$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: Oau+556Zim2xymzSyl3PIwTdu88yg94Ebx51z+AV4ig= Subject key identifier: 40:80:2F:11:1E:51:08:64:34:27:85:B1:52:3A:0C:89:34:E1:A1:38 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24D8856FD0B237E94561C0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:d8:85:6f:d0:b2:37:e9:45:61:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=fb3c50c9-9040-4ab1-9868-f74849eb14b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ea:c3:7f:2f:51:65:67:56:68:bf:d9:e0:5d: 34:ed:b6:9b:92:dc:06:6d:94:f0:7b:65:7f:25:b6: b6:2b:0c:40:17:7e:a7:4f:e0:e6:c0:fe:91:00:36: 61:0d:30:01:46:c6:0e:f5:74:74:bb:42:22:33:52: a3:09:4a:28:ce:38:de:96:dd:93:84:2b:54:ad:55: a6:85:f8:e8:ae:62:00:74:9d:7d:13:bf:23:b3:c5: 22:0d:ce:87:b3:e7:33:5d:87:7f:57:c1:79:a4:cd: d0:8e:43:53:dd:80:1f:93:d2:ac:2c:b0:90:2d:e1: e5:3f:ce:70:19:94:6c:43:ac:4c:ab:f6:4b:13:ae: 5c:a0:ac:6c:c7:52:6f:43:96:e0:74:e5:d5:b9:89: f9:f2:6b:7c:89:47:43:a4:6f:dd:a2:83:97:39:34: a4:95:4b:00:0a:b2:fb:b9:5b:a2:d7:20:58:01:16: 4a:f6:49:a5:21:95:15:d7:04:1e:b5:91:60:1c:19: b9:54:86:af:68:c7:b4:06:4c:86:89:53:3a:c3:5d: 7e:dd:6c:03:c1:27:1c:f5:c6:80:6b:6f:e5:f0:22: 63:5e:43:51:d7:2a:a8:b8:fc:ee:67:34:08:35:34: 3d:9c:5d:96:08:ed:b0:69:31:a4:5c:7e:10:9c:f9: ad:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:80:2F:11:1E:51:08:64:34:27:85:B1:52:3A:0C:89:34:E1:A1:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:07:f4:1d:8b:8a:ee:4c:be:3c:41:4f:cc:65:63:9d:c6:94: 1b:39:8d:b3:ec:b2:68:5b:5b:77:f7:f7:24:c9:af:55:2d:a9: 58:53:20:5d:c1:78:0b:7c:c9:45:91:cc:6a:c2:a5:4a:e3:70: 98:47:39:e9:e7:80:dc:44:1b:3b:a0:a3:c7:ba:8a:ed:52:c8: 87:b1:5b:81:9a:25:16:38:3e:d4:79:d7:f5:34:29:42:c5:c1: d2:f9:34:c5:85:78:49:60:57:bf:5b:84:17:44:8f:93:aa:d6: c3:30:9d:39:08:3c:32:30:fb:f0:fb:34:c5:9f:c8:28:8a:e9: 21:93:cc:e2:96:5f:61:eb:d4:18:27:5c:e9:a9:61:e1:c4:22: 98:68:f1:b5:e3:ce:f2:c3:5d:a2:63:df:ad:83:4f:f0:98:a3: 51:c5:58:d3:10:bc:2f:33:5c:6d:26:da:d3:f2:c0:41:15:34: df:9e:a7:47:f4:77:ac:ce:3c:d8:8b:8b:aa:e9:86:27:11:28: 4e:60:75:33:f2:84:f4:9c:c5:64:f1:af:26:d7:ba:ae:40:e2: 23:dc:02:41:5b:da:5d:a0:ed:e2:dc:f0:71:12:fc:85:bf:c7: 09:dd:b9:f6:67:f1:6e:f2:59:31:f2:65:91:be:c1:0c:18:84: 95:2f:a7:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJNiFb9CyN+lFYcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmIzYzUwYzktOTA0MC00YWIxLTk4NjgtZjc0ODQ5ZWIxNGI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv+rDfy9RZWdWaL/Z4F007babktwGbZTwe2V/ Jba2KwxAF36nT+DmwP6RADZhDTABRsYO9XR0u0IiM1KjCUoozjjelt2ThCtUrVWm hfjormIAdJ19E78js8UiDc6Hs+czXYd/V8F5pM3QjkNT3YAfk9KsLLCQLeHlP85w GZRsQ6xMq/ZLE65coKxsx1JvQ5bgdOXVuYn58mt8iUdDpG/dooOXOTSklUsACrL7 uVui1yBYARZK9kmlIZUV1wQetZFgHBm5VIavaMe0BkyGiVM6w11+3WwDwScc9caA a2/l8CJjXkNR1yqouPzuZzQINTQ9nF2WCO2waTGkXH4QnPmtywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFECALxEeUQhkNCeFsVI6DIk04aE4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUH9B2Liu5MvjxBT8xlY53GlBs5jbPssmhbW3f39yTJr1UtqVhTIF3B eAt8yUWRzGrCpUrjcJhHOenngNxEGzugo8e6iu1SyIexW4GaJRY4PtR51/U0KULF wdL5NMWFeElgV79bhBdEj5Oq1sMwnTkIPDIw+/D7NMWfyCiK6SGTzOKWX2Hr1Bgn XOmpYeHEIpho8bXjzvLDXaJj362DT/CYo1HFWNMQvC8zXG0m2tPywEEVNN+ep0f0 d6zOPNiLi6rphicRKE5gdTPyhPScxWTxrybXuq5A4iPcAkFb2l2g7eLc8HES/IW/ xwndufZn8W7yWTHyZZG+wQwYhJUvp2I= -----END CERTIFICATE-----Generated at Mon Apr 28 06:08:44 2025 by rpki-client