$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa File: 7c73910d-5c54-3833-9531-ce70a04da00f.roa (raw, json) Hash identifier: LEYR4us7CpahfLvm6wR3/k2rcoz7UuyLekgFHEV7xzw= Subject key identifier: F1:A7:F0:F6:F1:FD:82:A7:59:34:82:59:34:86:45:27:33:3F:54:63 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24AA36BFF0E01B8B55EF58 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.130.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:aa:36:bf:f0:e0:1b:8b:55:ef:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=9c2ce0f6-d90b-436a-8fa3-37d8acca722b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:2a:a6:c6:da:85:a1:04:8b:d6:2e:42:6c:0e: 40:45:9a:a7:b2:b9:74:dc:b5:98:d8:29:2d:4e:41: 77:ae:25:a3:4b:f8:9e:d7:03:87:02:b1:0b:a7:5c: 7e:26:3e:47:3e:9d:85:41:13:e3:db:65:5c:51:a5: 68:45:bb:bb:b8:1f:b4:88:6b:04:08:b3:89:e3:16: 5c:8e:88:f4:d3:59:eb:7d:1e:92:18:e4:00:c8:32: 29:47:28:1d:f3:d0:6c:56:65:82:2a:1c:e4:3e:d2: 62:2b:1b:08:e5:f1:c4:a3:6e:e8:55:99:78:19:a0: 9f:4a:15:87:82:32:d5:c5:8c:a5:a7:71:70:ce:f1: c6:9a:d6:81:a7:fd:18:d8:81:37:a4:1d:48:dc:40: 23:ae:cc:6c:e9:0b:55:5c:7a:ce:98:7f:25:59:45: 1f:d5:d9:b4:a8:33:40:94:bf:e2:64:3f:f5:ee:57: ca:42:94:b6:26:ac:ae:41:a1:9d:67:08:98:86:e3: b5:81:27:0d:87:72:f9:80:80:f2:65:4c:6f:3b:48: 98:70:27:73:ae:82:48:b7:4a:37:24:75:f9:17:97: c2:f2:76:9d:16:24:67:5e:39:3a:cc:e2:43:61:f5: d5:3b:89:4a:55:d4:fe:67:c3:5a:c4:1d:5b:f1:a4: 7c:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F1:A7:F0:F6:F1:FD:82:A7:59:34:82:59:34:86:45:27:33:3F:54:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7c73910d-5c54-3833-9531-ce70a04da00f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 42:03:2f:9d:ce:37:05:57:b7:0a:1e:fa:83:b1:06:ce:ea:95: f8:37:eb:ef:7c:5b:da:e7:c3:78:62:6a:1d:57:bb:14:45:42: 07:b2:df:7f:55:25:20:9e:03:4a:bf:da:5d:41:27:e3:33:64: 0d:cf:0e:ff:fb:c9:ba:7e:dc:d3:2b:34:52:48:94:c3:2b:c4: 2b:e2:92:40:5a:11:4d:67:72:d8:cf:9c:20:f3:24:f1:dc:9b: 61:7e:97:e7:bf:d3:f7:ad:7c:ba:86:63:be:70:ee:ab:ae:8c: b4:9a:5e:33:fd:fb:2e:09:c5:ce:47:15:ae:0b:93:99:96:de: 34:bb:90:02:f7:b9:55:6e:08:b3:b4:32:6f:3a:0c:09:27:d9: 54:f6:44:b0:fd:b7:d0:0f:ab:23:d1:2b:36:d9:e6:03:b5:c4: 7f:93:a5:45:41:41:61:2e:4e:fd:69:f0:68:ef:6c:d8:0c:11: 67:7f:5b:7d:7c:ed:27:82:0a:23:fd:0e:d6:c3:24:e2:8c:82: 6b:c3:59:e1:89:e8:2f:a4:f2:1a:a7:72:6e:d3:20:44:2b:b2: 5e:4e:3e:ef:ac:cc:7e:96:d4:10:77:17:b7:b6:7c:80:67:c7: 50:26:5d:d2:1a:4a:3b:3d:c4:65:f4:c4:bc:0a:47:d5:6e:b4: 9f:73:6f:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKo2v/DgG4tV71gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OWMyY2UwZjYtZDkwYi00MzZhLThmYTMtMzdkOGFjY2E3MjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjyqmxtqFoQSL1i5CbA5ARZqnsrl03LWY2Ckt TkF3riWjS/ie1wOHArELp1x+Jj5HPp2FQRPj22VcUaVoRbu7uB+0iGsECLOJ4xZc joj001nrfR6SGOQAyDIpRygd89BsVmWCKhzkPtJiKxsI5fHEo27oVZl4GaCfShWH gjLVxYylp3FwzvHGmtaBp/0Y2IE3pB1I3EAjrsxs6QtVXHrOmH8lWUUf1dm0qDNA lL/iZD/17lfKQpS2JqyuQaGdZwiYhuO1gScNh3L5gIDyZUxvO0iYcCdzroJIt0o3 JHX5F5fC8nadFiRnXjk6zOJDYfXVO4lKVdT+Z8NaxB1b8aR89wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPGn8Pbx/YKnWTSCWTSGRSczP1RjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvN2M3MzkxMGQtNWM1NC0z ODMzLTk1MzEtY2U3MGEwNGRhMDBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEIDL53ONwVXtwoe+oOxBs7qlfg36+98W9rnw3hiah1XuxRFQgey339V JSCeA0q/2l1BJ+MzZA3PDv/7ybp+3NMrNFJIlMMrxCvikkBaEU1nctjPnCDzJPHc m2F+l+e/0/etfLqGY75w7quujLSaXjP9+y4Jxc5HFa4Lk5mW3jS7kAL3uVVuCLO0 Mm86DAkn2VT2RLD9t9APqyPRKzbZ5gO1xH+TpUVBQWEuTv1p8GjvbNgMEWd/W318 7SeCCiP9DtbDJOKMgmvDWeGJ6C+k8hqncm7TIEQrsl5OPu+szH6W1BB3F7e2fIBn x1AmXdIaSjs9xGX0xLwKR9VutJ9zbyM= -----END CERTIFICATE-----Generated at Tue Apr 29 15:41:54 2025 by rpki-client