$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa File: 91c1e2f3-72fb-3651-b995-c235e2819d23.roa (raw, json) Hash identifier: WuG1dq/uTcGFJ8qrRWJazjwOuMWcN2ks4RMHQtR1b94= Subject key identifier: 43:18:B9:A5:A8:0B:74:65:2A:E7:08:17:84:FA:6F:D9:94:3E:C9:47 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24CE62611CB93E265AB060 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.144.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ce:62:61:1c:b9:3e:26:5a:b0:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=dac0111a-77a5-4af2-acc5-d06971cf1647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:d5:bf:b7:42:2e:88:f3:89:96:b1:fd:ad:87: 7d:db:b4:d9:5b:76:96:de:9b:a2:a3:67:43:d1:01: 36:47:b7:ca:a6:c3:aa:87:01:43:a7:31:7f:05:5f: 4e:9d:73:c9:da:37:1b:48:27:b5:31:cd:ad:ee:c6: ed:9b:a4:4b:48:a6:21:fa:0c:44:b5:12:c7:15:2f: d2:88:e1:3d:14:9f:f7:13:e7:5f:12:08:bb:5f:3f: bd:3c:6f:f9:cb:17:5e:ce:f9:15:7f:ac:25:b7:35: 61:4c:1d:87:33:83:d3:75:a6:62:b1:44:68:0d:1c: 7b:77:70:6a:14:35:7c:ce:94:3e:29:8d:67:1a:89: 5f:32:9d:55:9d:62:27:a6:12:0f:24:05:e4:e4:1c: ac:34:7a:35:e2:83:20:2a:31:a5:93:63:49:4b:e4: 79:7b:cb:0d:4d:bb:6f:0a:18:fc:6a:5c:03:f8:88: 97:0f:f1:d7:89:ad:72:e4:b4:4b:46:3f:82:68:45: c6:e1:b8:b4:35:4b:d2:56:4c:66:05:3a:ee:51:bd: b4:11:01:ee:3a:05:af:df:ce:c1:cb:50:d9:5b:bf: 76:3b:2c:60:69:e3:3f:08:9d:f6:d3:cc:06:44:c9: 53:18:68:1e:5e:8b:da:da:f9:9c:64:ab:98:6f:4b: 45:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:18:B9:A5:A8:0B:74:65:2A:E7:08:17:84:FA:6F:D9:94:3E:C9:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/91c1e2f3-72fb-3651-b995-c235e2819d23.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.144.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:dd:a5:23:fd:57:c6:fc:06:ea:87:cd:25:ab:5d:a9:7e:3e: 84:ea:8c:74:59:b4:07:6f:74:d1:ff:7f:9b:fc:d1:43:04:d8: c8:12:eb:16:62:b6:6d:5e:6b:f2:e5:6a:ea:03:9c:3f:51:64: 7c:68:4c:45:74:5d:a2:5a:89:ed:ef:30:ef:19:fe:2c:f2:a0: 03:c8:c2:d1:8c:b8:a7:22:03:40:80:3a:68:1b:02:ef:d5:d1: 9f:3e:cf:d7:2d:98:4c:20:6a:5e:cf:a5:86:25:12:e8:0c:39: 8a:75:c2:77:09:5a:6b:16:a6:19:2d:a7:8d:8f:4e:4c:c1:19: a4:43:55:bc:33:07:d7:8f:88:71:05:60:61:2c:75:88:a8:b1: a2:46:e8:37:b7:10:94:9e:11:e6:89:b9:71:3f:2f:fb:97:49: e1:98:2b:67:7f:12:39:6b:12:07:51:1d:67:57:cb:52:41:a4: 3c:b3:95:d3:e4:bb:35:82:ae:83:0e:84:af:06:b6:f6:99:ad: 2e:de:7f:57:82:53:8d:28:a9:0e:8d:96:9b:18:f6:78:0a:aa: 89:dd:5a:c1:3d:f4:e7:9c:4c:37:6d:63:29:bc:dc:c7:12:3f: 1e:7f:f1:82:4f:61:7d:ea:a7:97:da:8d:e0:58:37:45:66:69: a2:21:70:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJM5iYRy5PiZasGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGFjMDExMWEtNzdhNS00YWYyLWFjYzUtZDA2OTcxY2YxNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNW/t0IuiPOJlrH9rYd927TZW3aW3puio2dD 0QE2R7fKpsOqhwFDpzF/BV9OnXPJ2jcbSCe1Mc2t7sbtm6RLSKYh+gxEtRLHFS/S iOE9FJ/3E+dfEgi7Xz+9PG/5yxdezvkVf6wltzVhTB2HM4PTdaZisURoDRx7d3Bq FDV8zpQ+KY1nGolfMp1VnWInphIPJAXk5BysNHo14oMgKjGlk2NJS+R5e8sNTbtv Chj8alwD+IiXD/HXia1y5LRLRj+CaEXG4bi0NUvSVkxmBTruUb20EQHuOgWv387B y1DZW792OyxgaeM/CJ3208wGRMlTGGgeXova2vmcZKuYb0tFzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEMYuaWoC3RlKucIF4T6b9mUPslHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOTFjMWUyZjMtNzJmYi0z NjUxLWI5OTUtYzIzNWUyODE5ZDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADfdpSP9V8b8BuqHzSWrXal+PoTqjHRZtAdvdNH/f5v80UME2MgS6xZi tm1ea/LlauoDnD9RZHxoTEV0XaJaie3vMO8Z/izyoAPIwtGMuKciA0CAOmgbAu/V 0Z8+z9ctmEwgal7PpYYlEugMOYp1wncJWmsWphktp42PTkzBGaRDVbwzB9ePiHEF YGEsdYiosaJG6De3EJSeEeaJuXE/L/uXSeGYK2d/EjlrEgdRHWdXy1JBpDyzldPk uzWCroMOhK8GtvaZrS7ef1eCU40oqQ6NlpsY9ngKqondWsE99OecTDdtYym83McS Px5/8YJPYX3qp5fajeBYN0VmaaIhcEc= -----END CERTIFICATE-----Generated at Sun Apr 27 22:58:07 2025 by rpki-client