$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa File: c41680db-0e4a-354a-abc3-5ac849f71877.roa (raw, json) Hash identifier: Z29+D1IPCCLUUG4r/OO0VCWajG1JWT+ER8zpsPS5UfM= Subject key identifier: 21:7D:5F:33:AD:48:43:3B:43:B3:AC:1A:2D:33:32:AC:73:50:53:2B Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BB5BEA2DE575D43E081D80 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.23.32.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5b:ea:2d:e5:75:d4:3e:08:1d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=2ecd12a9-8caa-4c01-8d4a-20ddaf4ef088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:4c:ec:51:46:c0:a6:a6:37:d2:2b:91:2b:0f: 79:37:e6:e9:64:d1:63:bb:e8:72:a2:37:84:11:98: 9d:dc:9b:53:55:b6:fa:92:31:29:e4:47:11:2b:80: e6:b2:3e:d8:45:78:e7:a5:5b:cd:5e:74:51:a0:8d: 66:de:31:9d:8c:3f:b2:2b:cd:98:8f:19:b9:64:f9: 80:09:11:19:f6:b2:c1:9e:64:35:20:85:3a:d0:d3: 68:3c:31:d0:db:f7:9d:ff:3d:eb:85:ca:6d:2e:58: 7b:a1:0f:d8:87:d3:8f:53:c1:85:00:04:61:b5:6d: c6:f1:17:5f:2e:8f:57:cb:11:f2:d4:22:15:f0:7c: 62:a2:56:0e:19:66:a5:b8:b2:21:99:76:52:9d:81: 54:50:1b:ad:2a:1f:0d:33:30:4c:12:fa:28:b3:f1: db:da:b8:6b:58:c7:c8:f2:ef:ba:45:1c:e0:71:55: 39:63:6a:fc:91:ef:04:a4:19:60:f1:b2:1d:01:d4: 53:79:22:2c:5d:4e:e4:25:07:ca:a1:96:1a:bd:5d: 87:bb:0b:60:fb:2d:f8:e9:87:14:06:ef:aa:8e:e7: 21:6a:38:76:15:6b:d5:9b:3d:67:59:c2:c4:a0:38: bf:d7:48:b0:f8:0e:fd:10:c0:50:b9:74:34:07:13: 45:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:7D:5F:33:AD:48:43:3B:43:B3:AC:1A:2D:33:32:AC:73:50:53:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/c41680db-0e4a-354a-abc3-5ac849f71877.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.32.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:69:85:1b:93:77:cf:1c:34:72:4e:ea:23:1b:dd:0c:7c:85: ac:74:af:b0:08:c6:c7:3c:61:7c:50:fe:b6:96:31:65:ab:cf: 4c:01:af:3f:45:ee:43:e8:bf:5d:f0:b6:20:0a:39:10:d8:85: a9:99:5b:65:bd:0d:51:0e:62:aa:4c:00:de:ed:91:76:5b:62: a7:5f:b1:6a:b6:0d:30:8e:8c:61:d5:23:b4:0d:ea:c2:42:6d: 98:3a:c9:d4:50:6d:bb:6d:d8:e8:ed:27:7a:7f:40:44:22:45: 19:a6:e9:e7:6a:6b:70:cd:4e:96:3b:34:e8:13:4a:d5:c6:b4: 74:22:92:3f:3d:81:6e:85:de:9a:4b:ab:6b:3e:48:80:73:07: 6a:68:b5:41:13:94:f0:b5:47:90:28:3a:0b:56:e5:02:64:1f: 7c:72:1a:63:41:92:6c:0f:79:54:5e:67:fe:5e:3a:a1:1b:03: 63:31:d7:06:12:ca:40:00:9c:ac:3d:47:d6:79:35:94:58:a2: 36:09:80:40:8c:a8:f4:6a:e2:c2:7a:cc:88:3c:38:d5:f2:85: 8d:02:ee:fa:fc:56:b1:42:d2:d5:23:46:32:20:0a:1f:7a:3d: 63:a4:3b:07:e5:2e:69:d4:e7:c5:1a:2e:5b:f5:9d:18:e1:b7: 54:76:78:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1vqLeV11D4IHYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk MmVjZDEyYTktOGNhYS00YzAxLThkNGEtMjBkZGFmNGVmMDg4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEzsUUbApqY30iuRKw95N+bpZNFju+hyojeE EZid3JtTVbb6kjEp5EcRK4Dmsj7YRXjnpVvNXnRRoI1m3jGdjD+yK82Yjxm5ZPmA CREZ9rLBnmQ1IIU60NNoPDHQ2/ed/z3rhcptLlh7oQ/Yh9OPU8GFAARhtW3G8Rdf Lo9XyxHy1CIV8HxiolYOGWaluLIhmXZSnYFUUButKh8NMzBMEvoos/Hb2rhrWMfI 8u+6RRzgcVU5Y2r8ke8EpBlg8bIdAdRTeSIsXU7kJQfKoZYavV2Huwtg+y346YcU Bu+qjuchajh2FWvVmz1nWcLEoDi/10iw+A79EMBQuXQ0BxNF0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCF9XzOtSEM7Q7OsGi0zMqxzUFMrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvYzQxNjgwZGItMGU0YS0z NTRhLWFiYzMtNWFjODQ5ZjcxODc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBcgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKpphRuTd88cNHJO6iMb3Qx8hax0r7AIxsc8YXxQ/raWMWWrz0wBrz9F 7kPov13wtiAKORDYhamZW2W9DVEOYqpMAN7tkXZbYqdfsWq2DTCOjGHVI7QN6sJC bZg6ydRQbbtt2OjtJ3p/QEQiRRmm6edqa3DNTpY7NOgTStXGtHQikj89gW6F3ppL q2s+SIBzB2potUETlPC1R5AoOgtW5QJkH3xyGmNBkmwPeVReZ/5eOqEbA2Mx1wYS ykAAnKw9R9Z5NZRYojYJgECMqPRq4sJ6zIg8ONXyhY0C7vr8VrFC0tUjRjIgCh96 PWOkOwflLmnU58UaLlv1nRjht1R2eB8= -----END CERTIFICATE-----Generated at Sun Apr 27 00:34:13 2025 by rpki-client