$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa File: 7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa (raw, json) Hash identifier: w0Ykj2CaakzFjJZLzkHGwe3YawJFfKfR/tz4Nk37NTA= Subject key identifier: 74:03:D1:C2:A1:4A:35:B5:6C:6F:56:C6:01:46:B4:73:66:45:CE:42 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A04912FB80785F8FFA8EF200 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa Signing time: Wed 22 Jan 2025 06:03:28 +0000 ROA not before: Wed 22 Jan 2025 06:03:28 +0000 ROA not after: Tue 22 Apr 2025 05:03:28 +0000 asID: 19165 IP address blocks: 136.31.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:12:fb:80:78:5f:8f:fa:8e:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:28 2025 GMT Not After : Apr 22 05:03:28 2025 GMT Subject: CN=5d8f3952-5f87-4a0c-b702-ce629c5e7bc6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ae:d7:c3:90:95:1d:cf:0f:fc:e4:bc:1b:24: c3:d3:84:39:c9:be:d2:db:bb:8c:92:a9:8e:88:8b: 70:ff:4b:b0:90:c7:e3:bf:1f:a3:41:af:ff:13:cb: 81:41:44:0c:e2:fd:e0:8b:9d:2a:31:52:50:7b:8f: 6b:d4:22:41:1e:a1:5c:f7:76:87:ae:f8:2f:a4:5a: cc:e2:fc:48:6a:b8:fe:4f:d3:ea:88:55:60:0e:b9: ba:32:ad:01:99:74:8b:f8:d7:0d:34:3d:da:76:da: 19:55:ac:f2:55:90:7f:96:38:45:e1:11:5c:90:a6: 7e:56:78:86:ac:91:10:fa:ec:c7:a6:ad:0b:7e:57: 0c:75:a9:d4:12:81:da:a7:4d:23:02:93:ac:b4:9b: 77:4a:5c:cc:75:76:0e:73:60:ac:32:2b:38:da:35: f8:5b:8e:03:01:53:95:f2:79:14:ee:ce:a9:e9:2d: 11:8a:9a:97:c9:11:e3:44:b7:1d:91:a4:4f:e3:03: 0d:53:fd:49:4e:fe:e4:63:56:d4:b5:c9:ec:05:8d: d2:c6:29:2a:2c:32:2c:69:a5:9d:75:30:ee:7b:50: 0c:1c:9c:51:ac:df:29:08:82:68:c5:a8:3a:fd:4f: f1:8f:44:3b:8b:a5:62:bb:7e:ce:20:6e:4f:f4:75: df:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:03:D1:C2:A1:4A:35:B5:6C:6F:56:C6:01:46:B4:73:66:45:CE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.31.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:6f:50:4c:df:87:2e:21:e1:44:42:04:ca:bf:0d:a5:68:74: 7b:ae:5b:0d:f4:39:bd:52:24:f7:76:35:21:92:aa:a0:61:f5: 13:4f:ea:88:c3:e0:cc:9d:4b:39:e1:56:d7:b2:e2:e3:e0:37: 1c:11:fb:85:a3:7d:19:a8:1f:0b:30:83:16:26:00:d6:07:76: 84:82:0f:84:a8:5f:aa:a3:f3:e2:04:0f:42:b2:09:b1:4a:6b: 23:b2:cd:5e:1c:4a:d4:96:de:4a:a6:3f:c4:87:05:d6:f0:6a: 3b:d6:93:8c:07:88:59:24:61:28:41:a7:35:64:b4:d3:46:f9: 96:0c:e0:d1:43:ed:ff:e8:de:00:b9:75:5b:97:bd:2d:df:45: c2:93:28:c0:2f:81:6c:65:1a:59:dc:32:f6:20:c6:02:20:a3: 2d:a0:82:9e:32:66:10:57:69:17:5e:2e:dd:73:5b:87:5a:47: 48:b1:df:b7:22:f3:f1:6a:52:6d:25:31:ca:80:e5:6d:73:d8: ac:3d:84:a1:a9:d2:5a:47:3b:8c:06:78:65:59:70:ac:ca:48: 13:0b:b2:b9:c5:90:ae:ef:90:f8:66:b3:ef:15:81:b3:32:d5: d0:d3:87:02:e4:12:5f:94:af:28:79:96:63:04:31:db:f4:94: b5:02:53:77 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRL7gHhfj/qO8gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyOFoXDTI1MDQyMjA1MDMyOFowLzEtMCsGA1UEAxMk NWQ4ZjM5NTItNWY4Ny00YTBjLWI3MDItY2U2MjljNWU3YmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu67Xw5CVHc8P/OS8GyTD04Q5yb7S27uMkqmO iItw/0uwkMfjvx+jQa//E8uBQUQM4v3gi50qMVJQe49r1CJBHqFc93aHrvgvpFrM 4vxIarj+T9PqiFVgDrm6Mq0BmXSL+NcNND3adtoZVazyVZB/ljhF4RFckKZ+VniG rJEQ+uzHpq0LflcMdanUEoHap00jApOstJt3SlzMdXYOc2CsMis42jX4W44DAVOV 8nkU7s6p6S0RipqXyRHjRLcdkaRP4wMNU/1JTv7kY1bUtcnsBY3SxikqLDIsaaWd dTDue1AMHJxRrN8pCIJoxag6/U/xj0Q7i6Viu37OIG5P9HXfPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQD0cKhSjW1bG9WxgFGtHNmRc5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvN2FiYjYxOTYtODJiNy0z ZGUyLWE5NmItZmQyOTU1ZjRjOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdvUEzfhy4h4URCBMq/DaVodHuuWw30Ob1SJPd2NSGSqqBh9RNP6ojD 4MydSznhVtey4uPgNxwR+4WjfRmoHwswgxYmANYHdoSCD4SoX6qj8+IED0KyCbFK ayOyzV4cStSW3kqmP8SHBdbwajvWk4wHiFkkYShBpzVktNNG+ZYM4NFD7f/o3gC5 dVuXvS3fRcKTKMAvgWxlGlncMvYgxgIgoy2ggp4yZhBXaRdeLt1zW4daR0ix37ci 8/FqUm0lMcqA5W1z2Kw9hKGp0lpHO4wGeGVZcKzKSBMLsrnFkK7vkPhms+8VgbMy 1dDThwLkEl+Uryh5lmMEMdv0lLUCU3c= -----END CERTIFICATE-----Generated at Sun Apr 6 00:05:03 2025 by rpki-client