$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa File: 21908a76-1951-32c5-96cf-7506f81108ff.roa (raw, json) Hash identifier: Ry2pe18iwOhY+bjLDXFphYFl/JmDmEQhKzhT4eFpEp4= Subject key identifier: FC:1C:03:38:6B:FD:AE:A9:51:74:67:40:8C:F1:3E:E5:3D:95:A9:D9 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C58210F83414A83EE9BC0380 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 136.22.86.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:10:f8:34:14:a8:3e:e9:bc:03:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=192adc4d-c67e-4971-9e5e-9905194c9e72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:bc:d2:5e:22:c0:a7:83:01:f1:fb:6f:dd:fe: e8:2f:34:6b:8f:29:2d:d0:0b:00:2c:5b:91:46:f2: 3d:83:2e:1c:83:7a:db:07:d1:59:93:35:0d:1d:38: eb:b5:82:93:81:88:ab:10:36:28:f5:3d:dc:5e:c5: 92:98:fe:70:09:b5:1c:14:c8:4a:3c:1c:2f:f1:c0: 25:20:63:88:99:b3:b3:f8:89:a0:eb:ca:38:5d:33: 34:88:03:94:28:11:a6:93:56:0a:23:b5:27:86:dc: c3:45:ea:6f:06:50:c6:99:8b:35:24:2e:70:d4:7f: db:65:9e:3b:76:2d:20:a6:d1:1b:35:57:ff:73:f4: 4e:68:2c:49:72:36:6b:27:29:87:5b:f6:70:f3:9d: 06:c4:6d:f9:9e:20:a5:71:af:43:f6:ab:61:5a:e6: 76:1a:21:cb:c9:24:8c:9d:49:2e:0c:85:fe:1c:42: 06:1a:00:61:a2:35:57:1c:d4:81:e0:86:26:a2:3d: d0:69:95:6b:a5:81:b2:67:97:6c:3e:82:5f:c0:80: 24:8f:f4:7e:c9:b3:ea:c5:66:fb:72:a1:0d:f4:82: a0:76:bf:22:3b:3e:8a:bf:2a:68:1c:75:00:37:cb: 22:31:31:00:a0:fd:e9:49:21:17:72:5a:13:0f:41: 34:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:1C:03:38:6B:FD:AE:A9:51:74:67:40:8C:F1:3E:E5:3D:95:A9:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/21908a76-1951-32c5-96cf-7506f81108ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.86.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:43:6b:bd:d5:77:9b:55:8c:2e:f9:02:c3:48:30:b6:6b:b2: d5:95:40:85:f9:42:dd:ba:21:30:05:cb:2b:b9:e7:de:84:62: 6c:ca:33:15:a7:45:70:64:2f:93:37:5e:67:31:32:96:e2:28: 52:98:d0:0c:d1:52:39:c7:e2:2e:b0:77:c5:27:d6:6c:64:0d: de:f4:a8:a5:dd:c4:06:80:fe:96:75:37:7c:14:87:18:b2:60: 33:38:7c:da:09:cd:e7:95:e5:55:b8:d8:67:93:3c:2d:2e:50: 84:5d:b8:ad:60:12:32:66:80:1c:3b:ea:20:08:50:24:b5:00: ac:37:57:9e:bb:a9:c5:ad:df:12:bb:07:5e:9f:d4:4e:96:a3: 22:72:dc:d4:7d:8b:27:b2:4a:a3:96:3c:10:7b:c8:f4:5e:06: b0:8e:99:cb:94:87:b3:80:28:a8:2f:83:67:43:d0:dc:55:e4: fa:bb:29:6f:d4:1b:85:a9:21:41:78:75:08:3f:51:8b:9e:e2: b2:9a:3b:4a:9d:b7:0d:47:d1:65:72:d5:ef:ce:bd:df:fb:29: 37:4a:58:cf:46:e1:7c:f6:bb:17:82:4e:1e:28:0a:10:5e:0e: 4b:50:c7:ee:38:64:f7:5c:bc:33:0c:60:62:54:41:3d:ed:01: 8b:71:d9:c2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFghD4NBSoPum8A4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk MTkyYWRjNGQtYzY3ZS00OTcxLTllNWUtOTkwNTE5NGM5ZTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLzSXiLAp4MB8ftv3f7oLzRrjykt0AsALFuR RvI9gy4cg3rbB9FZkzUNHTjrtYKTgYirEDYo9T3cXsWSmP5wCbUcFMhKPBwv8cAl IGOImbOz+Img68o4XTM0iAOUKBGmk1YKI7UnhtzDRepvBlDGmYs1JC5w1H/bZZ47 di0gptEbNVf/c/ROaCxJcjZrJymHW/Zw850GxG35niClca9D9qthWuZ2GiHLySSM nUkuDIX+HEIGGgBhojVXHNSB4IYmoj3QaZVrpYGyZ5dsPoJfwIAkj/R+ybPqxWb7 cqEN9IKgdr8iOz6KvypoHHUAN8siMTEAoP3pSSEXcloTD0E0DQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPwcAzhr/a6pUXRnQIzxPuU9lanZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvMjE5MDhhNzYtMTk1MS0z MmM1LTk2Y2YtNzUwNmY4MTEwOGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZWMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChDa73Vd5tVjC75AsNIMLZrstWVQIX5Qt26ITAFyyu5596EYmzKMxWn RXBkL5M3XmcxMpbiKFKY0AzRUjnH4i6wd8Un1mxkDd70qKXdxAaA/pZ1N3wUhxiy YDM4fNoJzeeV5VW42GeTPC0uUIRduK1gEjJmgBw76iAIUCS1AKw3V567qcWt3xK7 B16f1E6WoyJy3NR9iyeySqOWPBB7yPReBrCOmcuUh7OAKKgvg2dD0NxV5Pq7KW/U G4WpIUF4dQg/UYue4rKaO0qdtw1H0WVy1e/Ovd/7KTdKWM9G4Xz2uxeCTh4oChBe DktQx+44ZPdcvDMMYGJUQT3tAYtx2cI= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:44 2025 by rpki-client