$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa File: 9afd2348-7f86-323b-8d7a-9a4032518ea1.roa (raw, json) Hash identifier: 3/GxOofkZ0CTpOEh1ZrT9qhAx7ge4T/4iGw0Yj48Mno= Subject key identifier: 20:4C:84:DC:9C:83:89:BD:17:F0:45:BE:E8:36:B8:64:D3:91:A3:6B Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285848BFEBCFC9612DCC69B01AA840 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 136.22.145.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:cf:c9:61:2d:cc:69:b0:1a:a8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=a8de0f71-a479-4a10-acea-d9f81ba79c68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:65:1c:15:6f:39:9a:bf:0e:66:f1:ea:27:d7: 81:62:a3:2c:79:74:c3:0b:46:eb:32:40:cc:11:33: 4c:7e:c3:8e:70:71:0b:ee:2d:69:d4:47:84:cc:d7: cc:87:c0:10:6c:81:08:ea:ec:a3:18:72:89:b2:4c: 86:e5:20:23:8d:0a:9b:62:08:bb:8f:2b:10:ef:99: 75:0c:a9:91:c6:a5:61:b8:67:f0:1c:64:d5:14:05: 95:7a:ff:fb:4d:8d:bb:a7:f0:1c:7c:c3:9c:34:5a: 75:54:21:12:88:55:41:7b:ec:c2:3c:d3:b8:43:4a: 79:34:bd:41:54:06:41:d7:73:33:f1:c9:82:6c:24: e6:85:e6:ad:22:6b:2f:14:3f:fb:85:3b:bf:6b:a9: c9:09:c6:4f:21:bf:d3:12:37:c5:2f:4e:67:86:85: 26:18:46:22:13:84:45:ac:26:4e:36:8a:20:cc:4a: f9:31:c5:4c:63:b4:09:12:da:ee:a7:d3:c1:5b:4d: 31:48:cf:49:0a:8f:e4:bd:aa:89:4a:3c:a9:90:fd: a1:fe:f0:e1:b2:b3:27:a6:e7:e7:6e:dc:81:6e:41: b7:56:db:82:78:d2:d3:c7:0c:a3:db:69:51:87:d9: 4e:ca:24:65:d1:a1:64:83:85:5f:55:63:85:fd:49: e6:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:4C:84:DC:9C:83:89:BD:17:F0:45:BE:E8:36:B8:64:D3:91:A3:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/9afd2348-7f86-323b-8d7a-9a4032518ea1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.145.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:48:1c:5c:dc:f9:a6:ee:90:7c:76:8e:40:dd:41:3b:be:49: 41:21:3a:05:18:e2:b3:64:0b:83:4d:d1:cf:4c:13:52:3e:ff: d4:7f:04:84:00:e7:7a:77:fe:c2:78:f8:3b:0d:01:55:92:40: 7a:ce:1a:ee:d3:e5:92:87:ed:c7:52:b6:2d:e0:28:60:27:1e: 35:69:0b:f2:0c:ea:15:f7:45:36:ed:0a:2b:0d:f0:31:01:45: bc:e0:54:ac:10:9d:d8:4f:ae:14:37:6e:4a:ad:c9:11:76:88: 63:32:a6:19:c1:31:30:57:01:43:a7:96:70:ce:5f:3f:42:da: 39:7c:67:06:37:a3:8e:51:c0:7f:b7:88:99:e2:c7:d7:27:41: ea:2d:b0:db:92:81:42:a0:c2:54:67:b8:af:3d:a7:9e:ad:79: b9:50:d9:1f:f3:e9:cb:08:d6:1d:72:81:89:cf:52:d7:d6:e0: 50:18:ba:a9:83:0a:b2:0d:87:a0:97:28:64:1e:aa:de:c1:84: eb:44:f9:2d:2f:15:4f:40:97:a7:2a:ec:b0:d2:29:8e:3d:7d: bf:18:f2:51:0b:d3:3e:6c:ed:7e:27:fc:82:fe:90:40:c7:d8: d5:28:76:94:89:3e:f1:8b:6c:ac:87:ce:a4:4e:2d:54:e6:8c: 55:67:56:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/68/JYS3MabAaqEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk YThkZTBmNzEtYTQ3OS00YTEwLWFjZWEtZDlmODFiYTc5YzY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWUcFW85mr8OZvHqJ9eBYqMseXTDC0brMkDM ETNMfsOOcHEL7i1p1EeEzNfMh8AQbIEI6uyjGHKJskyG5SAjjQqbYgi7jysQ75l1 DKmRxqVhuGfwHGTVFAWVev/7TY27p/AcfMOcNFp1VCESiFVBe+zCPNO4Q0p5NL1B VAZB13Mz8cmCbCTmheatImsvFD/7hTu/a6nJCcZPIb/TEjfFL05nhoUmGEYiE4RF rCZONoogzEr5McVMY7QJEtrup9PBW00xSM9JCo/kvaqJSjypkP2h/vDhsrMnpufn btyBbkG3VtuCeNLTxwyj22lRh9lOyiRl0aFkg4VfVWOF/UnmlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCBMhNycg4m9F/BFvug2uGTTkaNrMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvOWFmZDIzNDgtN2Y4Ni0z MjNiLThkN2EtOWE0MDMyNTE4ZWExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB1IHFzc+abukHx2jkDdQTu+SUEhOgUY4rNkC4NN0c9ME1I+/9R/BIQA 53p3/sJ4+DsNAVWSQHrOGu7T5ZKH7cdSti3gKGAnHjVpC/IM6hX3RTbtCisN8DEB RbzgVKwQndhPrhQ3bkqtyRF2iGMyphnBMTBXAUOnlnDOXz9C2jl8ZwY3o45RwH+3 iJnix9cnQeotsNuSgUKgwlRnuK89p56teblQ2R/z6csI1h1ygYnPUtfW4FAYuqmD CrINh6CXKGQeqt7BhOtE+S0vFU9Al6cq7LDSKY49fb8Y8lEL0z5s7X4n/IL+kEDH 2NUodpSJPvGLbKyHzqROLVTmjFVnVmU= -----END CERTIFICATE-----Generated at Mon Apr 7 07:12:42 2025 by rpki-client