$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa File: dafa22b2-e75f-3522-85b4-0863aacf25b9.roa (raw, json) Hash identifier: aSCq3XpKEVroOM9mFhdDXc7j/u3kw8XnoPy7H78+o4Q= Subject key identifier: A1:9B:8F:35:DD:BC:61:D7:58:60:D4:1D:05:56:F4:5B:DD:C8:65:E5 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C58230990513858242F32D00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 136.22.75.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 08 Apr 2025 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:82:30:99:05:13:85:82:42:f3:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=85b734d2-1abe-4794-81c1-e7188281b78f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:8d:2e:2c:4c:cf:d4:a8:8e:d9:f4:35:4b:84: 34:77:64:19:76:0e:63:78:d9:86:c2:f7:35:a3:aa: a3:5a:e3:db:db:20:c4:69:1c:79:97:16:7b:bc:61: b6:35:89:15:7c:30:0f:e0:52:8e:63:93:cf:f2:ae: 70:65:d7:eb:17:17:99:39:71:d1:e7:13:32:d5:3b: a0:23:a7:78:0e:4d:e9:6b:53:2b:5e:cc:29:ed:bd: c2:8d:d6:4f:50:b5:3d:3b:c6:f1:ca:95:13:51:a4: 96:7a:88:71:f2:71:4f:de:4a:ab:99:4f:38:72:14: da:80:98:7f:28:ad:4d:76:f0:2e:26:0e:4c:a7:d2: bb:68:fc:a2:e7:cd:87:92:64:dc:d0:fa:bd:27:ad: 0d:2a:2c:99:86:b7:ed:c0:00:f5:28:a5:11:e9:08: 7c:33:cd:de:64:1f:74:68:a0:fb:06:f9:3c:98:0a: 95:7e:7b:18:10:74:06:08:2e:e9:d7:3b:50:24:e2: 1c:b6:f6:5c:6c:91:70:4b:0a:ed:54:7c:c3:e4:e1: 7f:cb:6a:e8:7a:0e:f7:36:34:35:95:57:a7:e5:2c: ff:ea:84:e7:fe:0d:63:0c:1d:cd:e1:49:42:c6:24: 42:1d:b0:e1:72:82:21:23:ad:e9:57:ed:ae:b1:c2: 2b:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:9B:8F:35:DD:BC:61:D7:58:60:D4:1D:05:56:F4:5B:DD:C8:65:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/dafa22b2-e75f-3522-85b4-0863aacf25b9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.75.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:81:df:0b:07:fe:43:79:03:b1:7f:ea:12:3a:18:82:f7:c6: 7f:e6:35:b7:0f:3b:bf:a5:49:b7:36:ce:85:f6:10:86:5d:72: a4:28:ad:3b:3f:82:51:df:b5:60:b8:a9:c1:28:50:e1:e1:c1: 93:dd:d7:62:ae:4e:68:9b:f0:1a:e3:22:a6:9c:dd:bc:78:d1: 60:a7:30:16:40:95:e1:08:48:04:ef:d2:6e:ac:86:d8:0a:5b: c8:8f:29:a5:af:84:e9:da:fe:5e:bd:a0:7d:e9:16:f4:58:92: 14:d9:09:cb:d7:97:dd:66:78:36:c6:03:d8:4b:46:51:37:89: 4c:ef:bd:33:57:69:7b:5d:6d:4b:27:79:58:3e:23:81:a0:ca: 37:68:63:97:14:42:65:16:13:15:d8:e0:98:e7:a1:fb:7d:41: 3e:94:70:fc:84:ec:32:96:ba:bb:b1:bd:34:4c:60:70:b8:fb: 13:7b:25:5c:ed:fe:d4:58:3d:7b:55:80:62:3e:dc:5f:14:65: 02:ad:2f:39:46:5b:3a:f2:19:9e:8c:90:fc:4e:e0:18:ed:9c: 00:18:41:10:e2:b3:b4:36:b7:a1:c0:a7:06:a6:24:51:dc:19: fc:31:19:68:13:2f:e4:d0:e9:e4:9d:85:dc:b5:19:d3:f7:b2: a7:eb:20:42 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgjCZBROFgkLzLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk ODViNzM0ZDItMWFiZS00Nzk0LTgxYzEtZTcxODgyODFiNzhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkI0uLEzP1KiO2fQ1S4Q0d2QZdg5jeNmGwvc1 o6qjWuPb2yDEaRx5lxZ7vGG2NYkVfDAP4FKOY5PP8q5wZdfrFxeZOXHR5xMy1Tug I6d4Dk3pa1MrXswp7b3CjdZPULU9O8bxypUTUaSWeohx8nFP3kqrmU84chTagJh/ KK1NdvAuJg5Mp9K7aPyi582HkmTc0Pq9J60NKiyZhrftwAD1KKUR6Qh8M83eZB90 aKD7Bvk8mAqVfnsYEHQGCC7p1ztQJOIctvZcbJFwSwrtVHzD5OF/y2roeg73NjQ1 lVen5Sz/6oTn/g1jDB3N4UlCxiRCHbDhcoIhI63pV+2uscIrKwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKGbjzXdvGHXWGDUHQVW9FvdyGXlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZGFmYTIyYjItZTc1Zi0z NTIyLTg1YjQtMDg2M2FhY2YyNWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADyB3wsH/kN5A7F/6hI6GIL3xn/mNbcPO7+lSbc2zoX2EIZdcqQorTs/ glHftWC4qcEoUOHhwZPd12KuTmib8BrjIqac3bx40WCnMBZAleEISATv0m6shtgK W8iPKaWvhOna/l69oH3pFvRYkhTZCcvXl91meDbGA9hLRlE3iUzvvTNXaXtdbUsn eVg+I4GgyjdoY5cUQmUWExXY4Jjnoft9QT6UcPyE7DKWuruxvTRMYHC4+xN7JVzt /tRYPXtVgGI+3F8UZQKtLzlGWzryGZ6MkPxO4BjtnAAYQRDis7Q2t6HApwamJFHc GfwxGWgTL+TQ6eSdhdy1GdP3sqfrIEI= -----END CERTIFICATE-----Generated at Sat Apr 5 20:41:14 2025 by rpki-client