$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa File: f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa (raw, json) Hash identifier: zRn2n12K1ylZ0p0XSen7jnfVAhOVEj6d79UesnqxC0U= Subject key identifier: 2C:BE:D2:E5:74:B6:59:C0:08:96:8F:0A:61:CD:12:E4:3F:E0:44:61 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F432858499F24CC92E1B13E909D9424E8 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa Signing time: Wed 23 Apr 2025 13:01:01 +0000 ROA not before: Wed 23 Apr 2025 13:01:01 +0000 ROA not after: Tue 22 Jul 2025 13:01:01 +0000 asID: 36040 IP address blocks: 136.22.132.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:9f:24:cc:92:e1:b1:3e:90:9d:94:24:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Apr 23 13:01:01 2025 GMT Not After : Jul 22 13:01:01 2025 GMT Subject: CN=8fd699c0-0f8b-4509-ab22-c820b623e03d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:3c:2f:4d:8d:f0:5d:39:16:d2:b0:aa:df:d7: 12:4b:a0:f0:41:45:9e:56:45:a2:53:96:b0:a6:73: 87:c9:6f:e2:5d:14:6b:56:f1:27:c8:c3:7c:43:42: 8d:e6:f4:9e:bb:11:94:80:ca:58:d7:2f:94:0f:ce: 3e:bd:b0:4f:1a:91:63:fa:89:94:80:c4:33:f6:de: c5:e0:1a:3f:41:09:ce:1a:22:77:2d:36:14:05:c3: 15:cd:ed:0f:9a:c3:da:8d:9b:9c:ca:16:83:87:8e: aa:1c:21:de:32:4a:c2:50:04:63:35:ec:0a:ca:69: e5:cf:b4:ee:4d:19:49:90:af:ff:dc:6e:e2:6a:65: ae:8d:19:9c:ac:63:82:74:f4:82:64:ff:2e:37:76: 0c:64:b1:7c:b7:07:a1:39:98:24:2e:77:8e:5e:10: 51:56:68:90:cb:2c:36:02:64:ef:14:72:2b:ed:f6: 90:a9:d0:ac:3d:c6:00:65:80:20:c7:29:ad:86:aa: 78:25:38:95:13:e7:e0:71:8e:7d:1c:af:28:2f:41: 38:6a:69:6b:b3:3c:aa:2d:42:b7:26:3e:48:29:bc: 6e:be:dc:53:ec:85:16:ba:f9:1a:e9:dd:c1:72:e5: 42:7a:87:dc:92:6b:09:00:ad:ad:d3:f8:c4:d5:c8: 82:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:BE:D2:E5:74:B6:59:C0:08:96:8F:0A:61:CD:12:E4:3F:E0:44:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/f9e99b23-6609-3159-8b9e-a26a012f8a7b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.132.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:56:37:1a:2d:86:a1:6d:ad:eb:63:7a:67:20:ca:ae:e9:8a: d3:96:ad:c6:b2:bd:32:e0:09:ac:a2:0c:87:6f:ec:31:4b:cb: fa:a7:42:6f:c5:52:ee:c0:b7:b4:e6:1a:31:a2:f4:19:b7:f5: 3b:9a:66:2f:1c:6d:e8:20:fa:43:de:ee:de:79:d3:fe:3c:6d: c4:b6:e6:fb:8f:1d:f8:29:dc:91:0e:75:89:d8:34:e4:4b:c8: 30:06:23:62:f9:b9:0a:89:5e:eb:9d:97:4e:54:16:4f:61:9e: cf:ce:d0:e2:a3:57:db:24:8a:cf:d5:fe:17:2a:05:a4:5f:7a: 1a:4f:15:82:4b:55:1f:1c:7d:d9:5e:18:46:58:bf:99:25:d6: 92:44:3b:f6:f6:56:8b:b7:aa:fc:1f:df:fc:14:6e:c1:80:e4: 64:9a:e2:46:f1:3e:9c:09:25:fc:ce:b0:c8:ff:cc:5e:be:59: 21:3e:bb:fd:50:55:95:98:99:36:a6:5f:7f:66:16:c3:6e:34: 21:8c:f5:d9:41:14:d3:a6:a9:ca:ae:51:76:27:49:8d:e6:b4: 7e:3e:25:81:1b:06:c9:fc:37:b9:85:0e:96:90:47:94:dd:67: 3e:e7:67:c3:9d:9b:99:b4:9c:94:2e:2f:92:ea:77:b3:59:c7: 63:5f:d9:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJMyS4bE+kJ2UJOgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk OGZkNjk5YzAtMGY4Yi00NTA5LWFiMjItYzgyMGI2MjNlMDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujwvTY3wXTkW0rCq39cSS6DwQUWeVkWiU5aw pnOHyW/iXRRrVvEnyMN8Q0KN5vSeuxGUgMpY1y+UD84+vbBPGpFj+omUgMQz9t7F 4Bo/QQnOGiJ3LTYUBcMVze0PmsPajZucyhaDh46qHCHeMkrCUARjNewKymnlz7Tu TRlJkK//3G7iamWujRmcrGOCdPSCZP8uN3YMZLF8twehOZgkLneOXhBRVmiQyyw2 AmTvFHIr7faQqdCsPcYAZYAgxymthqp4JTiVE+fgcY59HK8oL0E4amlrszyqLUK3 Jj5IKbxuvtxT7IUWuvka6d3BcuVCeofckmsJAK2t0/jE1ciCnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCy+0uV0tlnACJaPCmHNEuQ/4ERhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZjllOTliMjMtNjYwOS0z MTU5LThiOWUtYTI2YTAxMmY4YTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiBaEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIZWNxothqFtretjemcgyq7pitOWrcayvTLgCayiDIdv7DFLy/qnQm/F Uu7At7TmGjGi9Bm39TuaZi8cbegg+kPe7t550/48bcS25vuPHfgp3JEOdYnYNORL yDAGI2L5uQqJXuudl05UFk9hns/O0OKjV9skis/V/hcqBaRfehpPFYJLVR8cfdle GEZYv5kl1pJEO/b2Vou3qvwf3/wUbsGA5GSa4kbxPpwJJfzOsMj/zF6+WSE+u/1Q VZWYmTamX39mFsNuNCGM9dlBFNOmqcquUXYnSY3mtH4+JYEbBsn8N7mFDpaQR5Td Zz7nZ8Odm5m0nJQuL5Lqd7NZx2Nf2dE= -----END CERTIFICATE-----Generated at Sun Apr 27 23:59:49 2025 by rpki-client