$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa File: 085e16ec-a34a-3992-a9ad-40ea74d17c35.roa (raw, json) Hash identifier: wErANlHzzH3dpSXhoKN8FxqFEST3rOOMfAj1S1eNpBU= Subject key identifier: 11:C4:66:3E:1F:3D:3F:CD:0E:28:5A:48:8B:60:17:BE:4F:4D:FF:14 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AB1549E5D84D90383C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.38.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ab:15:49:e5:d8:4d:90:38:3c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=382dfe3a-0bba-4150-bba8-763d718f7384 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:88:bb:50:bb:d3:43:8c:b6:8c:09:77:43:e7: 35:51:70:33:8e:d6:56:24:38:9d:e4:fb:b6:f3:25: ba:09:9d:3c:08:50:4e:f4:69:35:93:fd:c8:53:be: 6c:7f:49:21:78:53:52:3a:90:a4:16:8c:e2:64:ac: aa:2b:d9:ab:8e:3d:c7:e5:f0:1f:00:4c:e5:5d:3e: 97:9e:6e:22:ad:d1:9c:90:e0:f4:f9:3b:b8:90:92: b8:a3:27:8c:2b:a6:97:f6:8e:69:d9:31:3b:8e:76: d0:3d:68:7e:e9:d4:53:23:45:98:4b:93:27:8e:ab: 72:a8:e7:00:3a:39:35:84:7c:ff:62:6d:ce:46:10: 97:53:3e:a5:02:41:77:dc:c8:59:e6:20:07:48:76: 55:32:30:8e:5b:aa:c0:51:01:b9:6e:fa:56:ac:a5: da:d6:2a:81:06:98:47:31:b8:d5:65:e6:2e:fb:77: 00:d0:18:95:a2:10:2d:06:eb:0e:02:68:9d:ca:40: 3d:69:59:36:b3:3d:25:d0:64:47:3c:44:29:38:1d: 17:c5:c9:a4:2d:b2:38:97:c2:88:00:48:72:7a:d5: 64:fc:3c:16:23:44:ed:c7:78:55:24:39:de:6c:e2: 92:c9:54:aa:b6:e5:21:88:45:17:54:b5:a3:ba:4d: fa:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C4:66:3E:1F:3D:3F:CD:0E:28:5A:48:8B:60:17:BE:4F:4D:FF:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/085e16ec-a34a-3992-a9ad-40ea74d17c35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 41:2c:a0:47:c6:a4:cd:51:02:11:e7:89:38:3a:b0:24:05:cc: 8a:9f:ed:6b:4a:ce:c5:42:d9:66:61:d3:c5:a1:55:38:eb:52: 9a:c2:41:85:f9:f9:24:16:33:7c:09:77:81:2b:28:93:57:79: 7f:fb:9d:1b:bf:aa:70:8a:d8:05:89:32:c4:7b:59:21:32:95: 26:94:f9:55:b8:23:8d:c8:8c:5e:25:9d:ae:1f:8d:fc:29:9f: aa:e8:bf:47:88:fa:cd:08:4a:95:97:45:cb:e1:d7:37:a2:51: 8f:c9:48:60:c1:72:fd:eb:09:2f:0f:5d:8c:14:e4:99:a6:ff: 1a:b1:b7:41:9d:7d:d2:92:cc:55:26:17:10:87:a3:0c:f8:49: c6:4c:54:0b:4a:46:05:dd:9f:8c:14:6b:24:d0:df:40:32:7e: df:5b:6a:3f:0d:18:c3:5e:d6:33:b1:56:43:cf:82:57:a0:a0: 86:dc:ea:fc:3b:9c:2c:f2:eb:a2:4e:c2:4a:e1:91:1f:61:8f: 89:58:2f:16:29:45:f7:51:cb:90:db:5e:23:61:67:61:82:ff: 85:bd:2c:1f:5e:8d:c0:35:17:86:b1:f6:f8:ad:da:c6:1c:2d: 28:3b:d6:76:ab:3d:d0:5f:f6:fd:dd:ae:95:dc:f3:41:2e:e7: 9f:6f:c4:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKsVSeXYTZA4PAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk MzgyZGZlM2EtMGJiYS00MTUwLWJiYTgtNzYzZDcxOGY3Mzg0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmoi7ULvTQ4y2jAl3Q+c1UXAzjtZWJDid5Pu2 8yW6CZ08CFBO9Gk1k/3IU75sf0kheFNSOpCkFoziZKyqK9mrjj3H5fAfAEzlXT6X nm4irdGckOD0+Tu4kJK4oyeMK6aX9o5p2TE7jnbQPWh+6dRTI0WYS5MnjqtyqOcA Ojk1hHz/Ym3ORhCXUz6lAkF33MhZ5iAHSHZVMjCOW6rAUQG5bvpWrKXa1iqBBphH MbjVZeYu+3cA0BiVohAtBusOAmidykA9aVk2sz0l0GRHPEQpOB0XxcmkLbI4l8KI AEhyetVk/DwWI0Ttx3hVJDnebOKSyVSqtuUhiEUXVLWjuk36FQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBHEZj4fPT/NDihaSItgF75PTf8UMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDg1ZTE2ZWMtYTM0YS0z OTkyLWE5YWQtNDBlYTc0ZDE3YzM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCbAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEEsoEfGpM1RAhHniTg6sCQFzIqf7WtKzsVC2WZh08WhVTjrUprCQYX5 +SQWM3wJd4ErKJNXeX/7nRu/qnCK2AWJMsR7WSEylSaU+VW4I43IjF4lna4fjfwp n6rov0eI+s0ISpWXRcvh1zeiUY/JSGDBcv3rCS8PXYwU5Jmm/xqxt0GdfdKSzFUm FxCHowz4ScZMVAtKRgXdn4wUayTQ30Ayft9baj8NGMNe1jOxVkPPglegoIbc6vw7 nCzy66JOwkrhkR9hj4lYLxYpRfdRy5DbXiNhZ2GC/4W9LB9ejcA1F4ax9vit2sYc LSg71narPdBf9v3drpXc80Eu559vxKs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:47 2025 by rpki-client