$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa File: d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa (raw, json) Hash identifier: qDM2h0FmOL4fmMY73dKXN6QdD1ISzCdu6PXWcJ6wSRw= Subject key identifier: 87:68:11:68:DF:B1:32:28:54:00:5A:26:8F:CF:37:B4:05:83:92:3D Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24AFBF4B3466B7B614E280 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.150.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:af:bf:4b:34:66:b7:b6:14:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=bf427b8f-5b35-495b-acae-4c8a259653e5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:60:50:90:93:20:c6:13:b0:98:68:12:64:9a: ff:d6:60:73:fb:87:17:83:05:29:52:91:59:8a:7c: 5d:94:ae:c5:91:56:a1:de:57:a6:c2:d2:89:56:b0: 52:ec:69:da:19:1b:05:3b:96:f9:ff:2d:99:90:29: 45:1a:e5:67:fd:65:4e:31:5e:23:1b:69:8f:fe:db: 4b:5b:ca:c5:36:12:9a:76:81:db:fc:04:8c:92:2b: 36:cf:c4:af:6d:16:f4:9b:b2:1f:7f:32:9d:d1:4e: 79:61:9c:21:36:d1:9b:ef:c5:b7:6d:f9:33:4a:c5: a0:78:ce:59:29:9c:a2:67:84:44:94:3f:5e:09:5b: f4:f6:9e:87:b8:42:d5:0d:f1:49:0e:7f:6c:0e:f9: 7a:3b:ef:d0:1e:1f:7c:0e:bb:38:9f:25:0c:97:11: 59:b7:67:49:8d:e6:7a:9a:03:54:d4:97:79:ef:43: 12:a0:2c:99:7b:cc:45:e4:e1:1d:68:14:6b:c2:c6: 04:78:99:c7:1b:9e:4c:ce:6d:53:2e:54:61:c7:f3: 17:d6:06:28:93:6f:93:05:78:48:7d:3c:d7:cc:8a: ad:d3:cd:c5:92:90:e8:c9:8c:58:3d:94:ab:f9:ee: 03:e7:c5:e9:57:45:b4:c4:25:da:69:69:b3:4e:8c: ed:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:68:11:68:DF:B1:32:28:54:00:5A:26:8F:CF:37:B4:05:83:92:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d2b87949-dbe7-30ca-bebf-bdd4b5ba8215.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.150.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:d1:ab:72:b5:cc:31:f3:eb:76:b1:15:8e:dd:8c:74:1e:cf: 2b:1b:f8:1b:1d:55:c6:98:28:0d:18:dc:fb:3c:91:c9:0b:1c: b5:dc:08:24:7f:ac:08:c4:65:d2:95:20:b0:14:c7:3a:bb:50: 2b:e1:e2:96:17:7d:92:ea:22:83:ed:bd:d3:01:26:2d:48:30: 67:e3:fc:13:63:0f:05:1e:9e:d9:db:15:d6:fc:55:14:6d:96: 01:ac:6b:fb:04:21:13:b6:a5:67:cf:ee:04:ff:9b:cf:0a:5a: b8:a2:27:e5:1d:2c:ea:69:6f:9e:2a:89:17:c5:25:35:5e:7a: d7:54:5b:a4:63:61:e0:86:17:10:99:90:e9:4b:3b:1f:f1:97: 15:78:7e:77:18:50:d6:e3:61:22:a6:2a:0c:08:c6:d9:1c:1c: a4:a4:ae:3f:a5:04:f6:91:47:fa:55:8c:16:2c:53:08:77:9b: 3e:d9:e3:a9:41:e4:6b:9e:44:0f:1d:d5:52:cb:4d:bb:7e:48: ed:94:b7:01:47:9b:4d:72:b9:7d:ba:22:24:e6:55:96:49:18: b1:ba:9d:59:d9:8e:20:f8:e8:ea:e5:d1:ca:bc:47:bc:80:31: 02:63:ec:35:a7:ab:c7:b8:34:fd:f9:51:4c:05:a1:21:e8:b9: e1:9c:30:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK+/SzRmt7YU4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk YmY0MjdiOGYtNWIzNS00OTViLWFjYWUtNGM4YTI1OTY1M2U1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGBQkJMgxhOwmGgSZJr/1mBz+4cXgwUpUpFZ inxdlK7FkVah3lemwtKJVrBS7GnaGRsFO5b5/y2ZkClFGuVn/WVOMV4jG2mP/ttL W8rFNhKadoHb/ASMkis2z8SvbRb0m7IffzKd0U55YZwhNtGb78W3bfkzSsWgeM5Z KZyiZ4RElD9eCVv09p6HuELVDfFJDn9sDvl6O+/QHh98Drs4nyUMlxFZt2dJjeZ6 mgNU1Jd570MSoCyZe8xF5OEdaBRrwsYEeJnHG55Mzm1TLlRhx/MX1gYok2+TBXhI fTzXzIqt083FkpDoyYxYPZSr+e4D58XpV0W0xCXaaWmzToztIQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIdoEWjfsTIoVABaJo/PN7QFg5I9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZDJiODc5NDktZGJlNy0z MGNhLWJlYmYtYmRkNGI1YmE4MjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIjRq3K1zDHz63axFY7djHQezysb+BsdVcaYKA0Y3Ps8kckLHLXcCCR/ rAjEZdKVILAUxzq7UCvh4pYXfZLqIoPtvdMBJi1IMGfj/BNjDwUentnbFdb8VRRt lgGsa/sEIRO2pWfP7gT/m88KWriiJ+UdLOppb54qiRfFJTVeetdUW6RjYeCGFxCZ kOlLOx/xlxV4fncYUNbjYSKmKgwIxtkcHKSkrj+lBPaRR/pVjBYsUwh3mz7Z46lB 5GueRA8d1VLLTbt+SO2UtwFHm01yuX26IiTmVZZJGLG6nVnZjiD46Orl0cq8R7yA MQJj7DWnq8e4NP35UUwFoSHoueGcMLE= -----END CERTIFICATE-----Generated at Sun Apr 27 16:36:07 2025 by rpki-client