$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa File: ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa (raw, json) Hash identifier: by4eWCDN3cBGa94L6i4Qs3WznZ+Xf0BmVvNQL9mkBww= Subject key identifier: 10:79:3A:09:38:70:70:D9:47:E6:10:06:3E:76:9E:9F:6E:C4:4F:C1 Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BB77F1ED67FFC571923568 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.23.25.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:77:f1:ed:67:ff:c5:71:92:35:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=79bbd1b6-aec5-480e-8005-b25d0feee336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:da:e3:2b:d4:2e:1c:ed:02:f3:8e:5c:73:e9: f6:10:77:0e:a7:de:8a:f1:cb:7f:4a:e9:cd:c1:39: 2e:22:89:97:5d:5f:93:0a:c1:8e:0b:fc:a9:b8:e9: ad:77:81:d1:c0:9c:7e:5a:7c:fa:2d:42:3d:71:3d: 56:cf:1c:45:bd:08:e3:2e:1f:97:0d:52:4e:80:fa: 92:43:3f:df:e0:0e:f9:95:66:50:2a:1e:b5:29:9f: 40:06:a9:ff:3c:d3:c5:44:79:28:5e:96:a3:e3:31: 65:41:b1:93:27:e1:41:4f:68:b4:95:c1:73:68:31: 7c:65:a6:d2:17:95:5b:6b:c2:db:32:92:96:73:b8: 5c:f0:96:cb:79:77:8f:ec:b2:2f:a5:db:21:be:00: ac:87:f6:f5:d9:63:54:31:51:ed:e6:f2:02:19:7a: af:01:af:15:66:cb:f4:90:7d:4a:27:4d:67:23:51: ad:45:d3:01:aa:de:cc:a4:b9:a0:45:d3:99:7e:bb: 67:b7:84:5b:ff:1b:48:69:be:f9:28:af:3b:73:9e: 3c:01:cb:ca:3a:4a:f3:72:a8:7f:00:0c:56:23:3a: 1f:b6:9c:4b:f9:63:9e:d9:79:59:5c:d6:60:5c:69: e9:4e:c7:8d:21:b1:35:96:74:ac:88:e4:ee:f6:4e: 0a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:79:3A:09:38:70:70:D9:47:E6:10:06:3E:76:9E:9F:6E:C4:4F:C1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/ba1fa954-41b5-382f-8fa7-591e7fc1ab09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.25.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b4:f7:d7:b2:57:49:55:e2:8f:5f:78:21:12:04:16:97:48:0a: 8a:c6:ff:2d:3c:3d:81:bc:4a:b4:d0:cc:51:c8:09:69:dd:79: c8:a3:e0:ad:0b:21:e1:a0:c5:71:77:a8:f3:66:5b:33:ea:0a: 82:95:1e:c1:5d:6b:6c:4c:c3:87:4c:1d:72:57:32:9f:3d:05: 84:41:a7:ca:3a:26:67:27:f8:8f:50:30:f5:c3:54:e0:a5:b3: 7b:34:42:f8:f4:97:c0:9f:f7:6e:64:15:7c:36:68:46:eb:2c: b9:e2:0c:5c:cf:91:16:ae:19:f8:00:5d:d8:d1:7e:f9:f2:4d: ef:3d:c5:31:ea:7b:b8:2d:83:d0:50:3e:52:cf:a8:18:b8:73: 17:01:30:ae:d3:0a:e3:c4:3b:42:55:e2:8d:65:9e:ff:69:0c: 42:f9:64:cc:63:e8:e3:72:d1:df:79:be:70:6b:81:a6:b5:49: ee:20:1a:40:87:f7:cf:2c:d0:f1:7d:05:a5:d9:e4:40:0c:e7: ce:23:48:69:81:f5:bf:bd:0a:c8:00:67:77:6b:f0:a2:01:ab: 20:82:2f:48:cd:69:3c:e9:4f:ca:92:76:f1:8b:43:aa:5a:1f: f8:15:7d:75:df:3d:29:19:ff:9b:fd:fe:6a:7f:5c:c6:4f:1e: e0:d9:b2:00 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku3fx7Wf/xXGSNWgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk NzliYmQxYjYtYWVjNS00ODBlLTgwMDUtYjI1ZDBmZWVlMzM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjdrjK9QuHO0C845cc+n2EHcOp96K8ct/SunN wTkuIomXXV+TCsGOC/ypuOmtd4HRwJx+Wnz6LUI9cT1WzxxFvQjjLh+XDVJOgPqS Qz/f4A75lWZQKh61KZ9ABqn/PNPFRHkoXpaj4zFlQbGTJ+FBT2i0lcFzaDF8ZabS F5Vba8LbMpKWc7hc8JbLeXeP7LIvpdshvgCsh/b12WNUMVHt5vICGXqvAa8VZsv0 kH1KJ01nI1GtRdMBqt7MpLmgRdOZfrtnt4Rb/xtIab75KK87c548AcvKOkrzcqh/ AAxWIzoftpxL+WOe2XlZXNZgXGnpTseNIbE1lnSsiOTu9k4KeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBB5Ogk4cHDZR+YQBj52np9uxE/BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvYmExZmE5NTQtNDFiNS0z ODJmLThmYTctNTkxZTdmYzFhYjA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBALT317JXSVXij194IRIEFpdICorG/y08PYG8SrTQzFHICWndecij4K0L IeGgxXF3qPNmWzPqCoKVHsFda2xMw4dMHXJXMp89BYRBp8o6Jmcn+I9QMPXDVOCl s3s0Qvj0l8Cf925kFXw2aEbrLLniDFzPkRauGfgAXdjRfvnyTe89xTHqe7gtg9BQ PlLPqBi4cxcBMK7TCuPEO0JV4o1lnv9pDEL5ZMxj6ONy0d95vnBrgaa1Se4gGkCH 988s0PF9BaXZ5EAM584jSGmB9b+9CsgAZ3dr8KIBqyCCL0jNaTzpT8qSdvGLQ6pa H/gVfXXfPSkZ/5v9/mp/XMZPHuDZsgA= -----END CERTIFICATE-----Generated at Sun Apr 27 07:06:56 2025 by rpki-client