$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa File: 9afd2348-7f86-323b-8d7a-9a4032518ea1.roa (raw, json) Hash identifier: PdfiMJ7twv8H7LlyF213kspbjyBwLv+/ugDRp6hPqUo= Subject key identifier: CF:41:8A:6C:8C:F8:56:44:79:3A:0F:EC:1D:25:94:7D:0F:95:55:32 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D1D8BB1882AE18BF9400 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d1:d8:bb:18:82:ae:18:bf:94:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=251cba64-8b69-48f3-bb16-5b6b05847a6e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:bf:b4:01:cd:21:11:ea:7f:49:fd:dc:a0:d4: be:94:9d:73:1a:e9:21:19:8f:84:f1:54:89:b5:98: 18:1c:e8:e1:ea:1b:c7:2a:71:cb:73:4f:84:e5:b8: ac:20:84:4b:7d:68:ab:0c:a9:4b:b7:b9:22:cb:8b: cf:f9:a6:2e:da:12:8b:28:27:2b:d8:ea:80:10:7d: e8:e1:84:d1:7d:48:1f:31:ab:ef:70:85:16:42:3c: 6a:5d:94:37:3a:ba:89:3a:d4:33:e2:12:46:fa:50: 05:c4:cc:09:f0:13:5b:c8:7f:aa:0f:97:de:88:f3: 81:54:42:d5:83:1c:05:55:45:74:a6:4f:85:cd:75: fb:29:60:07:63:f4:ee:20:a9:ef:5c:d1:73:52:27: 93:49:75:bb:cc:f3:f1:02:85:3e:54:f5:b3:89:14: cf:f7:8e:36:9a:19:7a:d9:22:e7:5a:f0:c5:a0:38: 23:6d:fb:99:65:16:c0:5c:be:5e:f3:5a:82:a7:09: f2:34:d2:16:16:35:7c:4d:f9:ec:69:cc:6f:e6:b8: fa:04:d7:f5:1a:85:7f:a5:95:fb:bb:a9:39:c6:3a: 17:c6:b8:8d:88:48:8c:b2:ae:d2:e6:be:d2:f8:2d: b9:f8:d9:52:13:68:06:a6:34:00:7e:ab:17:73:16: 08:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:41:8A:6C:8C:F8:56:44:79:3A:0F:EC:1D:25:94:7D:0F:95:55:32 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 96:e9:cf:ce:ff:11:84:8c:1d:fd:d8:4d:86:60:aa:f6:4d:e5: 41:f7:4e:fa:0c:42:e8:cf:ab:e2:c4:04:bf:2e:55:d8:1a:e1: 7d:95:47:fd:11:76:c5:95:21:c2:05:1d:b8:4a:c4:0e:d4:3f: 9d:ae:63:2c:88:ca:23:1a:18:c5:d0:da:63:e6:d6:bf:3a:0b: 1c:bf:0c:93:1a:f8:45:4e:69:1e:08:43:93:f3:49:c1:2e:61: 30:e4:6e:a0:10:29:45:0f:6d:fe:dc:e7:4a:ca:d5:32:b1:0d: 46:f2:f5:e4:26:f0:b2:02:89:4e:bd:ef:fd:3e:88:37:df:36: af:ef:2f:14:9e:26:17:b7:39:82:a4:6e:c5:11:ee:72:d6:c9: db:aa:9a:b7:48:06:63:f9:66:c2:74:44:4d:4e:38:26:0a:10: 69:5f:c4:ad:63:eb:30:00:a2:35:21:0c:4a:7a:0e:a5:62:56: db:39:18:1c:f4:06:55:7e:cd:5d:89:a5:c1:99:79:81:3e:64: e9:f0:cc:6a:bb:1f:49:51:ae:e1:5f:37:54:29:ec:e9:ca:fc: 1b:68:1d:24:0e:a1:3b:d3:28:e4:f8:19:46:76:1a:0a:c5:6c: 1c:0d:d4:f2:cf:62:bd:18:87:c2:9d:93:a3:7e:42:32:47:a6: be:23:de:48 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNHYuxiCrhi/lAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MjUxY2JhNjQtOGI2OS00OGYzLWJiMTYtNWI2YjA1ODQ3YTZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiL+0Ac0hEep/Sf3coNS+lJ1zGukhGY+E8VSJ tZgYHOjh6hvHKnHLc0+E5bisIIRLfWirDKlLt7kiy4vP+aYu2hKLKCcr2OqAEH3o 4YTRfUgfMavvcIUWQjxqXZQ3OrqJOtQz4hJG+lAFxMwJ8BNbyH+qD5feiPOBVELV gxwFVUV0pk+FzXX7KWAHY/TuIKnvXNFzUieTSXW7zPPxAoU+VPWziRTP9442mhl6 2SLnWvDFoDgjbfuZZRbAXL5e81qCpwnyNNIWFjV8Tfnsacxv5rj6BNf1GoV/pZX7 u6k5xjoXxriNiEiMsq7S5r7S+C25+NlSE2gGpjQAfqsXcxYIvQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM9BimyM+FZEeToP7B0llH0PlVUyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWFmZDIzNDgtN2Y4Ni0z MjNiLThkN2EtOWE0MDMyNTE4ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJbpz87/EYSMHf3YTYZgqvZN5UH3TvoMQujPq+LEBL8uVdga4X2VR/0R dsWVIcIFHbhKxA7UP52uYyyIyiMaGMXQ2mPm1r86Cxy/DJMa+EVOaR4IQ5PzScEu YTDkbqAQKUUPbf7c50rK1TKxDUby9eQm8LICiU697/0+iDffNq/vLxSeJhe3OYKk bsUR7nLWyduqmrdIBmP5ZsJ0RE1OOCYKEGlfxK1j6zAAojUhDEp6DqViVts5GBz0 BlV+zV2JpcGZeYE+ZOnwzGq7H0lRruFfN1Qp7OnK/BtoHSQOoTvTKOT4GUZ2GgrF bBwN1PLPYr0Yh8Kdk6N+QjJHpr4j3kg= -----END CERTIFICATE-----Generated at Mon Apr 28 16:31:53 2025 by rpki-client