$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa File: 4b74f50c-2083-3422-a939-530f6efcad0d.roa (raw, json) Hash identifier: YA/v+k4AE9xWnPjbBN4NmNAdKm0FLyIz5hJ4xG6+/1s= Subject key identifier: 49:13:80:BF:C3:51:42:3D:EC:9B:3E:BF:8A:AF:56:64:45:D8:4E:E0 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584A7E7B6E334A3199084698D880 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa Signing time: Sat 12 Jul 2025 13:01:04 +0000 ROA not before: Sat 12 Jul 2025 13:01:04 +0000 ROA not after: Fri 10 Oct 2025 13:01:04 +0000 asID: 36040 IP address blocks: 136.22.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:7e:7b:6e:33:4a:31:99:08:46:98:d8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Jul 12 13:01:04 2025 GMT Not After : Oct 10 13:01:04 2025 GMT Subject: CN=cf3a66bf-fc85-4439-aa64-8bbbcca2270b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:5c:d4:ff:a7:19:46:55:a6:62:46:45:d5:e5: 8d:6b:3f:97:0c:35:0a:47:8b:91:74:c0:c4:ff:c2: 7c:3c:58:e9:24:21:c8:9e:62:26:4d:42:da:32:a0: 46:0a:54:ef:80:c2:43:f6:25:48:6a:54:e1:49:37: c1:64:82:17:27:fd:61:8c:21:08:17:b7:d3:c5:3d: c3:ff:d7:0e:a1:75:4e:db:03:39:e3:1c:05:c7:ba: bf:ce:f0:90:70:f0:78:35:7c:ab:b3:98:35:44:e2: b3:0f:84:04:0f:1b:4d:df:42:6f:bf:1b:59:b7:19: 8c:00:a7:85:ef:25:dd:96:85:0a:64:77:d9:b4:a9: c1:c7:b0:59:ee:3e:af:83:e2:16:c5:4a:6e:b2:0b: be:14:bd:01:56:91:34:11:29:a4:47:31:9d:17:e0: 4f:0d:a0:2c:85:3c:40:3f:10:74:52:47:1a:3d:f7: 56:10:c4:49:86:cc:06:8f:9d:d2:13:37:3e:65:69: 06:45:fc:5c:b6:ee:69:21:d4:94:7c:3e:87:7b:b3: d3:c4:1a:75:a8:8e:4e:48:eb:8e:81:1a:83:90:40: 96:78:04:30:53:ee:9f:c4:b0:bb:a0:b9:6c:16:79: f5:55:77:ae:37:2d:5f:6b:3d:7c:be:5e:f8:3a:86: a5:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:13:80:BF:C3:51:42:3D:EC:9B:3E:BF:8A:AF:56:64:45:D8:4E:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/4b74f50c-2083-3422-a939-530f6efcad0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:50:d3:f2:4d:61:90:46:4f:75:e3:9c:69:88:83:cb:e3:4c: 11:32:76:49:15:75:49:77:bb:02:91:18:9d:7d:36:62:d2:d7: 51:8d:ee:55:93:51:12:43:7c:76:7e:7c:2d:f7:f4:9d:f7:97: 05:23:76:9e:6a:df:7c:4c:d8:4a:65:21:3d:99:f5:cd:d8:ec: 03:40:f4:47:e8:c0:2b:6c:ab:7b:43:55:f7:c7:de:01:e4:bc: 02:fc:a1:f1:05:a5:07:36:b8:76:93:d9:34:e0:7d:d0:67:70: 8a:65:14:6a:0e:43:df:72:a3:79:64:bf:25:3b:32:98:d5:5f: 79:55:f8:14:d9:2c:5e:e6:b9:f4:ae:2f:d1:62:a1:63:fa:bc: a2:df:11:d1:4d:f0:5c:fc:34:0e:2a:15:7d:5d:d4:c3:8f:bf: 62:df:0c:5b:44:6c:b6:e6:4a:e4:0b:c9:e5:20:cc:90:b9:23: ab:4a:7d:2e:8f:72:c9:4e:7e:51:cf:9e:18:4d:b1:d4:85:a5: 54:2b:5a:e1:f2:e7:95:a2:d3:2d:eb:8d:ad:f8:0e:08:16:af: 7c:19:ad:c8:6d:ae:32:b6:93:21:95:59:04:bc:1e:43:78:87: 91:85:26:f5:8c:08:41:14:55:0f:c9:a4:a4:01:9f:f4:d8:6e: 7a:fe:f4:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp+e24zSjGZCEaY2IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDcxMjEzMDEwNFoXDTI1MTAxMDEzMDEwNFowLzEtMCsGA1UEAxMk Y2YzYTY2YmYtZmM4NS00NDM5LWFhNjQtOGJiYmNjYTIyNzBiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmlzU/6cZRlWmYkZF1eWNaz+XDDUKR4uRdMDE /8J8PFjpJCHInmImTULaMqBGClTvgMJD9iVIalThSTfBZIIXJ/1hjCEIF7fTxT3D /9cOoXVO2wM54xwFx7q/zvCQcPB4NXyrs5g1ROKzD4QEDxtN30JvvxtZtxmMAKeF 7yXdloUKZHfZtKnBx7BZ7j6vg+IWxUpusgu+FL0BVpE0ESmkRzGdF+BPDaAshTxA PxB0UkcaPfdWEMRJhswGj53SEzc+ZWkGRfxctu5pIdSUfD6He7PTxBp1qI5OSOuO gRqDkECWeAQwU+6fxLC7oLlsFnn1VXeuNy1faz18vl74OoalFQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEkTgL/DUUI97Js+v4qvVmRF2E7gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNGI3NGY1MGMtMjA4My0z NDIyLWE5MzktNTMwZjZlZmNhZDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNQ0/JNYZBGT3XjnGmIg8vjTBEydkkVdUl3uwKRGJ19NmLS11GN7lWT URJDfHZ+fC339J33lwUjdp5q33xM2EplIT2Z9c3Y7ANA9EfowCtsq3tDVffH3gHk vAL8ofEFpQc2uHaT2TTgfdBncIplFGoOQ99yo3lkvyU7MpjVX3lV+BTZLF7mufSu L9FioWP6vKLfEdFN8Fz8NA4qFX1d1MOPv2LfDFtEbLbmSuQLyeUgzJC5I6tKfS6P cslOflHPnhhNsdSFpVQrWuHy55Wi0y3rja34DggWr3wZrchtrjK2kyGVWQS8HkN4 h5GFJvWMCEEUVQ/JpKQBn/TYbnr+9Ac= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:46 2025 by rpki-client