$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa File: f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa (raw, json) Hash identifier: cz0QdCOAK45t5mXXe0Pdr7iXxce7Ub706kYJ7ZGCw5s= Subject key identifier: E5:C6:67:33:3D:48:1B:70:0D:E3:02:3C:52:1A:9F:58:BC:69:BB:56 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24AE52FDC793AF1F72C1C0 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:ae:52:fd:c7:93:af:1f:72:c1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=5ade71b9-fa46-4f86-88c7-dc6962612f1c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:d4:e2:7f:8d:a9:a2:5f:eb:06:7f:04:ea:48: 70:e6:eb:6d:2b:a5:cb:77:a0:ba:92:41:36:fc:29: aa:d2:ca:dd:4a:22:c6:3c:f0:44:e9:2d:6e:29:e9: d3:d1:ff:bd:1e:0c:09:06:6a:80:cc:18:9f:e4:c5: 9a:64:99:77:25:06:a8:75:7c:b8:6e:df:69:9f:e5: 04:fa:d7:6d:c2:1e:08:c1:c8:0e:93:2d:85:ae:a8: 10:1b:92:8b:55:7c:22:29:dc:8b:f1:c5:bd:64:91: fe:75:82:a1:b9:e4:f1:d3:aa:75:c1:d8:1a:e6:7e: 20:1b:7e:d7:d3:7d:0f:ff:ae:2e:09:49:16:9f:36: 19:4d:84:41:6d:f5:95:6c:2b:70:4e:94:2d:5f:71: 2f:b0:b2:f5:ac:86:ff:e8:69:a0:da:8e:de:37:52: b8:6c:06:73:7b:4e:db:64:73:61:3e:e2:53:83:53: 00:1a:77:ea:d9:64:eb:3a:41:b5:f6:e9:36:5e:50: 1b:f5:e5:42:8c:16:24:dd:9f:9a:80:0f:12:14:3f: 2e:be:1f:35:88:a1:1f:92:c3:f0:24:1f:97:a6:c4: 3a:be:28:ff:04:a2:97:6c:15:50:d8:d4:f3:54:84: 9b:10:c5:72:e6:91:c3:65:b1:84:6b:34:0b:43:04: 24:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:C6:67:33:3D:48:1B:70:0D:E3:02:3C:52:1A:9F:58:BC:69:BB:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f20b2343-3bfd-3a3f-b835-3ecd4da9e513.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:05:c9:82:47:00:03:b2:03:d4:c2:39:29:49:ce:0d:6a:4f: 59:39:0e:24:36:8d:92:4a:19:b0:ca:94:4e:04:ba:31:e8:5e: e8:5e:20:e4:89:56:bc:7f:c5:25:cf:bc:64:c6:79:f0:32:9e: c3:80:f9:2f:8c:13:65:d4:12:17:da:3a:ef:42:72:f0:f9:8f: 18:99:43:95:1c:81:7c:13:ce:c1:c7:da:ad:b3:56:48:98:68: f3:01:6c:9f:3b:8a:a0:fb:a5:2a:75:b6:bd:bc:82:04:c4:d0: c3:b0:05:d6:3d:e5:e3:5c:44:5d:95:e2:23:13:16:32:53:3f: db:c2:f7:1e:74:c3:70:8a:34:ed:0a:e2:b2:05:3f:11:ac:91: 18:32:49:03:9c:a7:e9:ae:75:41:3d:7e:6c:65:5c:3a:df:31: 5d:0e:26:81:f6:77:a8:77:92:c5:6c:b4:64:03:7d:96:76:8a: 60:7f:02:db:71:05:6a:63:6a:98:c6:5d:a3:d0:00:ef:a1:7f: d0:84:69:d2:b6:f5:08:86:99:31:80:a8:67:24:9d:03:f8:85: 81:c4:6b:77:31:cb:e7:e7:5d:2b:8b:c9:35:62:05:0f:c4:cf: 92:4b:a0:7e:8b:e1:7b:6d:50:2e:57:4a:5c:35:95:24:ce:a3: e0:b4:b4:98 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJK5S/ceTrx9ywcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk NWFkZTcxYjktZmE0Ni00Zjg2LTg4YzctZGM2OTYyNjEyZjFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6NTif42pol/rBn8E6khw5uttK6XLd6C6kkE2 /Cmq0srdSiLGPPBE6S1uKenT0f+9HgwJBmqAzBif5MWaZJl3JQaodXy4bt9pn+UE +tdtwh4IwcgOky2FrqgQG5KLVXwiKdyL8cW9ZJH+dYKhueTx06p1wdga5n4gG37X 030P/64uCUkWnzYZTYRBbfWVbCtwTpQtX3EvsLL1rIb/6Gmg2o7eN1K4bAZze07b ZHNhPuJTg1MAGnfq2WTrOkG19uk2XlAb9eVCjBYk3Z+agA8SFD8uvh81iKEfksPw JB+XpsQ6vij/BKKXbBVQ2NTzVISbEMVy5pHDZbGEazQLQwQkEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOXGZzM9SBtwDeMCPFIan1i8abtWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjIwYjIzNDMtM2JmZC0z YTNmLWI4MzUtM2VjZDRkYTllNTEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIcFyYJHAAOyA9TCOSlJzg1qT1k5DiQ2jZJKGbDKlE4EujHoXuheIOSJ Vrx/xSXPvGTGefAynsOA+S+ME2XUEhfaOu9CcvD5jxiZQ5UcgXwTzsHH2q2zVkiY aPMBbJ87iqD7pSp1tr28ggTE0MOwBdY95eNcRF2V4iMTFjJTP9vC9x50w3CKNO0K 4rIFPxGskRgySQOcp+mudUE9fmxlXDrfMV0OJoH2d6h3ksVstGQDfZZ2imB/Attx BWpjapjGXaPQAO+hf9CEadK29QiGmTGAqGcknQP4hYHEa3cxy+fnXSuLyTViBQ/E z5JLoH6L4XttUC5XSlw1lSTOo+C0tJg= -----END CERTIFICATE-----Generated at Mon Apr 28 18:37:36 2025 by rpki-client