$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa File: 7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa (raw, json) Hash identifier: M1ujuBW/LVqiDJO+ganKl/nTTqIbMhdEopZ7yrgyVLM= Subject key identifier: 85:26:49:4F:69:E5:90:F1:66:CF:5D:89:EC:A2:F1:34:1E:C4:D7:0B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D649835C2BAE53607540 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.128.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d6:49:83:5c:2b:ae:53:60:75:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=70fa8836-dc98-4049-902f-cc9ff3c27464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:c4:a8:16:28:f7:f3:88:8d:57:c7:9b:18:ea: ca:25:9c:c5:5e:52:8f:bc:3b:d9:15:13:88:ae:80: 64:5f:be:17:6c:34:cd:24:a1:3d:c6:96:b8:63:03: 70:62:2c:dc:a0:8a:0a:2f:80:1d:5e:93:6c:4b:6a: 1b:5d:33:3d:a9:07:82:ea:0d:e7:3d:bb:04:93:de: 51:b4:85:ea:e0:89:94:8d:d0:f7:ee:ab:ec:e9:e5: 41:cf:92:48:95:32:58:15:ed:07:81:6b:fa:77:d3: 30:88:b0:2a:47:52:85:6d:1c:7e:7f:24:a4:87:54: 37:69:2f:64:2e:15:10:4a:bf:9e:29:cf:b1:12:2d: c1:a1:f6:33:11:45:70:15:b5:62:27:ec:9e:9a:64: 32:8d:f3:86:e5:7f:9d:2f:68:27:2d:6c:d2:95:de: 9c:d5:e7:88:19:2a:2b:44:ef:51:1b:19:52:15:0b: 9a:6f:e9:f0:71:b1:f6:26:9b:15:5f:55:fc:62:64: 2b:32:c8:ec:cd:8e:7a:d6:51:fb:1e:57:09:6c:31: 52:99:4b:95:7c:93:1e:b0:a8:8b:2f:be:0f:6b:85: 42:a2:d9:80:ed:84:78:74:6d:d8:cf:4e:9b:cb:5e: 0d:40:dc:94:b3:e5:11:a6:06:19:72:6a:b3:84:79: 6e:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:26:49:4F:69:E5:90:F1:66:CF:5D:89:EC:A2:F1:34:1E:C4:D7:0B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/7e0eb996-095b-3e20-a9bb-cb5d44ac6368.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:3a:fb:79:35:2f:c2:b4:6b:d6:7f:82:25:28:8b:f2:d3:2b: 81:d3:43:1a:66:74:80:ba:be:41:c6:65:a8:29:42:b4:25:82: 9c:94:22:cc:90:e5:80:11:2c:82:3b:64:23:08:60:61:46:30: 31:02:36:69:5e:2c:80:22:da:2c:d9:05:43:4c:2c:93:21:36: a9:a2:0b:31:99:b3:63:94:4c:42:6a:2f:06:81:37:b4:b8:92: 67:6f:22:b2:b7:48:ce:2e:ff:5f:70:21:b1:34:41:0d:77:88: 33:77:70:ad:ef:5c:27:34:92:30:98:4d:b6:ac:24:6d:99:5c: 9b:e2:ef:53:2b:e5:e1:92:a4:5f:8f:b0:ed:30:5a:db:51:20: e1:85:b7:32:90:3d:c1:fd:44:3a:9a:7a:6b:5b:b2:78:ab:36: f8:b0:a2:d7:b1:08:f6:97:bc:c0:37:f2:5b:23:98:a2:29:55: 1b:d9:b7:a4:5c:5f:b1:48:14:88:3d:2b:61:29:ce:49:0f:ce: 02:28:d1:bf:53:9a:82:85:df:7f:d1:44:f1:d1:63:88:d9:6e: 3c:62:cc:af:da:5a:75:0f:10:53:cb:d5:52:55:a1:b4:b9:9a: 53:2d:45:08:80:5e:87:9e:88:4f:38:43:94:50:01:94:9e:8f: aa:a6:01:81 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNZJg1wrrlNgdUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NzBmYTg4MzYtZGM5OC00MDQ5LTkwMmYtY2M5ZmYzYzI3NDY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcSoFij384iNV8ebGOrKJZzFXlKPvDvZFROI roBkX74XbDTNJKE9xpa4YwNwYizcoIoKL4AdXpNsS2obXTM9qQeC6g3nPbsEk95R tIXq4ImUjdD37qvs6eVBz5JIlTJYFe0HgWv6d9MwiLAqR1KFbRx+fySkh1Q3aS9k LhUQSr+eKc+xEi3BofYzEUVwFbViJ+yemmQyjfOG5X+dL2gnLWzSld6c1eeIGSor RO9RGxlSFQuab+nwcbH2JpsVX1X8YmQrMsjszY561lH7HlcJbDFSmUuVfJMesKiL L74Pa4VCotmA7YR4dG3Yz06by14NQNyUs+URpgYZcmqzhHluYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIUmSU9p5ZDxZs9dieyi8TQexNcLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvN2UwZWI5OTYtMDk1Yi0z ZTIwLWE5YmItY2I1ZDQ0YWM2MzY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI6+3k1L8K0a9Z/giUoi/LTK4HTQxpmdIC6vkHGZagpQrQlgpyUIsyQ 5YARLII7ZCMIYGFGMDECNmleLIAi2izZBUNMLJMhNqmiCzGZs2OUTEJqLwaBN7S4 kmdvIrK3SM4u/19wIbE0QQ13iDN3cK3vXCc0kjCYTbasJG2ZXJvi71Mr5eGSpF+P sO0wWttRIOGFtzKQPcH9RDqaemtbsnirNviwotexCPaXvMA38lsjmKIpVRvZt6Rc X7FIFIg9K2EpzkkPzgIo0b9TmoKF33/RRPHRY4jZbjxizK/aWnUPEFPL1VJVobS5 mlMtRQiAXoeeiE84Q5RQAZSej6qmAYE= -----END CERTIFICATE-----Generated at Mon Apr 28 01:04:02 2025 by rpki-client