$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa File: a695f056-3b40-3250-b954-f1d214a7bdea.roa (raw, json) Hash identifier: BY8xtz8Mg1LrsF6+AMoPBEuKnCca1pzcWTAg7c4Yays= Subject key identifier: D1:12:51:61:12:93:44:E1:46:57:84:FB:AC:59:84:06:E3:77:FC:CA Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24AF3E440EA51E4332DBC0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.132.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:af:3e:44:0e:a5:1e:43:32:db:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=d4ba3351-b40c-4588-84c2-20ec66ccf434 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:0e:a9:7b:fd:b7:26:80:f7:31:a3:60:bf:a9: 61:25:70:bf:dd:a3:c8:08:51:c4:7b:28:71:0d:4f: 2c:be:e5:d1:36:9d:7c:3e:52:3a:cd:95:10:1e:eb: 21:eb:6f:5e:8c:a0:41:f0:bb:7d:52:67:57:97:3b: 9d:87:65:46:db:2d:13:8f:9e:15:c1:88:dd:fe:4e: 17:ba:df:50:fc:ca:95:ae:77:83:c5:ac:6f:cf:d7: 09:89:5b:cd:92:27:41:2c:8b:69:9a:ac:12:05:74: 16:38:91:9f:97:51:0f:8b:bb:0d:5e:40:bb:fc:6a: 49:b0:ae:42:27:64:02:06:1d:70:fc:e7:4a:6f:50: 5d:cb:84:28:38:b9:98:46:e0:e8:26:6b:52:29:ff: 90:64:12:9f:ca:21:11:3a:a0:dc:14:b9:d6:7d:04: 87:5e:1c:ca:c9:55:2b:96:9f:ac:a3:06:39:c8:23: 29:28:77:16:dc:01:41:de:1e:71:13:af:f1:07:7f: 12:56:59:61:5d:90:5d:23:16:3e:af:a2:2a:92:2e: f6:e1:ec:8b:2e:87:09:f9:ac:47:7d:98:99:44:e8: d3:a9:c5:ad:8a:a4:4b:f6:a8:b6:3d:c5:1d:64:cb: b1:b7:04:13:91:97:30:ba:2c:3e:4f:da:9b:ea:c7: fb:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:12:51:61:12:93:44:E1:46:57:84:FB:AC:59:84:06:E3:77:FC:CA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/a695f056-3b40-3250-b954-f1d214a7bdea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.132.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:bf:dd:1d:51:6f:24:bf:03:f9:98:8c:8f:fd:43:7a:e9:e3: bb:9d:d2:61:32:40:72:87:5d:01:b5:21:66:10:00:2e:c2:70: 66:2b:3b:44:d4:99:ac:f9:6b:ff:8d:4a:39:62:88:55:27:7d: 79:b5:86:bf:34:e4:20:29:72:2e:40:a4:28:39:43:0e:51:f2: c7:a4:2d:f6:00:5b:c9:c4:42:29:e9:ef:f1:cd:44:83:22:50: b7:13:d8:9c:53:8c:e3:58:c9:fa:35:49:68:15:ee:ee:3f:b4: f9:26:55:80:80:1c:1a:97:1d:03:fa:84:1a:f5:d1:c6:5b:b1: b0:66:3a:3f:08:17:a3:1c:f5:48:41:26:5d:04:69:a4:bd:11: 8a:1f:f7:dd:d1:4e:fe:f6:a4:6d:05:c5:58:f2:ee:b2:ad:b8: ac:6b:f5:b2:59:bf:7a:70:63:cb:95:b6:7e:e4:0b:47:1a:b5: d0:43:7b:bd:b1:69:bd:29:46:e1:d0:9c:78:c8:59:15:fa:16: 99:e9:8b:eb:51:2a:4f:fe:a0:64:c9:99:b0:3c:06:30:58:9f: 25:d3:9e:4f:d0:07:84:ae:34:1c:95:82:97:21:97:c0:63:ec: fd:80:21:7c:05:f6:47:d4:2e:9a:42:f1:82:5f:dd:ff:2d:32: 72:bb:a1:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK8+RA6lHkMy28AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDRiYTMzNTEtYjQwYy00NTg4LTg0YzItMjBlYzY2Y2NmNDM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6g6pe/23JoD3MaNgv6lhJXC/3aPICFHEeyhx DU8svuXRNp18PlI6zZUQHush629ejKBB8Lt9UmdXlzudh2VG2y0Tj54VwYjd/k4X ut9Q/MqVrneDxaxvz9cJiVvNkidBLItpmqwSBXQWOJGfl1EPi7sNXkC7/GpJsK5C J2QCBh1w/OdKb1Bdy4QoOLmYRuDoJmtSKf+QZBKfyiEROqDcFLnWfQSHXhzKyVUr lp+sowY5yCMpKHcW3AFB3h5xE6/xB38SVllhXZBdIxY+r6Iqki724eyLLocJ+axH fZiZROjTqcWtiqRL9qi2PcUdZMuxtwQTkZcwuiw+T9qb6sf7FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNESUWESk0ThRleE+6xZhAbjd/zKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYTY5NWYwNTYtM2I0MC0z MjUwLWI5NTQtZjFkMjE0YTdiZGVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIW/3R1RbyS/A/mYjI/9Q3rp47ud0mEyQHKHXQG1IWYQAC7CcGYrO0TU maz5a/+NSjliiFUnfXm1hr805CApci5ApCg5Qw5R8sekLfYAW8nEQinp7/HNRIMi ULcT2JxTjONYyfo1SWgV7u4/tPkmVYCAHBqXHQP6hBr10cZbsbBmOj8IF6Mc9UhB Jl0EaaS9EYof993RTv72pG0FxVjy7rKtuKxr9bJZv3pwY8uVtn7kC0catdBDe72x ab0pRuHQnHjIWRX6Fpnpi+tRKk/+oGTJmbA8BjBYnyXTnk/QB4SuNByVgpchl8Bj 7P2AIXwF9kfULppC8YJf3f8tMnK7obo= -----END CERTIFICATE-----Generated at Mon Apr 28 00:55:03 2025 by rpki-client