$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfe6218d-3f8a-34d4-b68a-fb740c4c6c3d.roa File: cfe6218d-3f8a-34d4-b68a-fb740c4c6c3d.roa (raw, json) Hash identifier: ePUOEhCbCUT+uGZZvGOsvp9UF2sxrzetnh2osRC8Gxs= Subject key identifier: 12:41:4C:58:A6:E0:AA:70:54:BB:46:6B:2A:FA:42:D9:98:60:32:6F Certificate issuer: /CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Certificate serial: 010D0C9F43285849A4BB5ABBB1A4A69F66E25A00 Authority key identifier: FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfe6218d-3f8a-34d4-b68a-fb740c4c6c3d.roa Signing time: Fri 25 Apr 2025 13:01:00 +0000 ROA not before: Fri 25 Apr 2025 13:01:00 +0000 ROA not after: Thu 24 Jul 2025 13:01:00 +0000 asID: 36492 IP address blocks: 136.23.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:a4:bb:5a:bb:b1:a4:a6:9f:66:e2:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f927dec-349c-478b-a1ac-2b628f2bc585 Validity Not Before: Apr 25 13:01:00 2025 GMT Not After : Jul 24 13:01:00 2025 GMT Subject: CN=fc7c2838-0d0b-4c22-b5a5-2cba7e79bc9c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:bc:5c:b8:54:f3:27:7c:49:56:b4:a9:71:40: 29:a0:06:7c:bc:0c:f4:2f:94:41:63:2b:01:5f:1f: 33:17:d9:36:ef:1d:1e:62:55:b5:5c:ab:56:8a:0d: 11:9b:73:77:ed:d2:f0:6a:9f:b7:ee:af:e0:76:50: 5b:2c:2a:48:81:25:61:41:0c:d0:ad:5b:30:76:35: 3e:99:85:c7:b3:c7:8a:48:0d:72:91:18:64:41:f9: 76:92:50:b4:5d:c8:2e:89:14:58:19:40:6a:ce:98: 63:38:f6:27:d8:da:fb:9e:da:2d:d6:97:f2:54:7c: 74:9b:54:4f:26:cd:90:95:f0:90:2f:51:f2:f8:2b: b0:40:26:04:39:c1:51:a2:fa:60:d9:2e:6b:21:b7: 8b:06:04:b6:59:4c:fc:64:6a:6e:5a:82:96:10:aa: dd:b2:23:45:97:16:0b:55:43:74:8d:d2:63:7e:1f: 99:6d:3e:04:dc:9a:20:2f:6c:a9:a7:48:ac:b2:90: 7f:3a:76:2d:40:5e:5a:c9:55:c7:1b:90:3b:ec:36: ba:55:c4:20:ab:b2:a3:93:29:71:09:c4:00:62:fd: 93:f6:7a:a8:35:cd:f3:cf:95:2b:11:ee:67:ec:28: a9:3e:a6:cf:85:1a:93:be:78:b4:c3:50:65:a6:8e: b1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:41:4C:58:A6:E0:AA:70:54:BB:46:6B:2A:FA:42:D9:98:60:32:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/cfe6218d-3f8a-34d4-b68a-fb740c4c6c3d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585/6f927dec-349c-478b-a1ac-2b628f2bc585.crl X509v3 Authority Key Identifier: keyid:FD:81:62:52:47:BC:AC:F1:B9:09:50:51:19:DD:6F:3F:16:47:D9:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6f927dec-349c-478b-a1ac-2b628f2bc585.cer sbgp-ipAddrBlock: critical IPv4: 136.23.