$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa File: 066f375f-eca5-377b-95ce-6c0435f7cd90.roa (raw, json) Hash identifier: Bmhwe9Vh3wtQwk7y7dSvSjCaRre8F19jVy9YqfjkeBc= Subject key identifier: 29:9A:D1:0A:B3:1E:5E:19:9C:EC:9B:38:CF:2E:0B:22:9D:D9:DE:85 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C5820AA83916789DB58C4980 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 136.22.94.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:0a:a8:39:16:78:9d:b5:8c:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=1bccb2e6-94e8-4f05-9f0f-301239739d28 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:ec:68:a7:7e:3f:dc:90:5a:3c:bf:fd:69:be: fc:a8:0f:b8:75:4c:e2:fb:ee:5d:24:d8:07:6c:1b: ad:5e:8e:53:29:a9:31:42:44:d3:fb:cc:c3:23:91: d5:1e:fb:82:04:a5:36:1d:3e:2f:91:bb:47:33:c7: 8b:d6:df:1c:c2:1e:54:3f:0c:6a:d3:8f:bf:6e:b7: 45:a5:4e:51:56:01:4f:56:b2:23:5f:2d:32:9c:19: b9:3b:53:8a:3b:e3:60:b8:f4:f1:d0:f9:99:d5:88: 73:38:61:70:0b:f9:44:7f:3c:89:8e:35:13:2f:07: d4:95:8f:01:b1:20:17:d5:4c:06:69:4f:ad:10:56: 7e:16:86:0f:09:90:36:9c:24:0a:39:5f:34:68:07: 45:a9:29:16:66:dc:03:61:53:c5:48:ee:8d:9d:49: 29:da:32:4b:12:d5:20:ce:5f:7f:04:eb:6b:d3:dc: 52:dc:ad:26:ae:84:da:83:61:75:33:84:a4:34:65: e9:50:eb:70:1f:5a:24:76:e9:62:4a:a9:62:8b:94: d5:6f:00:7e:c1:a3:66:b5:ae:3f:f6:11:c0:3e:15: 81:d9:1f:3c:47:58:88:a1:fe:38:60:5a:c5:c3:1d: fd:b7:fc:37:91:d6:ae:13:f7:90:5d:0e:35:ec:73: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:9A:D1:0A:B3:1E:5E:19:9C:EC:9B:38:CF:2E:0B:22:9D:D9:DE:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/066f375f-eca5-377b-95ce-6c0435f7cd90.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.94.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:5a:e8:c9:38:f9:89:e7:a7:ab:b8:07:2e:4e:8a:3b:d5:16: 9b:f1:34:6a:60:3e:22:16:d2:4c:70:3a:0d:95:a3:d5:77:7f: aa:00:0d:f6:3e:a5:6e:61:ab:28:77:b4:44:35:86:4a:ac:8f: 2e:74:b2:58:59:55:0a:f8:72:34:24:1c:5c:6b:d1:c3:4a:f9: 93:73:b5:eb:6a:d7:dc:de:c0:ec:7f:43:29:65:b7:0e:6a:75: 0e:31:41:d7:b0:75:f3:ca:d8:5d:00:53:2b:06:56:6b:3e:a8: f3:97:c8:6c:08:19:c5:68:4f:ac:ac:a3:e9:cf:68:da:a5:8e: 22:0d:2c:5c:82:a6:43:6e:19:49:25:88:c2:ba:f8:69:1b:3c: 7e:38:bf:00:ae:76:de:0c:17:08:d9:ae:6b:85:e3:fd:b2:3e: 8e:40:13:6c:fe:05:f9:2f:2d:d1:45:ea:bd:d1:89:32:61:98: b3:6e:e8:e9:c1:48:81:3b:7f:72:7a:78:a7:60:90:82:9c:c0: ca:59:07:bd:6c:16:ac:4f:cd:53:3f:f9:72:0e:c7:0a:97:36: 7f:14:95:b3:85:0a:88:4b:0f:bf:1a:c9:35:33:ea:44:8b:f7: dd:df:4b:3e:b9:63:83:99:25:fd:b9:3d:2a:d9:10:2d:2c:64: 34:7c:79:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFggqoORZ4nbWMSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MWJjY2IyZTYtOTRlOC00ZjA1LTlmMGYtMzAxMjM5NzM5ZDI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOxop34/3JBaPL/9ab78qA+4dUzi++5dJNgH bButXo5TKakxQkTT+8zDI5HVHvuCBKU2HT4vkbtHM8eL1t8cwh5UPwxq04+/brdF pU5RVgFPVrIjXy0ynBm5O1OKO+NguPTx0PmZ1YhzOGFwC/lEfzyJjjUTLwfUlY8B sSAX1UwGaU+tEFZ+FoYPCZA2nCQKOV80aAdFqSkWZtwDYVPFSO6NnUkp2jJLEtUg zl9/BOtr09xS3K0mroTag2F1M4SkNGXpUOtwH1okduliSqlii5TVbwB+waNmta4/ 9hHAPhWB2R88R1iIof44YFrFwx39t/w3kdauE/eQXQ417HM/lQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCma0QqzHl4ZnOybOM8uCyKd2d6FMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMDY2ZjM3NWYtZWNhNS0z NzdiLTk1Y2UtNmMwNDM1ZjdjZDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBa6Mk4+Ynnp6u4By5OijvVFpvxNGpgPiIW0kxwOg2Vo9V3f6oADfY+ pW5hqyh3tEQ1hkqsjy50slhZVQr4cjQkHFxr0cNK+ZNztetq19zewOx/Qylltw5q dQ4xQdewdfPK2F0AUysGVms+qPOXyGwIGcVoT6yso+nPaNqljiINLFyCpkNuGUkl iMK6+GkbPH44vwCudt4MFwjZrmuF4/2yPo5AE2z+BfkvLdFF6r3RiTJhmLNu6OnB SIE7f3J6eKdgkIKcwMpZB71sFqxPzVM/+XIOxwqXNn8UlbOFCohLD78ayTUz6kSL 993fSz65Y4OZJf25PSrZEC0sZDR8eYI= -----END CERTIFICATE-----Generated at Sat Apr 5 20:36:35 2025 by rpki-client