$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa File: 41037701-4376-3e93-a382-49e6eae2ede1.roa (raw, json) Hash identifier: nTbt8t0l8EEjNNmx5ebtRubIkP1Y9+If07/75rDsZyg= Subject key identifier: BB:9C:3C:25:D3:8A:54:B0:C2:3B:B1:04:7D:96:0C:13:29:01:F6:8A Certificate issuer: /CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Certificate serial: 010D0C9F43285849F9DFE13F58529EA64075D380 Authority key identifier: EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa Signing time: Mon 26 May 2025 01:00:50 +0000 ROA not before: Mon 26 May 2025 01:00:50 +0000 ROA not after: Sun 24 Aug 2025 01:00:50 +0000 asID: 15169 IP address blocks: 136.22.176.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f9:df:e1:3f:58:52:9e:a6:40:75:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef43e52f-90dd-4baf-8b36-795cabe69e2d Validity Not Before: May 26 01:00:50 2025 GMT Not After : Aug 24 01:00:50 2025 GMT Subject: CN=42e5157d-3997-4f19-9f06-830a6e910ef5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:4e:c6:e4:54:85:44:f6:39:c4:c3:16:00:d4: 39:0b:fb:f2:9a:b4:24:d2:ae:b6:0f:46:6b:5b:e2: ba:fe:10:e5:11:ec:23:f4:15:c6:ff:83:a6:b3:31: 79:ba:57:a8:74:2e:17:d6:9b:30:7e:72:1c:19:9f: 35:28:18:eb:6d:a5:91:55:5c:0d:d3:8f:9e:79:cf: 36:cc:79:15:ab:17:25:ce:9d:39:b3:13:90:96:3c: 37:72:4f:ae:a0:41:3c:3e:67:c2:f4:dc:50:6c:95: c5:2d:d9:07:0c:fe:88:2b:a1:69:be:34:73:7a:3d: 47:90:49:02:a6:b6:a9:64:ad:74:56:65:b5:b6:b9: 9b:6c:25:62:06:1f:a0:fd:87:78:e9:03:6c:88:f1: c6:fc:af:95:6d:4c:d5:24:81:f7:5d:02:6b:85:a2: 28:a7:41:0e:3d:17:c7:ba:df:2d:82:62:57:73:4a: e5:39:76:2b:aa:da:f8:62:d7:35:dc:3d:ca:fe:9e: d2:46:2a:8b:96:c0:35:53:9c:27:ed:c0:86:f1:a2: 27:a8:2d:c7:5f:93:aa:a3:bf:ab:b6:b7:db:db:73: d7:5e:21:2b:7f:51:43:ac:13:56:bf:b0:2c:51:99: 86:c0:1b:18:1c:56:1a:12:4d:f7:c5:2a:81:51:8e: 0b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:9C:3C:25:D3:8A:54:B0:C2:3B:B1:04:7D:96:0C:13:29:01:F6:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/41037701-4376-3e93-a382-49e6eae2ede1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d/ef43e52f-90dd-4baf-8b36-795cabe69e2d.crl X509v3 Authority Key Identifier: keyid:EA:23:5E:47:6D:F8:0D:0C:6A:CC:B9:02:9F:EF:2B:63:DE:BC:0F:31 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ef43e52f-90dd-4baf-8b36-795cabe69e2d.cer sbgp-ipAddrBlock: critical IPv4: 136.22.176.