$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa File: 887fc515-3ce9-3d60-8af5-17e30ab01b19.roa (raw, json) Hash identifier: hwQdZYHCxY3CZuji8N17MGE+2olRLWJ+oxmEF0NXwxg= Subject key identifier: DC:13:EE:19:DA:53:35:07:E2:2F:42:6C:8E:45:1A:03:59:A4:83:3F Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D68B17A2DEFE2409F428 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.136.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d6:8b:17:a2:de:fe:24:09:f4:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=0b862313-1236-4ebc-95d6-b1b9958392ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:dc:41:79:f2:f7:ac:2c:5e:82:1d:e6:6c:c4: f3:3f:93:52:48:a3:65:17:ed:f5:76:65:86:c8:12: 75:fd:22:f1:bd:b1:8b:24:d7:c1:fc:bd:0c:91:2b: 17:fa:da:7d:f6:5d:1a:07:2d:96:8a:7a:58:bf:16: 8a:e2:09:95:f0:22:cb:b0:c5:72:ce:ab:dc:f7:e1: 97:e8:8e:59:d2:89:4b:da:fb:15:0c:6d:f9:a9:a4: 6b:0a:d2:68:86:81:83:1c:fd:b0:51:86:ce:0a:70: cf:e8:e7:5a:d3:62:f3:50:78:af:e0:b4:26:a7:a6: 67:25:dd:55:08:6c:49:fa:1b:04:30:d4:ba:f5:b4: 38:13:4b:30:19:9a:c7:70:73:b3:26:2d:e9:90:26: a1:ba:d5:d6:d0:bd:5b:2d:29:1f:10:7b:9d:c4:30: 9f:89:7f:05:49:1a:ed:b4:ff:7a:e5:f5:bb:1e:a8: 02:6c:77:27:d3:48:b8:bd:8f:fb:48:e6:91:33:f5: 3b:b0:bd:4e:89:6b:08:37:d3:7a:b2:1d:b7:72:a7: cd:50:15:74:81:d2:9a:5b:b0:f2:96:3f:94:2f:5c: ae:3b:a2:5e:e5:dc:32:d4:18:4b:16:f3:28:04:b0: f9:be:09:b2:75:83:8d:e7:9a:9d:15:a3:3a:ea:8b: 7d:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:EE:19:DA:53:35:07:E2:2F:42:6C:8E:45:1A:03:59:A4:83:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/887fc515-3ce9-3d60-8af5-17e30ab01b19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.136.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:e2:ce:13:d1:03:8a:68:ea:2e:5a:b8:90:44:63:c4:a7:48: a6:7a:45:c8:50:0a:66:6e:04:3c:6e:5f:8b:a8:1b:fb:ef:14: b3:54:ee:d6:d1:bc:f0:9a:8e:a6:78:b8:99:bd:09:4d:99:46: be:e9:2b:7e:13:80:05:80:7e:64:74:d5:0a:8e:cf:11:c5:06: 4c:6a:a5:d5:bb:52:c0:23:0f:3f:91:2e:86:14:7c:f7:3e:3d: 43:d4:08:f1:e8:3b:d2:fe:5b:b5:e7:13:57:b8:e7:29:bf:5b: 20:f4:c9:5b:06:52:79:96:e7:8f:a5:48:56:21:8c:e5:a8:c3: 4d:13:9a:dc:83:b4:e2:32:58:2e:1d:e6:06:63:39:25:29:ca: de:ef:a1:1d:71:83:3e:b3:f2:2f:c7:00:67:5d:96:0a:b0:ae: e2:d4:36:9a:6c:b2:c6:9f:54:0f:b9:7e:ae:c5:4e:b5:72:b4: 56:82:cf:22:9b:81:07:d1:89:a2:a4:c3:95:55:47:9a:04:3c: be:07:24:6b:3d:b0:23:30:13:64:bc:bb:e2:14:9a:c8:b2:45: f5:5f:b0:77:9b:ce:ef:a3:74:a1:b1:bf:0a:85:76:27:16:c4: 1a:21:e7:1c:19:b6:e8:ac:12:f8:92:bc:ef:ad:6c:e6:74:e7: 45:f6:3c:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNaLF6Le/iQJ9CgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MGI4NjIzMTMtMTIzNi00ZWJjLTk1ZDYtYjFiOTk1ODM5MmVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAztxBefL3rCxegh3mbMTzP5NSSKNlF+31dmWG yBJ1/SLxvbGLJNfB/L0MkSsX+tp99l0aBy2WinpYvxaK4gmV8CLLsMVyzqvc9+GX 6I5Z0olL2vsVDG35qaRrCtJohoGDHP2wUYbOCnDP6Oda02LzUHiv4LQmp6ZnJd1V CGxJ+hsEMNS69bQ4E0swGZrHcHOzJi3pkCahutXW0L1bLSkfEHudxDCfiX8FSRrt tP965fW7HqgCbHcn00i4vY/7SOaRM/U7sL1OiWsIN9N6sh23cqfNUBV0gdKaW7Dy lj+UL1yuO6Je5dwy1BhLFvMoBLD5vgmydYON55qdFaM66ot9EQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNwT7hnaUzUH4i9CbI5FGgNZpIM/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvODg3ZmM1MTUtM2NlOS0z ZDYwLThhZjUtMTdlMzBhYjAxYjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBaIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATizhPRA4po6i5auJBEY8SnSKZ6RchQCmZuBDxuX4uoG/vvFLNU7tbR vPCajqZ4uJm9CU2ZRr7pK34TgAWAfmR01QqOzxHFBkxqpdW7UsAjDz+RLoYUfPc+ PUPUCPHoO9L+W7XnE1e45ym/WyD0yVsGUnmW54+lSFYhjOWow00TmtyDtOIyWC4d 5gZjOSUpyt7voR1xgz6z8i/HAGddlgqwruLUNppsssafVA+5fq7FTrVytFaCzyKb gQfRiaKkw5VVR5oEPL4HJGs9sCMwE2S8u+IUmsiyRfVfsHebzu+jdKGxvwqFdicW xBoh5xwZtuisEviSvO+tbOZ050X2PLU= -----END CERTIFICATE-----Generated at Mon Apr 28 01:09:52 2025 by rpki-client