$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa File: ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa (raw, json) Hash identifier: aV1X3PYck6H0iZU3MH0d9QUvT/luQfJCE/+yZZYu3B8= Subject key identifier: F9:24:56:49:0D:E5:4B:76:08:2B:C1:75:26:20:64:39:E6:D7:21:69 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B61059D80314872EF350 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b6:10:59:d8:03:14:87:2e:f3:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=17292ac5-943a-466c-a01f-97b900c646ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:fd:ff:5d:13:43:f5:a5:a9:ce:f9:ed:00:e0: 38:ad:9a:cf:e1:39:56:6a:25:b1:78:59:0e:db:92: 1f:83:42:04:4c:df:5c:80:d8:36:27:54:3c:c5:6b: 58:4c:66:6c:5e:d7:67:01:b3:a7:1a:e9:d8:b7:f6: ef:a8:2e:74:92:77:23:94:ed:f6:85:99:88:4a:a5: 37:6f:83:80:26:c6:93:8a:bd:d2:e9:b6:e5:f5:a6: 91:32:a5:1a:0c:d3:4f:93:2a:7a:17:ed:28:bf:f0: ae:73:46:15:ed:09:e4:53:4c:e7:10:67:e9:f8:0e: b8:67:67:71:cc:f6:f2:68:85:95:9c:27:d9:1a:47: 2e:a7:c9:5e:fd:b5:37:f9:31:1b:dc:e1:bf:a0:80: b9:f8:72:6f:d3:9a:24:5c:06:ec:37:1e:be:2b:fa: 08:f8:19:66:35:da:ae:2d:25:55:0b:27:da:72:89: a5:06:c2:2e:ec:ac:8f:f9:d0:58:ce:14:2d:1d:cc: 36:76:2f:89:f0:f8:40:52:6e:5a:11:0e:bf:dc:fe: 5a:7a:fb:7f:fc:32:07:85:cf:d8:3d:79:2d:45:1e: 60:3e:28:db:95:05:a1:c8:ed:68:a4:9d:fa:10:78: d7:44:bd:19:35:07:01:c7:40:17:ee:42:be:68:36: a1:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:24:56:49:0D:E5:4B:76:08:2B:C1:75:26:20:64:39:E6:D7:21:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ae181e2d-8e42-391e-9c34-bd79818fd8b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:a0:f7:d4:1c:2a:9e:44:99:d3:97:d5:42:6b:1b:27:95:02: b2:7a:cd:0b:10:b0:37:62:83:70:75:e3:71:72:7c:5e:eb:87: f6:b0:b2:b5:b4:f7:62:06:eb:70:11:3d:31:c9:aa:2f:fc:b5: a8:50:40:45:f4:87:bc:61:20:bb:35:4f:7a:28:d3:76:9f:8b: b4:a5:dd:f7:ef:6f:3b:84:e7:1f:74:d1:08:16:c1:da:64:07: 12:5e:97:4b:17:64:e1:19:93:da:72:96:c2:15:89:fe:30:6a: 75:8b:c8:01:5d:c3:97:56:bb:24:bd:c6:78:e2:ea:81:ad:fe: ac:10:4d:b9:6d:d5:b3:7c:1f:77:b9:69:17:33:06:8b:89:f7: 48:06:05:70:98:17:06:15:88:3b:c9:cc:60:d7:b3:47:4e:9c: 9a:7b:d5:29:d6:6c:ac:4e:46:9f:0c:e4:6f:86:6c:ee:f1:6d: 46:4d:3d:4b:2d:2f:dc:3e:8d:6a:d7:db:05:95:f6:06:81:3e: 02:b3:32:f9:3c:fd:a3:1b:05:0d:d8:67:d8:68:b4:90:e7:25: 5f:34:b4:86:b4:bb:ae:01:00:de:53:aa:28:c1:d1:1f:d7:f1: 2c:09:e3:cc:62:01:b2:88:a1:db:44:ee:86:c7:14:e3:3d:cf: c2:d6:7c:ce -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLYQWdgDFIcu81AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MTcyOTJhYzUtOTQzYS00NjZjLWEwMWYtOTdiOTAwYzY0NmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArv3/XRND9aWpzvntAOA4rZrP4TlWaiWxeFkO 25Ifg0IETN9cgNg2J1Q8xWtYTGZsXtdnAbOnGunYt/bvqC50kncjlO32hZmISqU3 b4OAJsaTir3S6bbl9aaRMqUaDNNPkyp6F+0ov/Cuc0YV7QnkU0znEGfp+A64Z2dx zPbyaIWVnCfZGkcup8le/bU3+TEb3OG/oIC5+HJv05okXAbsNx6+K/oI+BlmNdqu LSVVCyfacomlBsIu7KyP+dBYzhQtHcw2di+J8PhAUm5aEQ6/3P5aevt//DIHhc/Y PXktRR5gPijblQWhyO1opJ36EHjXRL0ZNQcBx0AX7kK+aDahMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPkkVkkN5Ut2CCvBdSYgZDnm1yFpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYWUxODFlMmQtOGU0Mi0z OTFlLTljMzQtYmQ3OTgxOGZkOGI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBafMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACeg99QcKp5EmdOX1UJrGyeVArJ6zQsQsDdig3B143FyfF7rh/awsrW0 92IG63ARPTHJqi/8tahQQEX0h7xhILs1T3oo03afi7Sl3ffvbzuE5x900QgWwdpk BxJel0sXZOEZk9pylsIVif4wanWLyAFdw5dWuyS9xnji6oGt/qwQTblt1bN8H3e5 aRczBouJ90gGBXCYFwYViDvJzGDXs0dOnJp71SnWbKxORp8M5G+GbO7xbUZNPUst L9w+jWrX2wWV9gaBPgKzMvk8/aMbBQ3YZ9hotJDnJV80tIa0u64BAN5TqijB0R/X 8SwJ48xiAbKIodtE7obHFOM9z8LWfM4= -----END CERTIFICATE-----Generated at Sun Apr 27 18:24:06 2025 by rpki-client