$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa File: efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa (raw, json) Hash identifier: xLzGQMfW018x1O4mU7qhJ2o4YH5MsN5ySspPj2gzlOE= Subject key identifier: 74:5E:86:00:68:F1:53:20:E2:4A:30:82:EA:69:D4:21:B4:86:3F:E9 Certificate issuer: /CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Certificate serial: 010D0C9F43285848C581747617F6C5E02E9EEB00 Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa Signing time: Tue 04 Feb 2025 14:00:52 +0000 ROA not before: Tue 04 Feb 2025 14:00:52 +0000 ROA not after: Mon 05 May 2025 13:00:52 +0000 asID: 36492 IP address blocks: 136.22.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:c5:81:74:76:17:f6:c5:e0:2e:9e:eb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269 Validity Not Before: Feb 4 14:00:52 2025 GMT Not After : May 5 13:00:52 2025 GMT Subject: CN=b7ae9c14-f316-49e2-a7c3-a89c19b68ab8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:d2:59:53:ff:e3:93:ef:c5:50:ac:0f:63:d4: e0:c6:2b:88:52:23:98:46:3c:20:cd:07:86:de:82: c0:90:af:8c:3c:cb:fd:32:af:c3:da:b7:cf:0f:36: f0:c7:e3:9c:d6:d2:84:74:7c:8f:fc:e8:13:1c:a2: bf:de:06:21:9a:e2:cd:1e:eb:8e:53:5d:c8:41:2c: 89:20:fc:71:17:cb:97:0c:92:ee:95:4b:5d:2f:73: 3b:55:ee:ed:5d:7d:df:9f:0c:7b:0d:12:f8:31:72: 91:e6:22:4c:b1:9e:e1:7d:80:e9:ed:54:4a:01:f2: 17:93:15:77:62:1a:a3:6d:ec:fe:f6:1f:63:1f:f7: 14:52:51:82:02:5d:b8:ce:90:40:d0:4c:56:fe:e4: bc:cc:68:28:61:87:e1:2e:65:db:eb:11:c8:cf:b5: d6:07:7f:2f:1f:c8:cf:0e:ae:92:5a:07:8f:b8:b8: 59:bb:7a:be:af:16:e2:2e:d1:88:13:64:7f:36:21: 20:ba:ae:bd:db:f2:4b:ee:d9:91:07:a7:94:bf:b8: 0a:51:af:d8:5d:2b:3b:52:19:f2:0b:fa:9b:b8:3a: eb:d1:ed:23:18:b6:68:c5:05:11:4b:22:bd:4a:1d: af:60:87:8f:2b:4d:64:4d:de:c6:01:2f:63:bb:19: b5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:5E:86:00:68:F1:53:20:E2:4A:30:82:EA:69:D4:21:B4:86:3F:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/efff9402-f2ac-3c85-8a20-b8c2dc331eea.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl X509v3 Authority Key Identifier: keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer sbgp-ipAddrBlock: critical IPv4: 136.22.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:1f:16:6b:92:4f:ea:72:bb:99:f6:b5:1c:23:42:fe:93:39: f0:0f:08:9f:5c:3e:03:15:16:30:db:9c:a3:f9:34:3a:d7:a5: d3:ef:6a:47:1a:ff:d3:42:d8:82:ed:9b:3c:a6:5d:78:ad:7a: 21:07:82:b8:32:52:db:1b:36:d4:2d:f4:83:7d:b7:6b:36:02: e0:46:46:ed:99:c3:02:76:22:d1:72:0d:11:97:ea:20:83:9b: 77:b9:2c:44:02:c9:d1:ff:85:a8:74:48:d1:56:36:8f:77:9e: 8b:6d:b5:c1:20:3c:0f:11:c1:b1:0f:57:32:64:bd:51:c3:40: 41:47:61:46:79:3a:4c:3f:6a:b3:4b:bf:64:e4:68:0e:0e:56: a6:3e:af:04:ce:60:4e:12:eb:2e:1b:1b:60:94:14:3f:6e:e7: 02:87:6a:c7:69:94:59:13:b1:26:7e:cb:11:f2:ac:1a:6a:88: 38:ff:b2:6a:ad:c4:b1:af:e3:f6:47:1f:b1:3d:f7:d1:7e:73: 48:76:f8:3e:50:65:c1:c7:35:6b:1c:f5:6a:93:79:5c:bb:1a: 89:a4:54:ab:2a:e5:98:b9:19:18:fa:d9:2a:f9:1a:c8:a3:99: f8:ea:86:03:f1:ee:f2:82:d2:88:eb:1b:db:a9:cf:19:90:4d: 24:46:29:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgXR2F/bF4C6e6wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw MjY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk YjdhZTljMTQtZjMxNi00OWUyLWE3YzMtYTg5YzE5YjY4YWI4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAltJZU//jk+/FUKwPY9TgxiuIUiOYRjwgzQeG 3oLAkK+MPMv9Mq/D2rfPDzbwx+Oc1tKEdHyP/OgTHKK/3gYhmuLNHuuOU13IQSyJ IPxxF8uXDJLulUtdL3M7Ve7tXX3fnwx7DRL4MXKR5iJMsZ7hfYDp7VRKAfIXkxV3 Yhqjbez+9h9jH/cUUlGCAl24zpBA0ExW/uS8zGgoYYfhLmXb6xHIz7XWB38vH8jP Dq6SWgePuLhZu3q+rxbiLtGIE2R/NiEguq692/JL7tmRB6eUv7gKUa/YXSs7Uhny C/qbuDrr0e0jGLZoxQURSyK9Sh2vYIePK01kTd7GAS9juxm16QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHRehgBo8VMg4kowgupp1CG0hj/pMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2 ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvZWZmZjk0MDItZjJhYy0z Yzg1LThhMjAtYjhjMmRjMzMxZWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4 MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5 YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBZHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIAfFmuST+pyu5n2tRwjQv6TOfAPCJ9cPgMVFjDbnKP5NDrXpdPvakca /9NC2ILtmzymXXiteiEHgrgyUtsbNtQt9IN9t2s2AuBGRu2ZwwJ2ItFyDRGX6iCD m3e5LEQCydH/hah0SNFWNo93notttcEgPA8RwbEPVzJkvVHDQEFHYUZ5Okw/arNL v2TkaA4OVqY+rwTOYE4S6y4bG2CUFD9u5wKHasdplFkTsSZ+yxHyrBpqiDj/smqt xLGv4/ZHH7E999F+c0h2+D5QZcHHNWsc9WqTeVy7GomkVKsq5Zi5GRj62Sr5Gsij mfjqhgPx7vKC0ojrG9upzxmQTSRGKSE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:20:25 2025 by rpki-client