$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa File: 793d4344-b365-3fc5-922f-5bd874e1dab9.roa (raw, json) Hash identifier: 48E2wnGgHk2QGwRo4KzBAVxZAmo9RF5F1C052DdVLuo= Subject key identifier: 7F:9E:85:CF:37:DD:6D:75:47:D7:48:D1:E6:A3:86:D6:FA:86:30:AA Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24CC1862FA1F6079D41C40 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.152.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cc:18:62:fa:1f:60:79:d4:1c:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=3e44cf72-41da-4a51-b672-968dfd265e22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:a6:de:4b:61:26:80:ca:71:44:ca:5a:bc:ac: 9f:48:e7:da:d5:31:e0:f5:30:33:32:4a:6b:4b:bc: 51:3b:c7:da:4b:b2:03:1f:13:ed:e7:24:86:9b:a0: 3c:c0:30:33:4b:85:2e:03:ae:4e:ff:94:e6:0f:36: 83:91:05:f0:d0:bb:50:58:a2:09:f5:f3:18:b7:a4: d8:90:71:b0:f0:43:8c:5e:27:b0:90:e1:a2:a6:df: 08:92:90:90:2c:e9:41:d5:45:bd:e8:1c:9e:83:64: 5c:16:84:30:57:a5:59:ce:42:ba:c4:63:1b:3b:00: 54:2e:a9:57:73:81:e1:d0:85:7d:da:a8:8d:05:71: 3d:c0:7f:11:a7:5f:17:4b:ed:e8:c7:62:57:de:dd: 3e:02:20:e3:a7:77:e4:99:86:a1:c7:7d:88:c8:fb: bf:28:db:e9:48:b7:12:7b:5d:be:1a:8e:21:92:21: 40:33:97:63:3c:4e:ae:ba:cd:bd:3a:89:d0:08:ac: de:72:f4:07:75:30:64:4d:f6:39:e1:af:e6:20:f5: 38:4b:93:c4:cc:fd:fe:b7:3b:0e:fc:a3:d5:51:85: 85:5e:28:fd:90:87:6b:c3:ee:35:b2:6b:af:d3:83: 55:6f:72:ca:a6:7d:6f:3d:41:b1:35:a1:3f:87:2d: 42:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:9E:85:CF:37:DD:6D:75:47:D7:48:D1:E6:A3:86:D6:FA:86:30:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/793d4344-b365-3fc5-922f-5bd874e1dab9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:64:bf:8f:dc:2b:25:3d:b1:98:63:5e:68:3c:41:a0:a4:df: e6:50:22:54:8a:0a:26:f6:77:a0:e3:71:c3:1d:45:18:77:25: 61:1f:3a:6e:28:53:00:e3:8c:e7:c3:3c:c4:8f:82:ca:b8:11: 20:85:9e:e0:c4:38:13:1e:cc:2f:b6:7f:48:58:6f:7a:9a:ea: db:62:8d:49:3e:4b:a9:f2:15:7a:0d:b1:1f:db:1f:d3:eb:a9: b1:96:24:d1:24:b5:4d:c2:82:7c:cb:d4:69:7e:e8:cc:48:e5: 69:75:6a:c7:ed:27:6f:1a:07:48:6e:40:19:76:05:9c:07:a9: 84:a9:08:33:d7:e8:7d:f8:c4:52:9c:f0:47:0f:e5:f4:24:52: 99:f1:63:05:68:dc:11:02:67:56:96:b6:a2:12:2f:05:a5:92: be:95:d6:bf:7a:7a:6e:68:85:55:c8:67:51:50:95:9d:7e:4a: ce:7c:a3:b2:c8:f5:62:b2:6c:b5:ed:be:5f:c9:cf:28:e7:82: 51:1d:de:f3:84:df:35:3d:86:ae:92:a3:6d:fd:a2:d2:7f:f5: f7:24:2b:67:98:ba:de:2d:1b:9f:14:5f:58:ee:64:e5:2c:b2: 20:f9:4f:93:d7:a0:fb:ea:f8:c1:15:9f:7c:53:d2:22:ea:75: 8b:de:59:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMwYYvofYHnUHEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk M2U0NGNmNzItNDFkYS00YTUxLWI2NzItOTY4ZGZkMjY1ZTIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsabeS2EmgMpxRMpavKyfSOfa1THg9TAzMkpr S7xRO8faS7IDHxPt5ySGm6A8wDAzS4UuA65O/5TmDzaDkQXw0LtQWKIJ9fMYt6TY kHGw8EOMXiewkOGipt8IkpCQLOlB1UW96Byeg2RcFoQwV6VZzkK6xGMbOwBULqlX c4Hh0IV92qiNBXE9wH8Rp18XS+3ox2JX3t0+AiDjp3fkmYahx32IyPu/KNvpSLcS e12+Go4hkiFAM5djPE6uus29OonQCKzecvQHdTBkTfY54a/mIPU4S5PEzP3+tzsO /KPVUYWFXij9kIdrw+41smuv04NVb3LKpn1vPUGxNaE/hy1C2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH+ehc833W11R9dI0eajhtb6hjCqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNzkzZDQzNDQtYjM2NS0z ZmM1LTkyMmYtNWJkODc0ZTFkYWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdkv4/cKyU9sZhjXmg8QaCk3+ZQIlSKCib2d6DjccMdRRh3JWEfOm4o UwDjjOfDPMSPgsq4ESCFnuDEOBMezC+2f0hYb3qa6ttijUk+S6nyFXoNsR/bH9Pr qbGWJNEktU3CgnzL1Gl+6MxI5Wl1asftJ28aB0huQBl2BZwHqYSpCDPX6H34xFKc 8EcP5fQkUpnxYwVo3BECZ1aWtqISLwWlkr6V1r96em5ohVXIZ1FQlZ1+Ss58o7LI 9WKybLXtvl/JzyjnglEd3vOE3zU9hq6So239otJ/9fckK2eYut4tG58UX1juZOUs siD5T5PXoPvq+MEVn3xT0iLqdYveWXo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:46:45 2025 by rpki-client