$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa File: ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa (raw, json) Hash identifier: TaQQEJ37J5OUL0goNIOxfkoZz/jJx3KSvTAfZ2MxcMY= Subject key identifier: 39:6E:C5:61:80:0D:47:B6:7C:3C:3D:9D:80:8C:6D:BF:2B:F6:1E:27 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F43285848BFEBD5FD350D537E34623D80 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa Signing time: Sun 02 Feb 2025 14:00:53 +0000 ROA not before: Sun 02 Feb 2025 14:00:53 +0000 ROA not after: Sat 03 May 2025 13:00:53 +0000 asID: 36040 IP address blocks: 136.22.152.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:bf:eb:d5:fd:35:0d:53:7e:34:62:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Feb 2 14:00:53 2025 GMT Not After : May 3 13:00:53 2025 GMT Subject: CN=60e7af6b-bb17-40b7-9d06-79bf7b2d8a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:97:23:1e:f1:9f:ad:10:ff:95:8f:ce:75:b9: c8:f0:43:ab:de:75:d1:68:d2:81:8d:34:d2:d9:f1: b0:bf:9a:4b:3f:5f:f2:63:ae:96:44:03:df:f7:7d: d5:d6:15:05:73:6b:93:5d:33:89:d1:25:29:c2:9a: f0:02:3f:58:8e:2a:db:5d:29:66:d9:25:77:dd:77: f2:6e:9c:04:d7:1b:f5:89:9b:9c:32:0f:65:7e:1b: 12:b8:05:18:50:6f:e8:17:57:f7:21:79:cc:ab:d4: 91:59:59:8b:fd:a0:7c:a9:b6:f7:d7:de:3e:cd:61: 85:c3:cb:39:d6:b6:e9:ae:d1:f5:8c:ed:be:89:84: 95:e4:e6:3a:f9:33:26:62:78:a6:2e:94:1f:e8:fc: b0:11:aa:56:25:56:84:8f:0f:5b:db:21:3a:ef:f2: e2:a5:38:e0:0b:e8:95:97:e3:ee:7e:fa:e3:64:6b: cf:98:d1:ef:01:96:76:c4:51:28:20:a0:7f:f3:2b: 37:e1:dc:9c:64:3e:ae:f1:d3:62:0a:5e:7d:46:c8: 86:0f:0c:90:94:a0:2e:2e:00:38:16:d5:80:76:5d: e3:12:5f:c5:de:7a:45:91:46:2f:73:2f:f5:e6:cb: 2c:56:5f:55:46:d8:e1:40:cd:00:9a:1a:f5:61:83: 06:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:6E:C5:61:80:0D:47:B6:7C:3C:3D:9D:80:8C:6D:BF:2B:F6:1E:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/ecd38e82-92b2-3489-9d2d-e33f18f29b7c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.152.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:df:e0:fc:16:46:2f:f8:d7:2b:84:76:96:6a:12:dd:3e:d5: 00:39:35:d6:a7:a5:38:a4:cf:73:4a:78:b5:b5:40:00:5d:7b: d7:fb:5f:56:af:59:f9:09:8e:ed:59:d4:4d:1c:9a:f8:54:b4: 4c:ba:2a:95:82:66:a7:96:68:5a:cf:b4:dc:02:4e:42:9d:8c: 32:12:53:2f:a9:18:88:2c:dc:c3:77:0b:e2:27:29:ab:8b:e0: 49:7c:64:a7:69:4f:3f:cc:99:d5:57:85:33:bc:6d:b8:90:dc: 9b:d0:21:ea:74:20:cf:b0:5a:7e:8c:f8:f6:dc:12:0b:12:fb: 5d:7c:cd:20:32:d4:2c:12:d0:c7:5e:90:8e:97:33:e6:39:fa: 1d:da:17:38:6e:58:90:e5:2f:25:10:26:9b:89:e3:b7:f5:02: 6e:a8:ea:55:67:33:3e:10:5b:ce:a7:da:d6:d3:28:0f:49:af: 91:55:63:0a:ab:d4:f5:fe:e2:4d:3f:03:68:d2:fc:4d:d8:3d: fb:a9:6b:32:b7:29:1d:5f:d1:cb:aa:26:8e:ae:05:c2:76:0f: 87:77:56:f3:fe:ed:25:d9:a9:99:47:69:d2:87:55:e8:8b:0f: a2:d8:ac:a9:7d:72:91:da:52:ba:d1:0b:66:02:eb:76:e8:35: ab:43:90:c7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi/69X9NQ1TfjRiPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI1MDIwMjE0MDA1M1oXDTI1MDUwMzEzMDA1M1owLzEtMCsGA1UEAxMk NjBlN2FmNmItYmIxNy00MGI3LTlkMDYtNzliZjdiMmQ4YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgZcjHvGfrRD/lY/OdbnI8EOr3nXRaNKBjTTS 2fGwv5pLP1/yY66WRAPf933V1hUFc2uTXTOJ0SUpwprwAj9YjirbXSlm2SV33Xfy bpwE1xv1iZucMg9lfhsSuAUYUG/oF1f3IXnMq9SRWVmL/aB8qbb3194+zWGFw8s5 1rbprtH1jO2+iYSV5OY6+TMmYnimLpQf6PywEapWJVaEjw9b2yE67/LipTjgC+iV l+PufvrjZGvPmNHvAZZ2xFEoIKB/8ys34dycZD6u8dNiCl59RsiGDwyQlKAuLgA4 FtWAdl3jEl/F3npFkUYvcy/15sssVl9VRtjhQM0Amhr1YYMGDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDluxWGADUe2fDw9nYCMbb8r9h4nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvZWNkMzhlODItOTJiMi0z NDg5LTlkMmQtZTMzZjE4ZjI5YjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiBaYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADzf4PwWRi/41yuEdpZqEt0+1QA5NdanpTikz3NKeLW1QABde9f7X1av WfkJju1Z1E0cmvhUtEy6KpWCZqeWaFrPtNwCTkKdjDISUy+pGIgs3MN3C+InKauL 4El8ZKdpTz/MmdVXhTO8bbiQ3JvQIep0IM+wWn6M+PbcEgsS+118zSAy1CwS0Mde kI6XM+Y5+h3aFzhuWJDlLyUQJpuJ47f1Am6o6lVnMz4QW86n2tbTKA9Jr5FVYwqr 1PX+4k0/A2jS/E3YPfupazK3KR1f0cuqJo6uBcJ2D4d3VvP+7SXZqZlHadKHVeiL D6LYrKl9cpHaUrrRC2YC63boNatDkMc= -----END CERTIFICATE-----Generated at Mon Apr 7 07:01:58 2025 by rpki-client