$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa File: 407a407c-fb30-3738-87f6-1d5897210481.roa (raw, json) Hash identifier: HXaRoqnqiMeGdDGsJAZtN+taVWL2v3Ky6dnyhKNAdMk= Subject key identifier: 3C:0B:8B:06:97:A6:CD:AD:60:69:ED:0A:8B:83:F4:16:A4:3B:89:99 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BB6933D6415A89F7564F00 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.23.48.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:69:33:d6:41:5a:89:f7:56:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=b54b4b00-6c0f-42c5-b6d3-949d46025fc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0a:70:22:80:b5:b7:15:ad:d3:b4:2a:75:09: 1f:15:9b:82:27:de:f1:92:61:c7:81:f0:69:90:3f: 37:fa:92:e1:bf:39:8d:85:07:1e:10:38:a9:12:bf: e9:36:3e:60:a1:57:fd:6b:31:1a:0f:ba:0e:16:20: 60:b2:b6:ea:90:8a:45:67:ab:fb:64:8c:1b:f2:7b: f1:2e:c0:1a:f9:27:cd:78:d6:e1:3d:b9:50:6e:78: a5:0e:8c:41:ec:fd:af:48:c3:f2:3c:2c:66:38:31: 1e:27:15:5f:2b:fb:65:c0:18:68:88:d1:7b:5e:1f: 3f:d4:0e:99:c4:45:90:2b:3d:67:5e:37:ed:3e:c4: 28:5c:ac:a7:cf:40:00:2b:9d:e1:87:c9:ba:17:88: 6a:f7:f4:e8:5f:d3:59:e3:1f:89:2f:b2:c8:84:20: ae:a1:0e:5e:15:08:89:28:a5:e6:43:cf:a5:f0:40: 40:52:e3:4c:e9:af:86:62:90:b8:72:8c:51:7e:ff: aa:eb:d6:d4:7a:e8:2a:aa:4a:e5:94:4d:ce:be:b0: 84:d6:7d:99:b0:fb:66:ce:1d:00:9f:05:2e:f1:fe: 50:11:98:86:3d:85:52:6f:f5:43:fd:3e:6e:ac:eb: c1:3f:c5:a2:b1:f4:f6:58:b5:30:a8:26:85:e7:56: 6c:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:0B:8B:06:97:A6:CD:AD:60:69:ED:0A:8B:83:F4:16:A4:3B:89:99 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/407a407c-fb30-3738-87f6-1d5897210481.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.48.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:60:09:a8:fa:96:14:b1:91:a6:d8:8a:85:94:65:17:ce:04: 45:c7:80:db:09:d6:3d:05:1f:a4:3a:55:9e:a6:e9:c7:b1:65: b0:27:2a:e7:73:63:9d:25:da:41:91:eb:f5:1f:80:ea:3a:f0: 68:4e:0c:c8:04:aa:ad:cc:de:ab:94:9f:a3:ea:4e:0b:15:2a: 61:8d:47:fb:a2:3d:a7:e2:55:47:6d:50:0d:c2:fb:e9:f6:96: 45:1b:a1:63:be:92:85:27:aa:0b:e3:ad:6e:79:87:11:03:6d: a8:db:2a:2d:25:b3:c3:7a:d9:d1:1c:98:6a:d6:67:fc:4f:15: b3:9b:74:67:2d:91:68:c1:8a:f3:f3:cb:77:48:6e:1f:19:0f: 91:e2:b8:64:df:d7:7d:f2:9c:c5:0e:8c:19:fc:7b:3b:9c:6a: 24:04:52:80:90:0e:19:ac:3e:c2:5b:02:21:75:aa:14:db:b5: 36:0a:5a:62:a1:b9:8f:0e:07:de:38:99:d4:ed:2c:6a:bb:cc: 99:56:f4:bd:7c:fd:64:64:7f:1b:92:7e:33:2a:c9:54:6c:22: 76:c5:18:e0:1e:5f:95:76:ea:35:69:95:6f:8e:55:b3:b1:59: b5:75:d7:a0:d8:fc:68:f8:0c:ca:3f:75:c4:95:61:46:7c:ca: c1:85:c5:70 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku2kz1kFaifdWTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk YjU0YjRiMDAtNmMwZi00MmM1LWI2ZDMtOTQ5ZDQ2MDI1ZmM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxApwIoC1txWt07QqdQkfFZuCJ97xkmHHgfBp kD83+pLhvzmNhQceEDipEr/pNj5goVf9azEaD7oOFiBgsrbqkIpFZ6v7ZIwb8nvx LsAa+SfNeNbhPblQbnilDoxB7P2vSMPyPCxmODEeJxVfK/tlwBhoiNF7Xh8/1A6Z xEWQKz1nXjftPsQoXKynz0AAK53hh8m6F4hq9/ToX9NZ4x+JL7LIhCCuoQ5eFQiJ KKXmQ8+l8EBAUuNM6a+GYpC4coxRfv+q69bUeugqqkrllE3OvrCE1n2ZsPtmzh0A nwUu8f5QEZiGPYVSb/VD/T5urOvBP8WisfT2WLUwqCaF51ZsbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwLiwaXps2tYGntCouD9BakO4mZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvNDA3YTQwN2MtZmIzMC0z NzM4LTg3ZjYtMWQ1ODk3MjEwNDgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACVgCaj6lhSxkabYioWUZRfOBEXHgNsJ1j0FH6Q6VZ6m6cexZbAnKudz Y50l2kGR6/UfgOo68GhODMgEqq3M3quUn6PqTgsVKmGNR/uiPafiVUdtUA3C++n2 lkUboWO+koUnqgvjrW55hxEDbajbKi0ls8N62dEcmGrWZ/xPFbObdGctkWjBivPz y3dIbh8ZD5HiuGTf133ynMUOjBn8ezucaiQEUoCQDhmsPsJbAiF1qhTbtTYKWmKh uY8OB944mdTtLGq7zJlW9L18/WRkfxuSfjMqyVRsInbFGOAeX5V26jVplW+OVbOx WbV116DY/Gj4DMo/dcSVYUZ8ysGFxXA= -----END CERTIFICATE-----Generated at Sun Apr 27 21:33:20 2025 by rpki-client