$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa File: bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa (raw, json) Hash identifier: ZdyzxOr/1HdP/1wcMTux8uvxr1ULx2qjV89HPTrMMKo= Subject key identifier: 24:2E:36:A2:D3:E1:D2:9D:2F:44:2C:09:8B:F2:13:8C:C6:BD:72:A2 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B34809B49A06BED638C0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.156.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b3:48:09:b4:9a:06:be:d6:38:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=2f1f93c8-f5aa-4feb-aff3-a1842c28de0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:dd:22:6a:03:da:05:37:80:a5:26:b8:ba:9f: 27:5a:15:14:70:a2:1a:ed:b5:03:6d:5d:92:22:94: a0:83:15:10:0c:6e:da:ea:e5:ac:7f:5e:29:0a:15: c2:e3:44:e1:96:c8:ba:a8:cc:75:09:0c:81:12:54: 74:ac:7e:0f:9a:79:a6:0d:2b:0c:f1:8b:5a:4f:6b: 98:4a:31:80:45:74:47:76:b4:04:cb:68:48:f8:7f: 5f:08:ae:30:7f:1e:32:e2:e5:05:10:da:ba:27:66: af:9c:10:f3:7d:f3:18:27:48:ea:93:7e:66:97:dc: 5b:96:df:05:25:eb:05:ca:cc:29:13:52:08:76:4a: 6f:23:17:b8:e2:41:bd:8a:c6:e8:42:4c:59:63:7f: 64:74:82:68:08:6f:45:83:e5:ed:9d:77:9c:3d:d3: c3:5d:3b:9d:b5:22:8b:27:75:81:85:d5:72:be:42: b0:d8:47:67:7a:a2:6a:59:bf:8e:4b:f0:35:9e:4e: 67:ef:33:88:02:7e:14:72:10:6c:9c:dd:8b:35:0b: 3c:88:42:1f:33:1f:c4:8d:a6:f9:f1:ea:bc:b1:74: b2:5e:18:46:94:23:04:4d:85:c3:04:2e:66:87:df: cb:f7:04:69:7e:20:39:00:74:4e:13:b3:6c:d6:0a: 3c:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:2E:36:A2:D3:E1:D2:9D:2F:44:2C:09:8B:F2:13:8C:C6:BD:72:A2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bd7ea33b-0e97-33ea-b5b6-4d02a7516d04.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.156.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:c1:b7:7e:35:48:15:ec:7a:45:b7:50:9d:31:bd:46:4e:6a: a4:0b:ff:66:83:a4:78:30:bf:7f:a6:63:17:82:83:c8:41:3f: 90:41:fe:4a:ad:2f:00:ea:96:6d:7f:28:92:00:c9:e5:db:f8: 1a:26:61:22:1b:2b:fa:fc:4c:2b:f1:55:59:8a:69:de:7c:3d: c7:3c:f5:b7:56:54:8e:b3:a8:3c:6c:ad:86:78:93:d2:21:6f: 95:9a:9b:9e:61:d6:17:00:bd:56:eb:b3:8b:76:c5:08:6e:25: d9:69:03:bf:32:fd:06:1e:7e:a6:e1:c7:65:e5:ce:8d:f8:c9: bd:91:c4:2c:28:82:3c:74:de:35:ef:58:d4:d2:b4:a8:60:36: cf:f7:6a:c8:71:fc:a5:00:3d:e8:36:72:fb:de:06:fc:2e:ed: 25:a3:da:ad:38:48:58:02:88:22:3f:30:c3:e0:85:ab:be:7d: 23:11:a3:03:be:55:cc:9e:a4:72:1c:17:60:75:42:57:24:59: fd:bf:23:dd:67:15:25:46:fc:9d:5d:56:c5:98:b3:de:c2:11: 11:2f:83:55:e5:5c:53:9f:7c:38:96:55:97:d2:38:0b:76:87: a7:79:a1:08:53:3a:69:b9:59:95:f0:e4:c9:85:6f:f8:d3:fa: 48:e2:53:ed -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLNICbSaBr7WOMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk MmYxZjkzYzgtZjVhYS00ZmViLWFmZjMtYTE4NDJjMjhkZTBlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA490iagPaBTeApSa4up8nWhUUcKIa7bUDbV2S IpSggxUQDG7a6uWsf14pChXC40Thlsi6qMx1CQyBElR0rH4PmnmmDSsM8YtaT2uY SjGARXRHdrQEy2hI+H9fCK4wfx4y4uUFENq6J2avnBDzffMYJ0jqk35ml9xblt8F JesFyswpE1IIdkpvIxe44kG9isboQkxZY39kdIJoCG9Fg+XtnXecPdPDXTudtSKL J3WBhdVyvkKw2EdneqJqWb+OS/A1nk5n7zOIAn4UchBsnN2LNQs8iEIfMx/Ejab5 8eq8sXSyXhhGlCMETYXDBC5mh9/L9wRpfiA5AHROE7Ns1go8IwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCQuNqLT4dKdL0QsCYvyE4zGvXKiMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmQ3ZWEzM2ItMGU5Ny0z M2VhLWI1YjYtNGQwMmE3NTE2ZDA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBacMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJrBt341SBXsekW3UJ0xvUZOaqQL/2aDpHgwv3+mYxeCg8hBP5BB/kqt LwDqlm1/KJIAyeXb+BomYSIbK/r8TCvxVVmKad58Pcc89bdWVI6zqDxsrYZ4k9Ih b5Wam55h1hcAvVbrs4t2xQhuJdlpA78y/QYefqbhx2Xlzo34yb2RxCwogjx03jXv WNTStKhgNs/3ashx/KUAPeg2cvveBvwu7SWj2q04SFgCiCI/MMPghau+fSMRowO+ VcyepHIcF2B1QlckWf2/I91nFSVG/J1dVsWYs97CEREvg1XlXFOffDiWVZfSOAt2 h6d5oQhTOmm5WZXw5MmFb/jT+kjiU+0= -----END CERTIFICATE-----Generated at Sun Apr 27 22:59:03 2025 by rpki-client