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:ec:2e:6e:67:03:c6:e4:50:ec:e9:93:b5:49:78:f8:5c:eb: fe:04:d9:93:e1:f6:af:ef:47:37:7d:ae:34:ed:b8:7b:40:44: b5:7e:61:62:f2:26:ad:57:c4:90:ef:72:e6:6c:00:38:3d:9a: 75:9e:23:6d:68:8d:aa:93:7e:ef:a0:29:f0:2e:32:e2:3e:43: a4:35:0c:8f:b1:32:a0:63:67:92:c2:e9:17:88:56:51:f3:19: 2c:47:2a:d1:9c:8c:d6:e8:de:49:21:ca:a5:7d:64:f4:02:e6: b4:5e:34:cd:fd:4e:73:10:76:56:06:04:02:2c:9b:5a:b4:8e: 5c:be:4b:3f:f6:46:01:c8:6d:32:cc:67:0d:73:9d:17:08:e5: 25:2a:8c:cb:0e:b1:62:36:18:7f:ad:96:f7:90:23:e5:fc:1b: 06:52:04:7a:58:be:b3:2e:ac:f0:38:4a:19:18:d3:84:9f:8d: ae:1c:d9:4d:e0:d3:10:34:a0:f8:66:c5:04:41:ed:f8:5d:22: 98:bd:0a:fd:21:82:e4:d9:20:86:b2:75:b1:ba:e8:ed:a3:fa: be:1a:0d:5b:d9:11:33:d1:e1:f5:51:d2:87:46:32:c6:23:a7: c8:c4:a4:f1:9b:7f:90:47:3e:70:0f:2e:87:21:00:97:a8:77: 28:83:ae:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmku1q7saSmn2biWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmY5MjdkZWMtMzQ5Yy00NzhiLWExYWMtMmI2MjhmMmJj NTg1MB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk ZmM3YzI4MzgtMGQwYi00YzIyLWI1YTUtMmNiYTdlNzliYzljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbxcuFTzJ3xJVrSpcUApoAZ8vAz0L5RBYysB Xx8zF9k27x0eYlW1XKtWig0Rm3N37dLwap+37q/gdlBbLCpIgSVhQQzQrVswdjU+ mYXHs8eKSA1ykRhkQfl2klC0XcguiRRYGUBqzphjOPYn2Nr7ntot1pfyVHx0m1RP Js2QlfCQL1Hy+CuwQCYEOcFRovpg2S5rIbeLBgS2WUz8ZGpuWoKWEKrdsiNFlxYL VUN0jdJjfh+ZbT4E3JogL2ypp0isspB/OnYtQF5ayVXHG5A77Da6VcQgq7Kjkylx CcQAYv2T9nqoNc3zz5UrEe5n7CipPqbPhRqTvni0w1Blpo6xtQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBJBTFim4KpwVLtGayr6QtmYYDJvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82Zjky N2RlYy0zNDljLTQ3OGItYTFhYy0yYjYyOGYyYmM1ODUvY2ZlNjIxOGQtM2Y4YS0z NGQ0LWI2OGEtZmI3NDBjNGM2YzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmY5MjdkZWMtMzQ5Yy00NzhiLWEx YWMtMmI2MjhmMmJjNTg1LzZmOTI3ZGVjLTM0OWMtNDc4Yi1hMWFjLTJiNjI4ZjJi YzU4NS5jcmwwHwYDVR0jBBgwFoAU/YFiUke8rPG5CVBRGd1vPxZH2XcwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5 NC04ZjZjLWQ2YzkxYjBiODQxNS82ZjkyN2RlYy0zNDljLTQ3OGItYTFhYy0yYjYy OGYyYmM1ODUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBcUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzsLm5nA8bkUOzpk7VJePhc6/4E2ZPh9q/vRzd9rjTtuHtARLV+YWLy Jq1XxJDvcuZsADg9mnWeI21ojaqTfu+gKfAuMuI+Q6Q1DI+xMqBjZ5LC6ReIVlHz GSxHKtGcjNbo3kkhyqV9ZPQC5rReNM39TnMQdlYGBAIsm1q0jly+Sz/2RgHIbTLM Zw1znRcI5SUqjMsOsWI2GH+tlveQI+X8GwZSBHpYvrMurPA4ShkY04Sfja4c2U3g 0xA0oPhmxQRB7fhdIpi9Cv0hguTZIIaydbG66O2j+r4aDVvZETPR4fVR0odGMsYj p8jEpPGbf5BHPnAPLochAJeodyiDrjQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:13:10 2025 by rpki-client