$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1870653-4e7c-3739-a64d-552d9abbacbd.roa File: e1870653-4e7c-3739-a64d-552d9abbacbd.roa (raw, json) Hash identifier: dvwpSwGw2yyhfI2Iql3O/XIzYkvMV83WTmHjgqGl/WM= Subject key identifier: 71:F3:C3:B2:72:95:13:66:6D:E0:1E:B4:9B:39:FD:10:65:F7:90:9F Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584894A5E753E12745612A45C2E0 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1870653-4e7c-3739-a64d-552d9abbacbd.roa Signing time: Sat 18 Jan 2025 02:00:38 +0000 ROA not before: Sat 18 Jan 2025 02:00:38 +0000 ROA not after: Fri 18 Apr 2025 01:00:38 +0000 asID: 53813 IP address blocks: 136.226.254.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:94:a5:e7:53:e1:27:45:61:2a:45:c2:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Jan 18 02:00:38 2025 GMT Not After : Apr 18 01:00:38 2025 GMT Subject: CN=5e5d5110-df51-4661-b2cd-b8ce3877d305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:3a:2b:a1:4a:96:00:c5:a6:6a:7e:2c:93:9f: 98:83:96:d4:12:ec:e2:83:24:c0:13:fe:9a:ea:49: ce:98:b8:0c:64:ee:c0:12:0c:bf:a5:d8:22:22:5c: cc:87:04:4d:6a:bf:79:87:c7:bc:5b:56:19:f0:f1: 3f:1b:ef:a0:8b:11:03:89:8c:c8:cc:aa:40:6b:61: da:83:a1:5a:4e:ce:26:94:c8:35:27:c6:04:17:5a: 89:d9:91:ce:e2:46:c4:70:1c:2d:94:65:43:94:45: 6f:a4:94:bb:4d:32:08:3a:96:1f:46:3f:28:1b:cd: 30:d3:ae:c6:9e:5f:ae:ed:d5:bb:04:ba:22:d5:d0: da:1f:27:53:eb:e2:d9:66:aa:b2:ff:71:32:06:a7: ca:34:07:f6:ce:5d:aa:dd:9e:80:3b:ed:8e:a8:39: fa:af:c6:fd:58:44:42:93:51:7d:a9:b8:20:ba:44: 38:d0:e3:4c:60:72:77:6d:d2:bf:aa:4f:b3:9a:89: 62:cb:29:2a:54:4f:cd:14:65:66:59:29:b9:cc:5a: 37:a7:af:dc:74:d8:fd:23:98:fb:71:42:22:e4:5d: ec:47:56:df:45:59:5a:8d:a8:d9:de:f1:87:69:0d: 68:9a:83:7f:1f:4e:b6:20:00:8f:d8:87:16:82:64: a0:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:F3:C3:B2:72:95:13:66:6D:E0:1E:B4:9B:39:FD:10:65:F7:90:9F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/e1870653-4e7c-3739-a64d-552d9abbacbd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.254.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:ea:af:58:be:e1:43:b3:b6:fe:94:84:df:b8:0d:c8:33:47: 16:f6:74:8f:2b:89:68:8e:5b:bb:a6:eb:50:be:c7:76:9e:94: 2a:40:bc:29:11:d1:ee:e9:c7:7a:f0:17:e8:60:3d:00:1c:d5: 37:4e:ad:8a:1e:31:03:b8:73:e8:fe:8b:e3:8c:f9:54:4c:77: 58:a3:09:24:d7:e4:b6:a1:6f:0f:79:6f:80:14:ec:f7:46:37: 3f:28:65:af:69:34:77:99:f6:29:37:06:77:8d:f1:c4:99:9c: f7:b6:2b:e2:f8:26:b1:0c:13:a2:86:f3:92:a9:f4:67:8f:72: 93:94:ad:e7:9b:3b:c7:3a:94:4e:c0:5f:7c:eb:b1:7e:e0:6b: ba:57:b1:df:c4:8d:71:ce:a5:2e:c2:5e:73:ac:35:17:70:0c: ca:1b:63:37:d0:83:78:00:cf:fd:71:aa:1e:49:5a:d5:47:09: a4:3e:f4:84:6f:21:1d:6c:c7:51:09:d3:ec:ec:1f:46:1e:06: 81:9d:5b:4a:f9:bf:8e:86:1e:de:53:de:eb:ac:1b:aa:c0:94: 9c:66:c8:ab:5d:4e:11:29:7c:f3:8d:9d:22:4d:e6:78:00:5a: 77:b1:4e:ee:c9:81:e3:dc:be:cc:ad:15:25:59:14:8b:ec:7c: 97:a6:e6:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiUpedT4SdFYSpFwuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI1MDExODAyMDAzOFoXDTI1MDQxODAxMDAzOFowLzEtMCsGA1UEAxMk NWU1ZDUxMTAtZGY1MS00NjYxLWIyY2QtYjhjZTM4NzdkMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzoroUqWAMWman4sk5+Yg5bUEuzigyTAE/6a 6knOmLgMZO7AEgy/pdgiIlzMhwRNar95h8e8W1YZ8PE/G++gixEDiYzIzKpAa2Ha g6FaTs4mlMg1J8YEF1qJ2ZHO4kbEcBwtlGVDlEVvpJS7TTIIOpYfRj8oG80w067G nl+u7dW7BLoi1dDaHydT6+LZZqqy/3EyBqfKNAf2zl2q3Z6AO+2OqDn6r8b9WERC k1F9qbggukQ40ONMYHJ3bdK/qk+zmoliyykqVE/NFGVmWSm5zFo3p6/cdNj9I5j7 cUIi5F3sR1bfRVlajajZ3vGHaQ1omoN/H062IACP2IcWgmSgEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHHzw7JylRNmbeAetJs5/RBl95CfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvZTE4NzA2NTMtNGU3Yy0z NzM5LWE2NGQtNTUyZDlhYmJhY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOL+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAETqr1i+4UOztv6UhN+4DcgzRxb2dI8riWiOW7um61C+x3aelCpAvCkR 0e7px3rwF+hgPQAc1TdOrYoeMQO4c+j+i+OM+VRMd1ijCSTX5Lahbw95b4AU7PdG Nz8oZa9pNHeZ9ik3BneN8cSZnPe2K+L4JrEME6KG85Kp9GePcpOUreebO8c6lE7A X3zrsX7ga7pXsd/EjXHOpS7CXnOsNRdwDMobYzfQg3gAz/1xqh5JWtVHCaQ+9IRv IR1sx1EJ0+zsH0YeBoGdW0r5v46GHt5T3uusG6rAlJxmyKtdThEpfPONnSJN5ngA WnexTu7JgePcvsytFSVZFIvsfJem5l4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:50:24 2025 by rpki-client