$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa File: c96f3789-8034-380c-9379-7cb735811c20.roa (raw, json) Hash identifier: vEwCoqximSkwXrC5IRub46NJnZ99VtUGrV1QMRDmJ/Y= Subject key identifier: EE:12:A2:19:00:30:DF:FD:03:D9:5C:31:71:0A:77:98:82:17:82:92 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24AB0209F673D280F80658 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.146.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ab:02:09:f6:73:d2:80:f8:06:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8a518f0e-3b6a-44c3-a479-3bf502994a16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:4a:50:af:cb:b3:11:cc:93:de:75:45:06:15: 28:bc:db:8a:6f:cf:5a:77:8b:80:50:74:3b:07:58: 49:4b:15:6b:80:be:2c:9a:7a:3d:2b:71:b6:39:0b: dd:8b:54:28:d6:95:ad:86:b6:0d:ee:a1:b3:87:bb: 76:5a:b4:9a:3b:d2:c3:96:17:c8:de:cc:3c:eb:b5: bf:ad:9a:ea:b0:e9:d2:18:32:a5:8e:57:51:70:7e: e0:e3:cd:92:c0:05:1f:6e:a0:4e:ca:4a:43:78:fa: 78:1f:f4:49:cd:99:a1:ac:41:b4:3d:a8:45:d3:19: bc:00:86:14:69:90:0e:99:72:06:15:80:ef:25:ea: af:b8:85:19:09:d7:7c:7d:60:6f:d1:3c:eb:7d:4c: 45:6d:d5:65:ab:a8:df:24:e7:8a:27:7d:82:53:86: e9:f6:c3:78:e0:1a:83:fe:05:6e:19:6c:cc:1c:23: da:b5:89:1d:b2:79:3e:7c:54:17:9e:51:58:38:c4: 6f:f0:19:e7:4a:7e:ec:20:5b:24:80:83:06:7d:fe: aa:8e:24:fd:ec:0d:e7:e4:92:28:96:38:0e:d4:8b: 2e:1f:98:5f:03:98:7f:19:20:26:3d:bb:35:f1:36: 53:8d:39:39:83:65:c8:74:1b:7a:8b:8f:66:3d:4a: 4f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:12:A2:19:00:30:DF:FD:03:D9:5C:31:71:0A:77:98:82:17:82:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/c96f3789-8034-380c-9379-7cb735811c20.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.146.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:8f:7b:1d:71:c5:0a:c5:d7:54:33:b6:bd:41:5f:15:18:81: 42:91:ac:69:54:7c:77:bf:03:f9:e1:11:88:68:e5:fa:4d:e0: 8a:bc:d8:9f:0c:9e:92:e3:41:fb:18:1f:54:13:b9:cf:f5:20: e4:0f:cc:cd:e3:ea:4d:a8:98:bc:fe:3b:a7:5e:4f:00:31:78: 55:63:81:78:ad:5c:4f:d6:00:23:53:40:96:bb:06:7c:47:1e: 3e:d8:9f:d0:b6:95:33:ba:99:0d:dc:c2:f2:d8:39:18:c4:65: d9:20:d6:e0:8c:76:26:84:cb:85:52:91:a7:c7:c1:29:c6:61: 84:b1:21:37:d9:8f:72:80:af:5d:a4:bc:b2:87:1c:d9:09:20: 6f:eb:f6:9d:f5:30:5a:9d:f0:c1:a2:74:9d:f7:7e:ad:0b:5a: 5d:ad:e2:f4:59:a9:c0:76:44:a5:6e:ec:58:32:e1:ad:c8:9f: 3a:d3:92:80:c4:9c:93:14:0d:55:2b:9b:78:99:61:89:96:75: fb:27:cc:07:88:f8:96:02:73:ff:28:ca:6c:9d:ae:f1:34:0e: 80:90:ee:6b:d8:59:6b:29:a7:15:5c:58:c8:3d:3a:53:51:48: 93:6b:c4:c9:96:31:5c:cd:ac:b4:e8:3b:2d:65:de:d8:cb:3e: 04:10:15:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKsCCfZz0oD4BlgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGE1MThmMGUtM2I2YS00NGMzLWE0NzktM2JmNTAyOTk0YTE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzUpQr8uzEcyT3nVFBhUovNuKb89ad4uAUHQ7 B1hJSxVrgL4smno9K3G2OQvdi1Qo1pWthrYN7qGzh7t2WrSaO9LDlhfI3sw867W/ rZrqsOnSGDKljldRcH7g482SwAUfbqBOykpDePp4H/RJzZmhrEG0PahF0xm8AIYU aZAOmXIGFYDvJeqvuIUZCdd8fWBv0TzrfUxFbdVlq6jfJOeKJ32CU4bp9sN44BqD /gVuGWzMHCPatYkdsnk+fFQXnlFYOMRv8BnnSn7sIFskgIMGff6qjiT97A3n5JIo ljgO1IsuH5hfA5h/GSAmPbs18TZTjTk5g2XIdBt6i49mPUpPWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4SohkAMN/9A9lcMXEKd5iCF4KSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvYzk2ZjM3ODktODAzNC0z ODBjLTkzNzktN2NiNzM1ODExYzIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFGPex1xxQrF11Qztr1BXxUYgUKRrGlUfHe/A/nhEYho5fpN4Iq82J8M npLjQfsYH1QTuc/1IOQPzM3j6k2omLz+O6deTwAxeFVjgXitXE/WACNTQJa7BnxH Hj7Yn9C2lTO6mQ3cwvLYORjEZdkg1uCMdiaEy4VSkafHwSnGYYSxITfZj3KAr12k vLKHHNkJIG/r9p31MFqd8MGidJ33fq0LWl2t4vRZqcB2RKVu7Fgy4a3InzrTkoDE nJMUDVUrm3iZYYmWdfsnzAeI+JYCc/8oymydrvE0DoCQ7mvYWWsppxVcWMg9OlNR SJNrxMmWMVzNrLToOy1l3tjLPgQQFXA= -----END CERTIFICATE-----Generated at Mon Apr 28 00:41:02 2025 by rpki-client