$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa File: cfa83893-71b6-3e5f-84ca-567698627079.roa (raw, json) Hash identifier: Yy+SfxgPiAQ3+AIhBGI0qEohKd5+ekw1tnOLu6lL7mE= Subject key identifier: EF:14:79:AA:26:9F:22:CB:DA:29:22:BD:B2:23:73:AB:F2:D0:B6:29 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24A853BD1D3808951CAFE8 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:a8:53:bd:1d:38:08:95:1c:af:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=61fddd88-8e2a-4d74-90ef-01d7e5ade3b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:f5:81:7f:ae:7a:dc:49:09:16:fb:df:b7:12: 72:e8:03:4c:61:fe:ba:15:aa:55:0d:8a:1b:8a:52: a1:ac:93:78:89:d4:75:fd:e6:1a:5d:4b:27:f1:06: 10:07:90:66:59:7d:f8:38:c4:54:18:01:02:e8:bc: 21:85:d5:1f:9d:c9:fe:32:91:3f:a4:05:36:f2:af: 0a:eb:8f:c2:b2:1f:73:c3:80:fe:f7:e2:1a:65:5f: cd:34:cb:40:7f:73:5f:35:4b:ed:77:6a:6c:a7:b0: 69:e7:3e:b9:ce:2f:55:67:7c:7b:d8:8f:2c:50:cc: 20:00:8c:6d:db:2a:a9:d2:46:cd:1f:1a:92:95:6f: 76:e9:9c:bb:ad:1a:7b:e6:e9:58:cd:98:2d:f0:a4: 08:b0:38:d6:62:41:2b:a2:5c:f9:0c:7d:5b:e4:ab: 94:6c:d1:48:8a:b0:f4:46:06:17:23:77:ae:ad:64: c0:be:6a:61:91:85:42:58:31:b2:f3:a1:c3:66:61: 5a:60:0e:df:93:b1:b7:b1:f6:ec:61:f1:7c:49:04: 3b:cd:f3:53:64:1c:fd:65:f0:01:30:21:65:d0:1b: 6e:0c:4c:67:a6:e8:4c:d5:6a:ab:e9:46:2e:96:05: da:7a:f2:0d:bf:ec:1f:d8:d4:2e:7a:4b:2c:03:22: eb:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:14:79:AA:26:9F:22:CB:DA:29:22:BD:B2:23:73:AB:F2:D0:B6:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/cfa83893-71b6-3e5f-84ca-567698627079.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:bb:fc:4f:33:68:91:03:ea:ed:ca:73:f3:f4:83:f7:3f:6f: af:65:ae:bf:25:05:d9:55:7e:b7:0c:80:18:d1:c0:45:ed:54: 29:16:cb:a2:7d:68:d9:53:e7:89:bc:4a:fc:40:38:b2:a1:f3: 62:e6:b7:26:f9:a9:02:55:d0:97:f0:2f:b5:9d:9b:ef:fe:27: 16:88:f7:ce:d7:c1:be:83:fd:39:ab:3f:5f:2d:0f:e7:da:c3: 80:b1:ac:27:f9:2f:7d:21:73:d5:cf:3d:f6:af:b1:ec:be:47: 63:d9:d7:3e:61:b2:71:da:43:1a:53:28:60:26:c3:6e:2a:a3: ba:5a:3f:15:a9:25:c6:2a:17:68:5d:26:0e:3c:c6:ad:e0:f5: c1:5c:42:6a:2a:e0:63:96:32:80:c9:96:05:0e:5a:2d:07:75: 6b:fb:dd:6c:c0:a1:a1:85:16:42:21:b8:60:68:33:b6:14:b4: ab:c3:13:24:b1:73:e4:8e:89:27:f5:4a:05:40:0a:60:09:1e: 7b:ea:38:80:0a:71:1e:2b:67:1c:83:46:20:84:4a:6a:0a:a6: dc:e0:87:c4:70:44:f0:4a:4f:20:2d:6a:5d:34:ac:82:1e:31: 78:53:b0:e7:2d:19:da:f5:76:cc:5a:50:48:93:e8:b8:aa:2e: fe:19:0d:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJKhTvR04CJUcr+gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NjFmZGRkODgtOGUyYS00ZDc0LTkwZWYtMDFkN2U1YWRlM2IyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvWBf6563EkJFvvftxJy6ANMYf66FapVDYob ilKhrJN4idR1/eYaXUsn8QYQB5BmWX34OMRUGAEC6LwhhdUfncn+MpE/pAU28q8K 64/Csh9zw4D+9+IaZV/NNMtAf3NfNUvtd2psp7Bp5z65zi9VZ3x72I8sUMwgAIxt 2yqp0kbNHxqSlW926Zy7rRp75ulYzZgt8KQIsDjWYkErolz5DH1b5KuUbNFIirD0 RgYXI3eurWTAvmphkYVCWDGy86HDZmFaYA7fk7G3sfbsYfF8SQQ7zfNTZBz9ZfAB MCFl0BtuDExnpuhM1Wqr6UYulgXaevINv+wf2NQuekssAyLr8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8UeaomnyLL2ikivbIjc6vy0LYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvY2ZhODM4OTMtNzFiNi0z ZTVmLTg0Y2EtNTY3Njk4NjI3MDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABq7/E8zaJED6u3Kc/P0g/c/b69lrr8lBdlVfrcMgBjRwEXtVCkWy6J9 aNlT54m8SvxAOLKh82Lmtyb5qQJV0JfwL7Wdm+/+JxaI987Xwb6D/TmrP18tD+fa w4CxrCf5L30hc9XPPfavsey+R2PZ1z5hsnHaQxpTKGAmw24qo7paPxWpJcYqF2hd Jg48xq3g9cFcQmoq4GOWMoDJlgUOWi0HdWv73WzAoaGFFkIhuGBoM7YUtKvDEySx c+SOiSf1SgVACmAJHnvqOIAKcR4rZxyDRiCESmoKptzgh8RwRPBKTyAtal00rIIe MXhTsOctGdr1dsxaUEiT6LiqLv4ZDYo= -----END CERTIFICATE-----Generated at Wed Apr 30 01:00:46 2025 by rpki-client