$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa File: 8dc45127-fc54-3776-8b82-d5251dafaa2b.roa (raw, json) Hash identifier: +uaFRbOrrpxdrLc6I4y6I4v3J1qvwFLzitE5AsXaDiE= Subject key identifier: 51:9A:54:80:88:11:D4:A2:7D:17:B6:7B:F9:1D:19:85:45:3F:27:79 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24C9C4181C9CC3647FDA00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:c9:c4:18:1c:9c:c3:64:7f:da:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=1dfbd215-5397-4276-b3ad-f9e470782571 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e3:53:78:13:08:8e:1b:ab:04:7c:df:bc:de: 75:e7:bb:05:bb:93:92:df:ed:7a:02:84:91:37:3a: 0d:8e:75:96:14:53:6f:b0:b5:d9:e6:e1:c6:14:ed: de:87:8d:80:4e:98:62:9d:00:9c:25:c7:87:58:b6: cb:48:79:aa:56:cf:a0:f5:d7:c4:2a:4d:90:1e:e9: d5:61:7a:58:f1:3d:7c:0a:e5:62:92:72:af:4d:9d: 06:53:02:0d:58:72:c5:f6:06:62:cd:c6:f2:b2:91: cd:b7:70:38:d7:a3:bf:1e:4d:cc:fe:cd:0f:e2:c0: c6:ef:9a:35:f6:4c:30:94:47:4f:98:59:9c:d5:69: 5d:cf:d3:d4:c6:57:59:46:84:c4:4a:d9:3d:d4:de: 05:d0:19:cf:7b:9f:61:fd:1b:df:a4:24:e2:da:1f: c9:77:f5:44:0b:54:d4:13:9c:b0:29:01:f2:3c:ab: e3:05:de:d4:bf:29:cb:af:4f:81:26:86:c7:25:3c: e5:94:ca:8f:60:47:d4:b4:cf:b2:ae:8b:85:06:9e: 56:b0:fb:12:48:b3:10:ea:0b:ee:48:c0:a3:3e:6c: 1c:8b:9e:bc:1a:bb:52:16:53:e5:ab:75:45:ff:2a: 23:2f:3b:6d:72:ae:1a:3d:9f:f7:1e:a9:3c:66:45: cf:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:9A:54:80:88:11:D4:A2:7D:17:B6:7B:F9:1D:19:85:45:3F:27:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/8dc45127-fc54-3776-8b82-d5251dafaa2b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:d6:91:19:f7:48:20:d6:b9:10:9d:df:c3:8b:d8:e6:3a:7a: af:e8:3e:99:70:5f:7f:9e:81:d5:9a:c9:8f:9d:f7:1a:16:fa: cd:da:df:43:fc:27:90:17:ec:7d:6b:ea:3c:db:c8:93:88:da: 0c:c5:3d:fc:6d:48:a8:70:6f:95:51:e8:81:54:5b:66:08:3b: 56:da:9b:32:e8:f2:52:8e:f4:27:c7:81:cd:88:95:e8:45:5c: 75:7b:fe:a3:71:7d:fc:5f:44:56:12:c8:bc:b2:70:cb:87:e6: 20:40:b8:3e:54:10:15:c2:9e:a4:b2:47:78:38:4c:2c:79:1a: 6b:a9:da:60:f0:b2:42:78:b5:c8:2c:2d:4c:a0:9f:86:ad:4a: b5:d8:10:33:4c:4a:22:f2:1c:19:dd:23:51:09:2b:eb:61:79: a3:d3:42:f9:df:d7:39:9e:05:43:d1:c5:58:67:2d:b8:21:a4: 0f:47:29:52:7a:a0:a1:40:69:60:a4:8c:2a:85:e0:04:6d:81: c6:d6:44:aa:47:73:2f:2a:ca:4d:34:3f:69:c1:96:0a:23:52: 7b:d3:05:b3:53:a1:4d:e1:dd:29:84:c0:a9:28:40:0c:93:fe: 2b:03:c5:76:83:26:5c:6f:d2:dc:11:50:6d:c5:c2:b4:e4:e3: 8c:61:aa:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMnEGBycw2R/2gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MWRmYmQyMTUtNTM5Ny00Mjc2LWIzYWQtZjllNDcwNzgyNTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeNTeBMIjhurBHzfvN5157sFu5OS3+16AoSR NzoNjnWWFFNvsLXZ5uHGFO3eh42ATphinQCcJceHWLbLSHmqVs+g9dfEKk2QHunV YXpY8T18CuViknKvTZ0GUwINWHLF9gZizcbyspHNt3A416O/Hk3M/s0P4sDG75o1 9kwwlEdPmFmc1Wldz9PUxldZRoTEStk91N4F0BnPe59h/RvfpCTi2h/Jd/VEC1TU E5ywKQHyPKvjBd7UvynLr0+BJobHJTzllMqPYEfUtM+yrouFBp5WsPsSSLMQ6gvu SMCjPmwci568GrtSFlPlq3VF/yojLzttcq4aPZ/3Hqk8ZkXPiwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFGaVICIEdSifRe2e/kdGYVFPyd5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOGRjNDUxMjctZmM1NC0z Nzc2LThiODItZDUyNTFkYWZhYTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAfWkRn3SCDWuRCd38OL2OY6eq/oPplwX3+egdWayY+d9xoW+s3a30P8 J5AX7H1r6jzbyJOI2gzFPfxtSKhwb5VR6IFUW2YIO1bamzLo8lKO9CfHgc2IlehF XHV7/qNxffxfRFYSyLyycMuH5iBAuD5UEBXCnqSyR3g4TCx5Gmup2mDwskJ4tcgs LUygn4atSrXYEDNMSiLyHBndI1EJK+theaPTQvnf1zmeBUPRxVhnLbghpA9HKVJ6 oKFAaWCkjCqF4ARtgcbWRKpHcy8qyk00P2nBlgojUnvTBbNToU3h3SmEwKkoQAyT /isDxXaDJlxv0twRUG3FwrTk44xhqpQ= -----END CERTIFICATE-----Generated at Sun Apr 27 22:12:03 2025 by rpki-client