$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa File: 58f97502-a21c-3db1-8649-e4de440334ed.roa (raw, json) Hash identifier: LD9vk0lXa1wxEnCIYJd8NAsPKzfLI6T+0Q3sqZE8rhY= Subject key identifier: 2E:40:EF:F4:E0:08:DE:67:27:26:29:8E:96:20:A7:24:3B:36:86:50 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A049121CB0A1303321394F80 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 136.28.0.0/17 maxlen: 17 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:12:1c:b0:a1:30:33:21:39:4f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=ef46f48f-d7a5-4ff2-bed4-f79276ec4dcd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:a5:7d:2c:50:e6:4e:52:02:6c:d5:2d:4c:eb: 27:d8:fc:4a:0e:78:dd:8a:dd:a1:92:55:6a:88:c6: d6:38:e1:56:e0:60:cd:50:cd:ea:fb:a5:12:bb:6f: 72:a8:f2:3a:11:6d:6a:51:b8:da:2c:14:09:e8:25: e5:03:09:78:a7:da:af:4c:2a:b5:d1:f6:bb:0c:83: a7:76:7d:e9:6e:c1:d2:1e:63:98:dd:1f:1b:33:cf: af:f5:9a:6f:8a:90:98:45:cc:fa:90:4d:2c:76:55: f7:b1:45:33:48:f3:3c:76:d9:40:11:98:d1:51:23: 0f:8a:cc:a2:69:dc:d1:48:42:27:5a:ed:d8:85:44: 24:c4:7f:a7:2a:e4:bf:b4:c7:48:ce:ab:7c:56:ec: 6e:8a:de:c4:2e:a9:64:14:69:d0:af:73:67:25:60: 71:b4:df:29:fa:9b:e3:a3:b2:01:87:1a:18:ec:50: b4:49:9a:87:3c:ed:72:d8:ea:2d:d3:1b:8d:91:1e: f1:34:b9:81:e7:c5:32:3a:25:01:4a:a7:69:0a:3e: ff:44:8d:8a:19:67:ea:ec:5f:2e:e6:2f:46:68:f2: b2:fc:a1:cc:ff:83:1f:05:d8:ef:bf:25:23:60:a9: bd:d7:f9:f4:95:ee:1c:70:90:81:75:00:7f:cf:b2: 1d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:40:EF:F4:E0:08:DE:67:27:26:29:8E:96:20:A7:24:3B:36:86:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/58f97502-a21c-3db1-8649-e4de440334ed.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.28.0.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:76:ee:d8:0d:b2:bb:ec:d7:a3:bf:2a:aa:ad:4e:91:45:cf: 0f:0c:de:bb:56:1f:67:29:f4:f2:1b:fa:f8:d8:65:e7:00:5a: a1:9d:13:d1:6c:ab:4a:90:d9:95:7c:e1:d0:c1:d6:bd:4f:02: cd:27:f1:03:00:13:b8:a1:05:83:bb:29:fd:fc:c7:30:9b:d2: a6:5f:39:f4:96:db:00:22:06:9b:75:06:bb:2a:73:68:6d:5d: d4:9b:32:46:0b:66:0f:75:74:a9:4e:d1:08:d8:36:51:34:c7: dc:55:d5:c2:d3:29:99:4f:3d:46:14:c7:1c:f5:09:71:ba:be: 6a:f8:e4:dc:be:ef:f2:70:f8:1a:eb:2f:1c:84:70:bb:9e:8b: e4:a5:6c:ad:75:f9:9e:44:bc:b3:ab:cf:8d:08:6d:b8:cb:bd: 15:37:b8:fc:c5:95:27:73:95:58:71:60:f5:63:72:c0:5c:6b: 29:47:b0:6f:52:72:3e:4c:f3:9d:da:c7:25:cb:d5:a0:c7:ba: 91:6b:72:3c:f9:09:7d:63:4e:9a:b3:90:94:0b:ef:65:af:e7: c0:65:76:3b:35:45:98:d8:c4:1b:fb:be:5c:95:cf:38:e1:52: 43:cd:fe:33:10:4b:ea:98:12:5d:5b:f8:ec:c6:66:03:c3:3a: 31:bd:43:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRIcsKEwMyE5T4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk ZWY0NmY0OGYtZDdhNS00ZmYyLWJlZDQtZjc5Mjc2ZWM0ZGNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA36V9LFDmTlICbNUtTOsn2PxKDnjdit2hklVq iMbWOOFW4GDNUM3q+6USu29yqPI6EW1qUbjaLBQJ6CXlAwl4p9qvTCq10fa7DIOn dn3pbsHSHmOY3R8bM8+v9ZpvipCYRcz6kE0sdlX3sUUzSPM8dtlAEZjRUSMPisyi adzRSEInWu3YhUQkxH+nKuS/tMdIzqt8Vuxuit7ELqlkFGnQr3NnJWBxtN8p+pvj o7IBhxoY7FC0SZqHPO1y2Oot0xuNkR7xNLmB58UyOiUBSqdpCj7/RI2KGWfq7F8u 5i9GaPKy/KHM/4MfBdjvvyUjYKm91/n0le4ccJCBdQB/z7IdEwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC5A7/TgCN5nJyYpjpYgpyQ7NoZQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvNThmOTc1MDItYTIxYy0z ZGIxLTg2NDktZTRkZTQ0MDMzNGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHiBwAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACd27tgNsrvs16O/KqqtTpFFzw8M3rtWH2cp9PIb+vjYZecAWqGdE9Fs q0qQ2ZV84dDB1r1PAs0n8QMAE7ihBYO7Kf38xzCb0qZfOfSW2wAiBpt1Brsqc2ht XdSbMkYLZg91dKlO0QjYNlE0x9xV1cLTKZlPPUYUxxz1CXG6vmr45Ny+7/Jw+Brr LxyEcLuei+SlbK11+Z5EvLOrz40IbbjLvRU3uPzFlSdzlVhxYPVjcsBcaylHsG9S cj5M853axyXL1aDHupFrcjz5CX1jTpqzkJQL72Wv58Bldjs1RZjYxBv7vlyVzzjh UkPN/jMQS+qYEl1b+OzGZgPDOjG9Qww= -----END CERTIFICATE-----Generated at Sun Apr 6 07:33:49 2025 by rpki-client