d:c4:86:cc: 25:8f:9a:98:97:d2:f3:9e:e9:b5:16:db:b5:ed:62:f0:61:77: c0:97:04:bf:05:67:7a:76:6a:12:11:48:b0:29:1f:f4:f2:64: 1d:9f:e9:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKBHzU6xA5cQwoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODA5ODkxZjUtZWM1ZS00ODBlLTgxYjktZDM5MWE1MjMzNTQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjUN31+5RsWwXjAs8aZJTlVvXI/tiAgCwNrO cocTe/tR60VTHVtfNxnQM/6PMAgsOEmtG+PVfNF5qzbHgvgncTpseCj6pjO/xUD0 1ozC8gajlm3IvfsccKJxM4VsTPAow3SozpmvAcA7IN7Burk9765cLRlHiWOVSiiI BX8L42kFL2XHPfqI+jLE76xoHooricUQaefZbxDXIrXKY7NaQ5aCmHX+zR1Q8BNo 7T7N0aiD8aBUvwxy0feW/tpjefL1EndoaNjxmJ/oWHOIMlrr4+cMIIS9B2SqyVgK Si3PvkqCDwfmWHrTEnz1MDCmtuwaGwQT/gz4h3EuUiNuoChRrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKdIhnK5BxI3h5wvCi+ZUsjMk5jQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNzViY2JkNzgtNDY0MC0z ODU2LThmOTMtMjRhZTZmMzcxMmY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJg5YfEs5LGatGAjRmjxsYpZYunvOCsAfg3VYrHo3lJua78HeKx+FnFn 4VGqVF1fojc4URVKqvBY8L+5mpIY2soU5L6KaCSia3+Mr9cReZJHNBkskfduKCq0 Y3d3sSMNLe35FLSg1VA13uVH6icTuPodvrRoZ+on9ks1xpR4avEyLVNu+CZ57XGm 27vh+zNl53cii6zoVmDrzJWC7iF08645FZaF8rsE2sMYeIIiIJJUuUApkExCANEf AYD+6MRCiRtvL3LRpwQA+SCZfVBMGViwyn3tjcSGzCWPmpiX0vOe6bUW27XtYvBh d8CXBL8FZ3p2ahIRSLApH/TyZB2f6e8= -----END CERTIFICATE-----Generated at Tue Apr 29 20:05:28 2025 by rpki-client