$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa File: 25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa (raw, json) Hash identifier: +TtdcdtodPBe0vxQstkAXgJHUQQrEPltzlw8NEwUNV8= Subject key identifier: 29:AA:F9:D6:A7:9B:B6:73:2E:A6:2C:FC:91:AD:DF:7A:B3:9B:D5:67 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A049126B50E73BA9E7E33680 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 136.25.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:12:6b:50:e7:3b:a9:e7:e3:36:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=8a6f952a-dc65-4279-a5ad-123d3adafad8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e8:fc:5d:e2:6c:d8:d4:a6:c6:64:1d:b1:ab: f8:84:35:d0:9c:71:d5:29:d7:16:e4:6a:2b:98:74: c1:7f:08:ba:7e:0a:03:78:69:49:0f:56:09:5d:74: 77:4a:48:58:5f:4f:b6:3e:6b:6e:89:8e:23:ac:ac: c4:8c:64:22:a2:6c:39:1b:ea:3f:f2:4c:aa:da:57: ac:51:db:59:9c:39:81:0d:c7:f3:be:a7:7a:ea:98: cc:6f:a6:45:24:27:d3:a4:f2:09:7b:a8:2e:2e:28: 56:74:aa:91:dd:9c:69:c6:90:3e:fb:e2:3b:ae:e9: e6:6b:63:76:d2:7d:06:6c:0d:e8:3a:65:ce:9a:b6: 58:6d:a9:c8:a9:23:43:6a:11:8a:ee:c6:da:dd:a9: 78:b9:9e:49:79:2f:6a:87:7d:4a:3b:fc:e7:2c:f0: a2:65:78:0e:f7:6f:43:ff:ea:e8:d7:89:d2:20:c6: 31:fa:08:95:12:5f:20:d5:57:9b:ed:25:66:6b:4c: eb:2a:da:f0:e1:c5:1c:67:0c:10:3c:c8:4a:58:60: 8a:a9:bf:a5:22:76:f1:7c:7a:69:49:89:ff:fc:fc: 7f:5a:58:23:cc:c8:f4:e5:03:28:d3:3d:85:62:93: 5b:76:fd:b0:23:fe:47:57:23:79:4e:05:6e:ce:47: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:AA:F9:D6:A7:9B:B6:73:2E:A6:2C:FC:91:AD:DF:7A:B3:9B:D5:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/25a4fcc8-45f6-3fa3-9f60-a99c0c7a1e59.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.25.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 08:9b:8c:4e:9e:c9:77:6d:ec:2f:e9:48:cd:0a:6b:76:bc:f9: d8:61:83:b1:66:42:99:05:31:3d:ad:0a:08:4c:9e:a9:21:65: 00:95:79:2e:d4:3e:db:68:eb:54:9e:73:57:0f:2b:ee:66:a7: 1c:56:24:bf:d5:e8:45:b7:20:5e:69:71:aa:da:a4:ef:43:eb: 9a:8a:63:35:4f:b1:f0:86:c0:c2:c2:ee:d2:03:5a:02:4e:61: 93:40:52:d4:93:76:2c:1c:8f:ea:9b:76:1b:29:77:5c:71:a9: a6:aa:da:f9:b9:19:d2:c3:e8:0e:7a:3e:aa:5f:51:97:7f:d1: 86:54:a1:7e:03:1c:25:dd:2f:8d:c4:f5:7c:74:04:e6:1c:f6: 59:48:e4:d6:c3:c8:05:c1:a1:df:5a:58:b4:49:ff:7d:27:eb: da:e8:e0:75:3d:55:4c:6c:67:d2:0c:73:c3:e4:c2:35:1b:b3: 17:a5:c4:b7:8a:b4:e4:3d:9f:16:6d:c9:af:fc:44:d8:48:81: a8:33:fd:fb:2b:d8:63:24:bb:cd:cc:d7:9d:64:43:27:ef:a7: d1:e9:c5:ce:58:dc:41:e0:22:20:04:45:6c:f9:10:fd:bd:5c: 01:8c:9a:82:3f:38:c4:ca:d7:3c:75:ef:5d:ad:18:3d:0a:02: c6:72:ae:27 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRJrUOc7qefjNoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk OGE2Zjk1MmEtZGM2NS00Mjc5LWE1YWQtMTIzZDNhZGFmYWQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOj8XeJs2NSmxmQdsav4hDXQnHHVKdcW5Gor mHTBfwi6fgoDeGlJD1YJXXR3SkhYX0+2PmtuiY4jrKzEjGQiomw5G+o/8kyq2les UdtZnDmBDcfzvqd66pjMb6ZFJCfTpPIJe6guLihWdKqR3ZxpxpA+++I7runma2N2 0n0GbA3oOmXOmrZYbanIqSNDahGK7sba3al4uZ5JeS9qh31KO/znLPCiZXgO929D /+ro14nSIMYx+giVEl8g1Veb7SVma0zrKtrw4cUcZwwQPMhKWGCKqb+lInbxfHpp SYn//Px/WlgjzMj05QMo0z2FYpNbdv2wI/5HVyN5TgVuzkdxBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCmq+danm7ZzLqYs/JGt33qzm9VnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvMjVhNGZjYzgtNDVmNi0z ZmEzLTlmNjAtYTk5YzBjN2ExZTU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiBkAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAibjE6eyXdt7C/pSM0Ka3a8+dhhg7FmQpkFMT2tCghMnqkhZQCVeS7U Ptto61Sec1cPK+5mpxxWJL/V6EW3IF5pcarapO9D65qKYzVPsfCGwMLC7tIDWgJO YZNAUtSTdiwcj+qbdhspd1xxqaaq2vm5GdLD6A56PqpfUZd/0YZUoX4DHCXdL43E 9Xx0BOYc9llI5NbDyAXBod9aWLRJ/30n69ro4HU9VUxsZ9IMc8PkwjUbsxelxLeK tOQ9nxZtya/8RNhIgagz/fsr2GMku83M151kQyfvp9Hpxc5Y3EHgIiAERWz5EP29 XAGMmoI/OMTK1zx1712tGD0KAsZyric= -----END CERTIFICATE-----Generated at Sun Apr 6 04:37:46 2025 by rpki-client