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:83:1c:07:ec:d8:49:92:28:70:70:f1:b0:7d:8f:8e:ae:c9: 1f:e7:87:e2:17:1d:68:41:09:4d:4e:8f:48:28:b9:83:14:23: eb:0e:ff:b9:7b:a3:56:30:f0:0a:9f:e0:b6:88:d7:df:1b:fb: 99:a6:91:a9:93:a9:55:96:9c:70:4d:ac:d4:b1:d0:7c:8c:fe: 2a:fa:3f:f9:1d:1c:ee:a2:f4:dd:2b:5d:66:ff:b5:9d:19:35: c8:c1:eb:cf:66:5c:35:76:c0:89:ab:fc:f1:82:11:02:60:45: 20:8a:8c:9a:8a:4d:fe:13:54:04:ab:fb:76:88:76:9d:bf:96: 1a:4f:a0:ba:39:1d:40:ce:2a:1e:ff:d4:89:5f:60:62:8b:36: 98:be:45:e9:01:96:df:82:45:ea:35:49:a4:0c:de:04:1f:59: d1:43:de:ba:ce:fc:4a:50:d5:ce:ed:b2:61:6d:db:ac:cb:c9: e8:24:30:77:ec:08:78:8d:25:18:7a:da:86:9c:86:cc:e7:7a: da:55:89:b0:c0:41:8a:2b:1c:3d:79:fa:41:9f:a0:49:f9:f3: f3:39:87:2e:b2:c3:ec:5e:43:b0:e7:06:7b:39:49:57:5b:ce: 17:9f:69:40:1f:fc:11:0f:b6:2b:ec:24:4f:29:73:ad:8f:ab: 30:6b:03:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn53+E/WFKepkB104AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZWY0M2U1MmYtOTBkZC00YmFmLThiMzYtNzk1Y2FiZTY5 ZTJkMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk NDJlNTE1N2QtMzk5Ny00ZjE5LTlmMDYtODMwYTZlOTEwZWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzE7G5FSFRPY5xMMWANQ5C/vymrQk0q62D0Zr W+K6/hDlEewj9BXG/4OmszF5uleodC4X1pswfnIcGZ81KBjrbaWRVVwN04+eec82 zHkVqxclzp05sxOQljw3ck+uoEE8PmfC9NxQbJXFLdkHDP6IK6FpvjRzej1HkEkC prapZK10VmW1trmbbCViBh+g/Yd46QNsiPHG/K+VbUzVJIH3XQJrhaIop0EOPRfH ut8tgmJXc0rlOXYrqtr4Ytc13D3K/p7SRiqLlsA1U5wn7cCG8aInqC3HX5Oqo7+r trfb23PXXiErf1FDrBNWv7AsUZmGwBsYHFYaEk33xSqBUY4L2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLucPCXTilSwwjuxBH2WDBMpAfaKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQz ZTUyZi05MGRkLTRiYWYtOGIzNi03OTVjYWJlNjllMmQvNDEwMzc3MDEtNDM3Ni0z ZTkzLWEzODItNDllNmVhZTJlZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZWY0M2U1MmYtOTBkZC00YmFmLThi MzYtNzk1Y2FiZTY5ZTJkL2VmNDNlNTJmLTkwZGQtNGJhZi04YjM2LTc5NWNhYmU2 OWUyZC5jcmwwHwYDVR0jBBgwFoAU6iNeR234DQxqzLkCn+8rY968DzEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9lZjQzZTUyZi05MGRkLTRiYWYtOGIzNi03OTVj YWJlNjllMmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiBawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG2DHAfs2EmSKHBw8bB9j46uyR/nh+IXHWhBCU1Oj0gouYMUI+sO/7l7 o1Yw8Aqf4LaI198b+5mmkamTqVWWnHBNrNSx0HyM/ir6P/kdHO6i9N0rXWb/tZ0Z NcjB689mXDV2wImr/PGCEQJgRSCKjJqKTf4TVASr+3aIdp2/lhpPoLo5HUDOKh7/ 1IlfYGKLNpi+RekBlt+CReo1SaQM3gQfWdFD3rrO/EpQ1c7tsmFt26zLyegkMHfs CHiNJRh62oachsznetpVibDAQYorHD15+kGfoEn58/M5hy6yw+xeQ7DnBns5SVdb zhefaUAf/BEPtivsJE8pc62PqzBrAwU= -----END CERTIFICATE-----Generated at Sun Jun 15 05:14:35 2025 by rpki-client