$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa File: b9976d2c-e93d-3060-b104-42102b50cd67.roa (raw, json) Hash identifier: dgyaCnq7cJ0RVGsHHFcoyMf69ejNeZ65b7R6lcUj+WU= Subject key identifier: 80:9F:64:6A:20:38:1F:44:86:A0:5C:A5:3A:96:41:71:F0:98:94:E3 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B4B08A08337ABF93DD00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b4:b0:8a:08:33:7a:bf:93:dd:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=86d968a5-a972-4337-841a-7e4e0270880a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:ab:b8:04:49:7e:ea:1d:4c:3b:5c:33:ec:c0: 60:e6:72:28:5f:6e:17:af:63:01:5e:f5:08:b9:c0: 86:27:57:44:3c:9a:43:f7:39:22:55:83:62:5f:9a: 54:b0:1b:7e:35:68:2b:b6:d4:ff:5c:08:f3:d4:01: 86:28:63:5c:ae:58:b7:b4:7c:c3:04:94:b9:a9:8d: ff:a6:c4:76:9a:2a:a1:65:62:95:0b:c2:2d:8a:2f: 66:cb:63:6f:1f:f9:84:5c:45:ec:f8:1f:ac:c4:4a: 9b:7d:71:7e:10:fe:d6:65:bd:2a:6f:80:2f:a0:fb: 1d:16:b8:33:f1:a7:00:23:3f:9f:c0:c0:52:02:d7: 2b:14:d7:1c:82:2d:b3:29:bd:b9:fc:40:7d:05:fb: 6a:e4:02:8e:86:e2:9f:d5:03:87:68:da:5a:ef:e2: 07:e9:e0:12:b7:95:76:10:d8:d4:ff:8e:00:67:b7: f5:95:b3:12:31:c8:50:ab:6d:70:c3:19:b0:61:b0: 36:c3:be:7e:00:ce:c1:54:2d:3e:43:fa:57:07:51: 7d:94:30:45:b9:b9:49:da:09:7b:c2:b0:d1:92:a6: b2:5f:30:00:ab:fa:93:c4:64:33:ed:5d:ad:b6:cc: 82:db:ac:d6:a1:9a:0d:ce:0d:d3:70:f3:2d:cf:47: 42:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:9F:64:6A:20:38:1F:44:86:A0:5C:A5:3A:96:41:71:F0:98:94:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/b9976d2c-e93d-3060-b104-42102b50cd67.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:6f:78:59:3e:a2:d1:b3:ac:27:6f:3b:4e:3c:aa:d8:0f:11: 97:5d:45:0d:91:e2:19:30:21:2a:af:9e:7f:2c:b9:2b:02:36: 81:8c:83:89:b1:37:73:76:09:a9:d5:4a:b4:cb:22:e4:4c:f4: 77:f6:99:67:14:2e:49:f2:5c:34:e0:73:8d:63:5a:cc:8a:f9: a2:a7:56:12:8f:cd:b6:de:f4:e0:eb:61:d1:1a:0c:39:7d:ba: dd:76:2d:f3:34:7e:23:a7:66:27:33:ab:a6:60:00:d2:61:8a: a9:42:d8:da:5b:22:42:19:63:24:86:31:d9:49:14:06:2f:4d: 65:25:86:81:44:e4:49:f5:80:c9:61:c0:f8:35:a8:0d:61:df: 04:63:ab:e5:b3:66:3c:fe:84:46:48:08:cb:ea:c6:f7:ab:85: f1:5d:6f:20:70:4f:8c:6b:4a:9b:87:0e:72:4e:ab:26:1c:72: a0:0f:81:d4:09:88:4c:e1:22:0f:3e:3b:66:3c:cf:b8:82:a9: 4f:e9:1f:49:00:f7:c8:85:2d:ce:77:b4:00:25:86:4e:f8:0d: 56:09:c3:cc:62:ed:d2:1c:b4:8c:76:e3:c7:8a:05:80:d2:01: 4e:75:4f:5e:67:63:8e:ac:5c:9b:56:5f:58:e5:49:c4:b2:e8: 28:8a:7d:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLSwiggzer+T3QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ODZkOTY4YTUtYTk3Mi00MzM3LTg0MWEtN2U0ZTAyNzA4ODBhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmau4BEl+6h1MO1wz7MBg5nIoX24Xr2MBXvUI ucCGJ1dEPJpD9zkiVYNiX5pUsBt+NWgrttT/XAjz1AGGKGNcrli3tHzDBJS5qY3/ psR2miqhZWKVC8Itii9my2NvH/mEXEXs+B+sxEqbfXF+EP7WZb0qb4AvoPsdFrgz 8acAIz+fwMBSAtcrFNccgi2zKb25/EB9Bftq5AKOhuKf1QOHaNpa7+IH6eASt5V2 ENjU/44AZ7f1lbMSMchQq21wwxmwYbA2w75+AM7BVC0+Q/pXB1F9lDBFublJ2gl7 wrDRkqayXzAAq/qTxGQz7V2ttsyC26zWoZoNzg3TcPMtz0dCCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFICfZGogOB9EhqBcpTqWQXHwmJTjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYjk5NzZkMmMtZTkzZC0z MDYwLWIxMDQtNDIxMDJiNTBjZDY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHZveFk+otGzrCdvO048qtgPEZddRQ2R4hkwISqvnn8suSsCNoGMg4mx N3N2CanVSrTLIuRM9Hf2mWcULknyXDTgc41jWsyK+aKnVhKPzbbe9ODrYdEaDDl9 ut12LfM0fiOnZiczq6ZgANJhiqlC2NpbIkIZYySGMdlJFAYvTWUlhoFE5En1gMlh wPg1qA1h3wRjq+WzZjz+hEZICMvqxverhfFdbyBwT4xrSpuHDnJOqyYccqAPgdQJ iEzhIg8+O2Y8z7iCqU/pH0kA98iFLc53tAAlhk74DVYJw8xi7dIctIx248eKBYDS AU51T15nY46sXJtWX1jlScSy6CiKfX0= -----END CERTIFICATE-----Generated at Mon Apr 28 08:27:57 2025 by rpki-client