$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa File: cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa (raw, json) Hash identifier: 8Vr7ib+1pdU050jYuQeWGLHIeJUKbaonRIOI5Dl4Qg4= Subject key identifier: A2:5D:62:87:A0:A3:E0:0A:2A:C3:7A:9A:B2:8D:BE:0E:FA:FF:35:66 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24B41FD30DEAE5CC86D280 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.147.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:b4:1f:d3:0d:ea:e5:cc:86:d2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fb3b366b-3ced-447d-a43e-5af29b2692e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:d6:14:29:ce:4d:e0:bd:60:a4:44:35:93:86: 95:8e:e8:e7:cb:d1:19:2b:a0:d2:d0:0d:4d:86:db: 4a:94:2c:8d:35:03:cb:75:04:61:16:5e:f4:31:92: 2c:b9:57:49:a4:3c:0e:ac:3a:32:3f:76:08:b9:05: 83:ed:5b:d9:b3:5e:38:5b:7e:a3:64:fb:f8:50:43: b3:30:4a:b2:6c:46:4e:b4:b8:4f:7b:68:17:ee:df: fb:a6:ca:7e:a0:e4:7c:8b:9d:e6:9c:0a:59:e0:f8: ba:2f:70:64:21:c3:14:d9:4f:12:11:d3:65:cd:83: c4:4b:d1:cf:51:5c:10:cb:7c:16:ed:68:9a:35:d8: 7a:c7:d3:9c:b3:62:b3:d9:b2:80:dd:b1:66:c2:11: 0f:3b:27:25:33:fe:39:bd:d2:7a:2e:56:b7:1b:72: 99:cf:25:c1:b3:b8:5e:28:31:d9:b2:4b:c7:08:6a: b2:6e:d7:cc:ae:37:0f:da:3f:d2:c1:75:0d:f6:9b: 12:a6:ed:68:f7:2b:18:01:8f:5f:d0:69:6b:de:ba: 54:75:e8:db:74:3f:b5:65:01:db:a1:24:95:79:e6: 81:90:6b:a5:f9:1e:4e:e0:fe:b7:74:36:0e:41:68: 7b:20:16:de:09:55:85:51:ce:13:d6:b4:c5:d7:5f: 84:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5D:62:87:A0:A3:E0:0A:2A:C3:7A:9A:B2:8D:BE:0E:FA:FF:35:66 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cbf61d04-006b-3dbe-ae48-90aeaa9b6aa0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.147.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:f0:49:fa:c3:0c:96:ac:d4:00:64:d3:ce:4e:d3:95:81:e9: c0:64:54:96:16:fa:ed:8d:86:75:67:eb:63:53:a6:1d:4b:e1: 75:06:78:32:3b:97:ea:f6:78:c2:69:9a:ad:a1:e2:cc:23:47: 43:24:ad:82:22:6b:64:8a:31:b8:3f:89:3a:95:4a:fd:1b:8f: 26:24:b9:8f:b5:49:5c:ef:09:11:bf:2d:ea:a3:03:d1:d2:d2: 5d:3f:d4:e8:2f:81:25:33:b9:b0:1e:08:4d:7e:92:b2:c8:13: b7:11:e4:9c:7b:4d:e1:9c:46:72:9d:c3:21:81:07:16:80:2a: fc:4e:f2:4e:43:51:0e:68:47:d4:e8:75:54:2d:5f:74:08:f8: 3c:59:f0:8e:da:38:6c:3a:90:f4:9d:f1:ff:51:2e:a5:90:42: 2f:13:d6:f4:13:9e:18:4d:fa:86:19:90:60:de:41:f4:45:c7: 7a:b3:85:b2:1c:f4:39:08:1b:4e:4d:61:49:df:e4:21:6c:1c: a8:9e:f7:ee:aa:e4:a7:d4:3b:f6:89:c6:e0:0b:2d:fb:f4:e1: de:fc:01:63:32:f9:9f:4b:13:34:ed:0a:e8:46:de:b5:24:8c: 68:63:9e:fa:25:1e:0e:2a:af:2b:75:95:ab:f3:e8:75:35:7d: 99:7d:78:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLQf0w3q5cyG0oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmIzYjM2NmItM2NlZC00NDdkLWE0M2UtNWFmMjliMjY5MmU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdYUKc5N4L1gpEQ1k4aVjujny9EZK6DS0A1N httKlCyNNQPLdQRhFl70MZIsuVdJpDwOrDoyP3YIuQWD7VvZs144W36jZPv4UEOz MEqybEZOtLhPe2gX7t/7psp+oOR8i53mnApZ4Pi6L3BkIcMU2U8SEdNlzYPES9HP UVwQy3wW7WiaNdh6x9Ocs2Kz2bKA3bFmwhEPOyclM/45vdJ6Lla3G3KZzyXBs7he KDHZskvHCGqybtfMrjcP2j/SwXUN9psSpu1o9ysYAY9f0Glr3rpUdejbdD+1ZQHb oSSVeeaBkGul+R5O4P63dDYOQWh7IBbeCVWFUc4T1rTF11+EHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKJdYoego+AKKsN6mrKNvg76/zVmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvY2JmNjFkMDQtMDA2Yi0z ZGJlLWFlNDgtOTBhZWFhOWI2YWEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaTMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvwSfrDDJas1ABk085O05WB6cBkVJYW+u2NhnVn62NTph1L4XUGeDI7 l+r2eMJpmq2h4swjR0MkrYIia2SKMbg/iTqVSv0bjyYkuY+1SVzvCRG/LeqjA9HS 0l0/1OgvgSUzubAeCE1+krLIE7cR5Jx7TeGcRnKdwyGBBxaAKvxO8k5DUQ5oR9To dVQtX3QI+DxZ8I7aOGw6kPSd8f9RLqWQQi8T1vQTnhhN+oYZkGDeQfRFx3qzhbIc 9DkIG05NYUnf5CFsHKie9+6q5KfUO/aJxuALLfv04d78AWMy+Z9LEzTtCuhG3rUk jGhjnvolHg4qryt1lavz6HU1fZl9eEc= -----END CERTIFICATE-----Generated at Mon Apr 28 06:12:53 2025 by rpki-client