$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa File: a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa (raw, json) Hash identifier: GQwSbk/AHa20dv1keWPeLdATcXDC03G0V9FlyiKQCrM= Subject key identifier: 6C:2A:3B:BA:35:95:00:0C:EA:B3:28:57:75:A3:EA:4C:42:35:25:4E Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A04911834AF15B6777576580 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 136.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 19:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:11:83:4a:f1:5b:67:77:57:65:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=e5bf345c-695d-49b0-a1cd-e164082bf947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:43:4e:9c:a6:1d:25:fe:ed:76:b4:7d:7e:b7: 27:51:66:c4:12:f9:1c:f2:10:37:cf:e0:cc:c3:6f: f8:6f:d6:d9:61:55:f0:ff:2c:e0:ab:c1:17:37:b0: 6e:45:53:91:db:59:b4:60:11:6d:15:65:f2:1a:5a: 71:5c:54:70:59:49:f8:05:05:2f:0e:83:09:be:b5: a5:12:55:3b:82:a1:e8:3e:cf:5c:76:08:1a:bc:af: a0:55:cf:64:50:a8:c0:41:9f:62:82:c5:d3:4d:e1: 85:46:08:8d:94:48:ee:81:67:34:f0:9b:d0:54:03: d2:9a:cd:a3:8b:0e:9a:85:6c:6a:f8:ee:f4:2b:62: 33:99:14:c1:6f:35:93:89:fd:24:0d:44:10:d5:31: ba:71:42:aa:b9:08:30:08:15:1f:7e:28:2b:15:ca: fc:d5:63:27:eb:12:07:b6:44:43:08:ef:49:0e:dc: a1:4b:2e:ca:62:2c:a9:aa:bd:44:6b:50:ff:7c:cc: 62:37:cf:cd:81:20:08:73:f0:89:2e:5c:00:7b:18: 3b:c5:04:4b:af:fa:41:11:03:c3:f6:66:0d:15:81: 36:a0:6f:2e:12:e2:3b:07:01:3e:49:7f:6f:b6:94: 24:5d:31:53:3a:b4:70:71:03:cd:27:2b:34:13:44: 63:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:2A:3B:BA:35:95:00:0C:EA:B3:28:57:75:A3:EA:4C:42:35:25:4E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:41:74:96:b6:dd:58:d1:bf:61:a6:5d:d8:60:b2:0b:7e:b3: 8d:1e:d9:93:22:1a:8e:38:3f:b6:68:2d:8d:f1:e8:5e:ac:a3: 4b:76:26:09:ba:9e:84:c5:16:b0:47:37:db:06:95:06:4f:94: f4:4e:bc:3c:68:5f:5f:5c:72:c2:97:3f:89:57:d4:c4:5d:20: 66:8e:4a:bb:53:33:2b:4a:8b:28:de:9b:96:cd:04:76:a5:25: bb:cb:b6:48:32:c5:e3:7d:29:13:25:b4:f3:f8:7c:59:46:3c: e9:e0:6e:98:ca:00:14:38:78:fc:14:c3:74:48:3b:ff:c7:64: 5b:fc:a9:ff:3a:40:8b:3a:a8:4f:17:46:fe:35:19:f6:e7:ec: b7:96:be:9d:f4:74:78:e5:24:b9:02:d1:b9:63:1d:6d:29:33: 5e:7b:2a:8b:f5:86:6e:2b:f8:5c:61:fd:d6:96:8e:21:17:3f: 52:07:70:af:b8:7a:c6:8d:1c:d7:eb:b4:77:68:10:71:28:ec: e5:05:7f:12:f2:ad:c9:1f:39:fa:a2:bd:4f:5c:5b:c5:dd:35: a4:ab:e5:36:bf:27:77:c4:ba:47:a2:08:07:ab:9c:0a:d8:18: 8a:dd:cb:31:15:61:12:b8:31:fd:af:fc:59:dc:ef:f0:e1:f0: ca:0f:0c:8e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRGDSvFbZ3dXZYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk ZTViZjM0NWMtNjk1ZC00OWIwLWExY2QtZTE2NDA4MmJmOTQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4kNOnKYdJf7tdrR9frcnUWbEEvkc8hA3z+DM w2/4b9bZYVXw/yzgq8EXN7BuRVOR21m0YBFtFWXyGlpxXFRwWUn4BQUvDoMJvrWl ElU7gqHoPs9cdggavK+gVc9kUKjAQZ9igsXTTeGFRgiNlEjugWc08JvQVAPSms2j iw6ahWxq+O70K2IzmRTBbzWTif0kDUQQ1TG6cUKquQgwCBUffigrFcr81WMn6xIH tkRDCO9JDtyhSy7KYiypqr1Ea1D/fMxiN8/NgSAIc/CJLlwAexg7xQRLr/pBEQPD 9mYNFYE2oG8uEuI7BwE+SX9vtpQkXTFTOrRwcQPNJys0E0RjYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGwqO7o1lQAM6rMoV3Wj6kxCNSVOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTA4YjViMGYtMWUyNy0z YzllLTg4MjAtZWM3YjY0OWU1NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJBdJa23VjRv2GmXdhgsgt+s40e2ZMiGo44P7ZoLY3x6F6so0t2Jgm6 noTFFrBHN9sGlQZPlPROvDxoX19ccsKXP4lX1MRdIGaOSrtTMytKiyjem5bNBHal JbvLtkgyxeN9KRMltPP4fFlGPOngbpjKABQ4ePwUw3RIO//HZFv8qf86QIs6qE8X Rv41Gfbn7LeWvp30dHjlJLkC0bljHW0pM157Kov1hm4r+Fxh/daWjiEXP1IHcK+4 esaNHNfrtHdoEHEo7OUFfxLyrckfOfqivU9cW8XdNaSr5Ta/J3fEukeiCAernArY GIrdyzEVYRK4Mf2v/Fnc7/Dh8MoPDI4= -----END CERTIFICATE-----Generated at Sun Apr 6 04:34:58 2025 by rpki-client