$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa File: 87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa (raw, json) Hash identifier: oDGyqPvwRpG7Kk2qjV7P6ofUyl2zK/xjED+FR+S+7P0= Subject key identifier: A1:49:A0:67:CA:10:41:72:36:86:75:87:D0:CD:55:55:87:36:29:00 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B6A9389E57CE5DFA45F8 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.144.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b6:a9:38:9e:57:ce:5d:fa:45:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=887f781b-ab70-4643-825c-356606600374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:49:8d:72:65:3d:90:73:9a:e9:3c:c2:2f:33: ed:ef:5a:97:a7:38:32:d4:77:dd:5b:29:c0:46:f8: f6:ca:9f:94:9f:bd:41:21:67:91:94:d8:7c:19:f2: f4:bc:b5:43:73:87:af:7b:d6:9e:ec:6f:28:77:63: 78:62:62:7e:f7:c7:4a:f0:02:a4:92:b5:ef:63:94: 01:be:66:5b:62:1a:56:c1:20:84:e6:6a:e5:9c:e4: df:00:5f:c9:45:a5:c0:d5:80:06:8b:99:94:45:7a: 71:c2:26:bb:01:fc:61:9a:55:f2:31:5d:fc:d0:52: 0c:f4:d7:f9:17:66:eb:ea:df:fb:49:0c:dd:a3:72: 0b:e7:17:f0:78:35:91:ad:c8:30:2c:08:8c:8d:13: 8d:19:28:4a:25:8b:54:08:3d:68:b5:3a:bf:bf:63: 83:94:b1:c3:af:c6:ee:8d:79:da:23:3e:89:4f:c3: 74:7e:07:f1:c1:90:5c:d1:1c:88:19:9b:37:9e:91: e8:23:5a:df:da:64:ca:9e:25:de:b7:a6:38:a5:cc: 23:b9:5f:fa:89:30:f0:34:0e:af:bc:fe:88:b8:68: ee:d6:d3:7d:eb:c0:ad:8c:d0:62:ff:4f:93:dd:07: 42:6b:8b:c1:eb:37:68:f5:9b:7f:aa:b2:45:cc:c3: 02:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:49:A0:67:CA:10:41:72:36:86:75:87:D0:CD:55:55:87:36:29:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/87a2b84a-2314-3b24-9f48-58e0d35f87f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.144.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:a3:df:a2:40:cd:e1:fa:f1:ad:b8:4d:36:0b:15:cf:69:d8: a8:4f:b0:4a:6d:10:3b:fa:d2:35:c7:60:8c:fb:72:0c:3b:34: c1:da:69:be:f6:32:5c:79:4c:1e:55:ed:77:e9:93:53:ee:2b: 0f:a9:ee:70:9c:25:81:80:ab:51:b5:f5:8c:1e:ef:ba:82:88: 45:f7:41:b1:fc:be:0a:a0:00:70:09:84:e7:7a:5d:c4:54:9c: 8f:91:b6:cc:0c:6f:98:a2:97:df:92:1b:4e:c3:23:e2:dc:a6: ff:85:da:77:0c:03:ec:96:be:0e:88:3d:45:6f:31:c9:b9:4b: 03:c1:78:ae:21:c2:14:8f:31:d9:5a:ad:3c:df:1f:dd:90:e4: 05:02:b6:a5:8a:95:d6:7e:6b:38:63:0c:8a:84:d9:4c:4b:b1: b4:99:30:e2:63:cf:98:a1:c2:df:b3:d9:f8:29:67:89:c2:b5: c6:f0:94:7c:7e:24:66:0d:66:25:7c:05:11:86:07:06:cf:56: 18:30:ed:98:83:97:90:d4:63:7c:49:36:ea:da:0f:18:1f:1b: 7e:46:6e:72:cf:e2:24:9e:ae:ff:67:c5:d4:b8:03:cb:2a:50: 57:74:19:a0:e2:7e:52:4b:b1:14:36:de:63:26:50:d7:07:6b: 9c:89:6b:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLapOJ5Xzl36RfgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODg3Zjc4MWItYWI3MC00NjQzLTgyNWMtMzU2NjA2NjAwMzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq0mNcmU9kHOa6TzCLzPt71qXpzgy1HfdWynA Rvj2yp+Un71BIWeRlNh8GfL0vLVDc4eve9ae7G8od2N4YmJ+98dK8AKkkrXvY5QB vmZbYhpWwSCE5mrlnOTfAF/JRaXA1YAGi5mURXpxwia7AfxhmlXyMV380FIM9Nf5 F2br6t/7SQzdo3IL5xfweDWRrcgwLAiMjRONGShKJYtUCD1otTq/v2ODlLHDr8bu jXnaIz6JT8N0fgfxwZBc0RyIGZs3npHoI1rf2mTKniXet6Y4pcwjuV/6iTDwNA6v vP6IuGju1tN968CtjNBi/0+T3QdCa4vB6zdo9Zt/qrJFzMMCgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKFJoGfKEEFyNoZ1h9DNVVWHNikAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODdhMmI4NGEtMjMxNC0z YjI0LTlmNDgtNThlMGQzNWY4N2YzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHej36JAzeH68a24TTYLFc9p2KhPsEptEDv60jXHYIz7cgw7NMHaab72 Mlx5TB5V7Xfpk1PuKw+p7nCcJYGAq1G19Ywe77qCiEX3QbH8vgqgAHAJhOd6XcRU nI+RtswMb5iil9+SG07DI+Lcpv+F2ncMA+yWvg6IPUVvMcm5SwPBeK4hwhSPMdla rTzfH92Q5AUCtqWKldZ+azhjDIqE2UxLsbSZMOJjz5ihwt+z2fgpZ4nCtcbwlHx+ JGYNZiV8BRGGBwbPVhgw7ZiDl5DUY3xJNuraDxgfG35GbnLP4iServ9nxdS4A8sq UFd0GaDiflJLsRQ23mMmUNcHa5yJa5A= -----END CERTIFICATE-----Generated at Sun Apr 27 19:09:58 2025 by rpki-client