$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/eab5f91e-6ddc-3a13-bca7-567be3fee80f.roa File: eab5f91e-6ddc-3a13-bca7-567be3fee80f.roa (raw, json) Hash identifier: kUfEbOHOe8vggiPuH0qaAGzolICO+ilD2THJfSEGNB0= Subject key identifier: 27:0E:9C:A4:F0:76:AA:85:1A:32:C3:C4:0B:90:D8:DE:76:BF:0E:A8 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285848A049129A78BBEE5A12F04F00 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/eab5f91e-6ddc-3a13-bca7-567be3fee80f.roa Signing time: Wed 22 Jan 2025 06:03:27 +0000 ROA not before: Wed 22 Jan 2025 06:03:27 +0000 ROA not after: Tue 22 Apr 2025 05:03:27 +0000 asID: 19165 IP address blocks: 136.29.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a0:49:12:9a:78:bb:ee:5a:12:f0:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Jan 22 06:03:27 2025 GMT Not After : Apr 22 05:03:27 2025 GMT Subject: CN=76360f9a-8d37-4ad2-a632-7382b5f83876 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:5c:ac:0e:86:41:99:92:ec:29:4f:d9:77:d8: 82:c1:91:c8:79:a3:c2:4f:43:73:cb:c7:3b:9e:0b: fd:8e:27:bb:c5:b9:cb:ec:fd:c8:da:58:3d:a1:3f: 92:c1:28:b6:bb:9f:f1:56:8d:07:59:de:21:8e:2f: 40:6f:96:a9:8d:dc:f4:e2:69:4f:17:de:bc:74:8c: 7f:00:57:b0:a7:4c:b1:0f:5b:62:07:fa:7c:17:d4: f3:77:ca:60:f0:d3:aa:05:c2:7f:e6:4c:fe:62:d8: 5e:28:02:fa:1b:7c:10:6e:ce:05:26:86:15:3e:cd: 3c:3a:a8:c3:34:15:0e:94:a0:8f:f4:4a:78:78:9c: 17:64:2c:31:1a:93:1b:6e:8a:aa:5c:5b:2d:5d:ef: 4a:85:92:b3:e3:f3:bd:0b:74:2d:a5:0d:c7:34:1a: 3e:15:2c:90:7a:16:7c:de:9e:09:05:1c:2f:0a:43: d1:4a:61:06:72:20:3e:80:2d:98:6e:69:9a:9b:87: 2f:5e:1d:cd:00:e5:7e:77:7e:4b:80:ca:ca:5e:91: e6:8e:d5:1d:16:bb:db:33:f2:a1:d6:61:57:36:af: 4a:55:cf:9d:d6:9e:a4:2c:40:d2:f5:29:0c:79:32: 18:11:e1:78:33:ae:96:57:6f:1a:b8:bf:2e:8a:69: 1f:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:0E:9C:A4:F0:76:AA:85:1A:32:C3:C4:0B:90:D8:DE:76:BF:0E:A8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/eab5f91e-6ddc-3a13-bca7-567be3fee80f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:db:a9:8f:98:ce:67:51:06:24:bf:2f:c0:49:46:9b:fd:16: d3:29:51:df:4b:c8:69:aa:96:e5:6c:cf:8b:9e:58:0c:0f:19: 53:90:be:0a:5f:d8:a9:65:b2:cd:04:4a:b4:51:6b:70:18:f3: 13:e1:12:38:3b:bb:7f:09:f5:d6:76:2f:b4:ae:b1:57:fc:fc: 54:d6:01:82:40:46:ff:69:4c:56:73:a3:8e:c1:00:69:56:de: 83:cd:69:4e:78:ee:de:f9:2a:e3:69:98:e6:65:3b:c8:ec:42: 65:35:b7:48:c2:2a:f7:cc:c2:c5:23:f3:ec:72:c6:02:ad:eb: 77:5c:44:5a:4c:8c:0d:7c:7c:ce:b2:0d:5d:11:25:c3:b8:00: a9:a7:45:35:46:da:2f:3d:1a:ce:b4:8f:d7:7d:a4:75:3d:42: e8:c1:ea:42:94:0a:94:68:ec:14:26:8d:ec:c6:45:13:cb:81: 8e:29:cd:52:ac:02:9b:a4:85:93:a8:cc:69:ae:d3:13:e7:34: d0:b3:70:7a:f7:59:5a:71:2b:6f:65:de:5f:22:8c:d1:13:1c: d5:18:f1:78:6a:dd:52:b9:53:5f:70:b9:12:f5:36:ce:63:c7: cb:c2:29:b4:ea:ab:17:58:8f:81:43:81:f9:6c:4f:d6:90:60: a8:c2:4e:ef -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEigSRKaeLvuWhLwTwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk NzYzNjBmOWEtOGQzNy00YWQyLWE2MzItNzM4MmI1ZjgzODc2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllysDoZBmZLsKU/Zd9iCwZHIeaPCT0Nzy8c7 ngv9jie7xbnL7P3I2lg9oT+SwSi2u5/xVo0HWd4hji9Ab5apjdz04mlPF968dIx/ AFewp0yxD1tiB/p8F9Tzd8pg8NOqBcJ/5kz+YtheKAL6G3wQbs4FJoYVPs08OqjD NBUOlKCP9Ep4eJwXZCwxGpMbboqqXFstXe9KhZKz4/O9C3QtpQ3HNBo+FSyQehZ8 3p4JBRwvCkPRSmEGciA+gC2Ybmmam4cvXh3NAOV+d35LgMrKXpHmjtUdFrvbM/Kh 1mFXNq9KVc+d1p6kLEDS9SkMeTIYEeF4M66WV28auL8uimkfbQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcOnKTwdqqFGjLDxAuQ2N52vw6oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZWFiNWY5MWUtNmRkYy0z YTEzLWJjYTctNTY3YmUzZmVlODBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFbbqY+YzmdRBiS/L8BJRpv9FtMpUd9LyGmqluVsz4ueWAwPGVOQvgpf 2Kllss0ESrRRa3AY8xPhEjg7u38J9dZ2L7SusVf8/FTWAYJARv9pTFZzo47BAGlW 3oPNaU547t75KuNpmOZlO8jsQmU1t0jCKvfMwsUj8+xyxgKt63dcRFpMjA18fM6y DV0RJcO4AKmnRTVG2i89Gs60j9d9pHU9QujB6kKUCpRo7BQmjezGRRPLgY4pzVKs ApukhZOozGmu0xPnNNCzcHr3WVpxK29l3l8ijNETHNUY8Xhq3VK5U19wuRL1Ns5j x8vCKbTqqxdYj4FDgflsT9aQYKjCTu8= -----END CERTIFICATE-----Generated at Sun Apr 6 00:01:51 2025 by rpki-client