$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa File: bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa (raw, json) Hash identifier: XF3Tken8FNVpRSYfyMP1SMir4G6UmVdQs8aaaPFLQ94= Subject key identifier: A1:AB:DB:A6:A4:F7:69:7D:2B:A6:8F:0D:7C:E1:94:8D:EA:02:B7:D4 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B1402F1FFE78E023AE00 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.130.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b1:40:2f:1f:fe:78:e0:23:ae:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=447c7ee0-8003-496f-87ee-19a734454eea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:39:c7:1b:74:5d:57:a7:9e:cb:3a:8c:b1:fa: f6:a0:e9:75:29:54:d9:3b:d1:98:13:3b:cb:48:6a: 0b:eb:19:52:ce:4e:81:3b:90:c4:ba:be:b6:54:d7: bf:f2:51:2c:4e:b8:b8:c2:dd:85:c4:04:21:b8:86: 62:19:3b:1f:d4:39:47:49:42:a3:a2:48:c0:bb:99: d1:5b:ca:e8:6e:26:14:f9:4c:b1:d4:5d:ea:a9:7d: d2:31:1d:93:1a:a2:16:86:d4:1d:09:85:1b:ea:94: c0:79:0d:eb:57:36:b1:88:d3:c7:04:47:02:72:d2: 94:02:74:91:3e:df:75:fc:50:28:72:dd:81:0d:c6: 47:0e:6d:15:d2:23:bd:92:ba:70:ae:f4:cb:36:78: 18:8b:42:eb:01:64:82:e7:0b:cf:a2:c1:bf:9b:d1: 44:1f:32:0d:a9:d3:ed:cc:a4:07:68:a5:a0:66:5a: bc:0b:95:97:a9:8b:7f:1f:61:f8:11:87:fa:61:d5: 34:36:6d:da:d4:55:42:1e:7b:d1:b2:0e:2c:2f:df: f7:11:2f:bf:e8:c2:38:99:3e:d8:81:a3:7c:e2:11: f7:f6:19:4e:88:d2:27:aa:e8:31:78:f2:9e:97:1b: a2:73:92:1f:05:04:a0:81:94:4b:bf:c0:bf:9b:39: ad:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:AB:DB:A6:A4:F7:69:7D:2B:A6:8F:0D:7C:E1:94:8D:EA:02:B7:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/bfba104c-b527-3487-9bcd-3cd1173b1d9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.130.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 98:d0:fb:d9:04:17:6f:70:a4:97:93:ef:da:4a:51:b4:4a:95: 26:24:6c:60:6d:53:bf:11:11:42:54:53:03:75:38:4e:a5:8d: 9f:cc:b6:56:97:c5:4b:af:41:41:d5:7a:2e:c3:d7:48:91:4d: a3:b8:4d:1b:17:34:aa:3d:0a:63:1b:63:e6:a7:03:59:a9:5a: 3f:7f:7d:1a:bb:36:f8:e9:5a:5c:f1:55:3f:b8:00:2b:ca:2d: 8c:c9:f2:b2:71:ff:2b:c2:be:cc:d4:bf:f9:aa:49:95:94:9c: d7:8e:84:1d:5b:b0:b8:9e:f6:7b:e6:31:00:5a:67:5d:24:ac: 7b:66:f1:2a:d1:fc:91:45:b2:4b:ea:eb:83:c7:a3:ee:be:14: 6c:f6:a4:fa:11:15:47:90:32:c2:81:b1:a9:73:37:be:71:54: 63:d8:fa:c3:d0:bf:23:5b:04:79:e8:e4:ab:75:dc:41:3f:61: 9b:b0:ee:e0:f4:d1:0c:60:46:f2:07:79:96:fa:ea:1e:7a:5b: 93:a0:4b:5a:ae:85:99:17:b6:cc:f8:cc:50:cf:29:ef:b3:88: a2:d2:02:bd:b8:5a:43:8e:82:84:e2:b3:5c:65:b1:a0:f3:7d: 33:b7:4c:45:01:be:bd:f9:71:55:56:92:79:aa:fa:4d:71:c9: f7:48:0e:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLFALx/+eOAjrgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NDQ3YzdlZTAtODAwMy00OTZmLTg3ZWUtMTlhNzM0NDU0ZWVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqDnHG3RdV6eeyzqMsfr2oOl1KVTZO9GYEzvL SGoL6xlSzk6BO5DEur62VNe/8lEsTri4wt2FxAQhuIZiGTsf1DlHSUKjokjAu5nR W8robiYU+Uyx1F3qqX3SMR2TGqIWhtQdCYUb6pTAeQ3rVzaxiNPHBEcCctKUAnSR Pt91/FAoct2BDcZHDm0V0iO9krpwrvTLNngYi0LrAWSC5wvPosG/m9FEHzINqdPt zKQHaKWgZlq8C5WXqYt/H2H4EYf6YdU0Nm3a1FVCHnvRsg4sL9/3ES+/6MI4mT7Y gaN84hH39hlOiNInqugxePKelxuic5IfBQSggZRLv8C/mzmtBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGr26ak92l9K6aPDXzhlI3qArfUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYmZiYTEwNGMtYjUyNy0z NDg3LTliY2QtM2NkMTE3M2IxZDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJjQ+9kEF29wpJeT79pKUbRKlSYkbGBtU78REUJUUwN1OE6ljZ/MtlaX xUuvQUHVei7D10iRTaO4TRsXNKo9CmMbY+anA1mpWj9/fRq7NvjpWlzxVT+4ACvK LYzJ8rJx/yvCvszUv/mqSZWUnNeOhB1bsLie9nvmMQBaZ10krHtm8SrR/JFFskvq 64PHo+6+FGz2pPoRFUeQMsKBsalzN75xVGPY+sPQvyNbBHno5Kt13EE/YZuw7uD0 0QxgRvIHeZb66h56W5OgS1quhZkXtsz4zFDPKe+ziKLSAr24WkOOgoTis1xlsaDz fTO3TEUBvr35cVVWknmq+k1xyfdIDsU= -----END CERTIFICATE-----Generated at Mon Apr 28 09:26:53 2025 by rpki-client