$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/04d2a8c3-55f7-3213-abec-3110cbc3a1fc.roa File: 04d2a8c3-55f7-3213-abec-3110cbc3a1fc.roa (raw, json) Hash identifier: ad9rWSHtplZh1Cfy3g2wto3kaFIm3icO7yP4boBNasg= Subject key identifier: 1E:59:BD:8C:0E:E7:D3:67:55:55:F7:A5:BA:FF:77:AF:EA:99:85:65 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BB74F628A905DE2FBFB300 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/04d2a8c3-55f7-3213-abec-3110cbc3a1fc.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.23.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:74:f6:28:a9:05:de:2f:bf:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=08706b72-5c74-44c4-8cda-92be3dc6b637 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b3:af:d8:f0:7f:01:26:1b:5c:95:49:55:79: 28:0d:d8:b0:e1:a1:3e:5b:0c:1f:8a:7f:e3:31:04: e2:29:82:37:e0:3a:36:27:93:36:0a:fb:17:b7:fe: d0:04:dd:36:85:7d:a1:e9:ef:56:5a:20:3f:41:0b: 85:f3:d9:39:ef:c0:62:1e:a7:4a:48:d3:ef:64:3e: c6:64:b5:6a:41:ff:84:eb:ea:14:38:84:79:e1:a8: b8:14:5e:6e:4f:ea:f3:ec:01:01:4a:d4:ea:69:cd: 3e:8c:77:7d:cf:41:5b:83:b3:ec:8f:1b:a9:23:56: 68:65:2a:5d:33:f1:14:33:e4:0f:61:af:c3:0e:4f: 97:4f:b8:94:f7:79:d4:15:e0:81:27:d2:48:c1:65: 52:ab:78:db:9a:11:e2:d9:ff:be:c9:e4:2a:84:08: 3f:be:45:8b:77:e2:b6:15:72:a5:af:83:a7:c6:8b: a9:48:44:25:91:ab:d2:0c:a7:b7:8a:59:95:1b:79: aa:cc:b2:66:69:be:f0:e0:b9:19:a7:8c:a9:89:e5: 67:76:b2:ef:e5:9e:a1:80:8b:aa:eb:53:d4:2a:c1: 30:17:8b:5b:61:7f:6b:af:01:3a:40:67:ac:ad:01: 0d:06:f9:4a:0f:f0:56:8c:ea:44:bf:02:0d:e8:8d: a5:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:59:BD:8C:0E:E7:D3:67:55:55:F7:A5:BA:FF:77:AF:EA:99:85:65 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/04d2a8c3-55f7-3213-abec-3110cbc3a1fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9f:ef:1d:db:6e:14:7f:75:2e:ac:64:1c:0e:89:ff:0e:6a:4a: 12:ea:c9:b2:cd:cf:c9:64:4a:e3:91:5c:5c:6f:88:ab:e3:a1: 39:fa:57:75:ec:1e:76:b7:06:d9:67:42:54:f8:47:bc:b7:99: 32:d3:37:1c:4a:71:92:80:ea:23:45:a0:ce:72:ed:1d:31:f3: 5f:ba:80:11:e8:f5:6d:bb:3d:66:c4:d3:7e:d7:9b:c6:9e:fd: b8:42:62:84:db:30:17:a9:fd:dc:45:fd:ce:95:64:23:f1:b2: a2:ee:61:2c:e7:29:8b:3d:3e:36:04:43:d2:b0:84:dd:b3:53: 0c:23:23:3f:6b:3f:26:05:b0:47:74:52:34:f6:aa:7d:4f:d4: 0a:a6:c4:c9:9b:d3:78:ef:b5:d6:99:e6:89:55:13:41:07:ce: ee:b5:fb:99:e0:b7:69:df:4e:37:fa:8a:c7:b7:0a:ad:6e:9d: 2a:e2:cc:79:a7:17:96:8f:38:09:20:65:0b:13:c8:61:70:d7: dd:a2:0e:ba:29:84:52:82:c8:6e:8d:67:9e:21:ac:3f:6a:e7: 7f:97:e3:29:af:7f:8a:32:ed:e3:40:eb:ae:89:d8:6b:42:57: d4:3f:e5:8d:c2:cc:6c:bf:23:6b:5e:8e:cc:86:c2:0f:46:ef: 46:be:3f:6e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3T2KKkF3i+/swAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MDg3MDZiNzItNWM3NC00NGM0LThjZGEtOTJiZTNkYzZiNjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrOv2PB/ASYbXJVJVXkoDdiw4aE+Wwwfin/j MQTiKYI34Do2J5M2CvsXt/7QBN02hX2h6e9WWiA/QQuF89k578BiHqdKSNPvZD7G ZLVqQf+E6+oUOIR54ai4FF5uT+rz7AEBStTqac0+jHd9z0Fbg7PsjxupI1ZoZSpd M/EUM+QPYa/DDk+XT7iU93nUFeCBJ9JIwWVSq3jbmhHi2f++yeQqhAg/vkWLd+K2 FXKlr4OnxoupSEQlkavSDKe3ilmVG3mqzLJmab7w4LkZp4ypieVndrLv5Z6hgIuq 61PUKsEwF4tbYX9rrwE6QGesrQENBvlKD/BWjOpEvwIN6I2lJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB5ZvYwO59NnVVX3pbr/d6/qmYVlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvMDRkMmE4YzMtNTVmNy0z MjEzLWFiZWMtMzExMGNiYzNhMWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ/vHdtuFH91LqxkHA6J/w5qShLqybLNz8lkSuORXFxviKvjoTn6V3Xs Hna3BtlnQlT4R7y3mTLTNxxKcZKA6iNFoM5y7R0x81+6gBHo9W27PWbE037Xm8ae /bhCYoTbMBep/dxF/c6VZCPxsqLuYSznKYs9PjYEQ9KwhN2zUwwjIz9rPyYFsEd0 UjT2qn1P1AqmxMmb03jvtdaZ5olVE0EHzu61+5ngt2nfTjf6ise3Cq1unSrizHmn F5aPOAkgZQsTyGFw192iDrophFKCyG6NZ54hrD9q53+X4ymvf4oy7eNA666J2GtC V9Q/5Y3CzGy/I2tejsyGwg9G70a+P24= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:19 2025 by rpki-client