$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa File: 10d54c49-a46a-3efd-983d-b040d3861287.roa (raw, json) Hash identifier: cZS55K5I55LWHgevlcXjJ3kPH5OTjuGXQRVtWekJnPg= Subject key identifier: E4:5E:5B:B0:FB:16:BC:97:E5:9B:39:79:EC:95:0F:DE:2A:0C:CC:50 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318B0D4067C413A1CE70800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa Signing time: Thu 23 Jan 2025 06:13:24 +0000 ROA not before: Thu 23 Jan 2025 06:13:24 +0000 ROA not after: Wed 23 Apr 2025 05:13:24 +0000 asID: 16591 IP address blocks: 136.36.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:b0:d4:06:7c:41:3a:1c:e7:08:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:24 2025 GMT Not After : Apr 23 05:13:24 2025 GMT Subject: CN=7812f3ee-24a5-4c52-bd28-f22c13a89648 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:ad:23:4b:9c:69:f1:3b:11:38:d7:46:41:9d: 5f:22:b7:93:4e:b4:5b:96:61:1e:cc:2b:16:03:6c: 81:d0:49:57:ba:ea:9b:a3:ac:d4:35:be:02:18:5c: f6:d7:b7:03:42:46:ed:4d:c1:19:3c:9d:6b:ff:ff: be:47:1a:7b:b3:31:d8:cf:fe:64:e2:ee:71:74:e0: 29:82:1f:03:14:03:28:e8:f4:19:7b:69:0c:5a:f2: e5:1f:18:ea:8d:c4:e7:29:0b:b5:d8:e1:47:b9:e4: 75:88:10:e3:8e:8d:b6:1f:39:ca:6b:68:26:72:30: bd:f6:51:d5:86:18:05:a1:65:13:4a:59:86:af:8b: 9d:05:34:ad:b5:7d:b8:d0:e1:74:34:31:77:9f:62: a3:4d:a4:f4:fd:e3:9f:17:87:dd:d0:43:a0:20:07: 2a:db:f3:f6:a8:91:eb:ba:28:32:cf:a1:3e:f6:20: 24:06:e1:99:4b:f5:77:ab:f6:5f:f2:a8:b5:65:dd: 27:04:12:8f:b0:15:b7:99:7b:6d:c0:c5:a4:aa:ca: 50:b0:c4:b2:1c:fd:8e:bf:3b:45:c3:7a:43:e7:0a: 3c:83:bd:5c:d8:f4:e4:51:f8:03:fd:85:9f:c4:da: 10:e7:69:93:f9:db:f2:31:6f:8d:9b:4f:83:f9:8c: 96:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:5E:5B:B0:FB:16:BC:97:E5:9B:39:79:EC:95:0F:DE:2A:0C:CC:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/10d54c49-a46a-3efd-983d-b040d3861287.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:e5:a4:38:9b:63:ea:f4:01:a8:b1:5d:81:30:00:af:4e:80: cb:55:05:38:ae:bc:58:11:2e:fc:89:f3:7c:f2:cf:df:9e:13: 79:aa:f2:d1:3e:80:ef:78:a5:4c:3c:be:ba:a9:1c:64:08:d1: f8:6a:9c:a0:57:84:4e:bb:f6:15:c8:c2:74:f2:e8:87:b9:12: b7:26:70:69:31:af:ee:86:d4:59:d4:dc:6d:27:ce:90:32:3a: b0:69:0b:ae:13:d1:cb:1c:7b:e1:df:e8:52:22:70:c4:bb:95: c2:56:e1:9b:f4:1e:3b:54:e1:cb:f6:95:f4:fe:f4:a0:5c:05: 83:77:19:88:8b:5d:77:07:83:0b:f5:97:a4:53:aa:fe:52:d0: e1:35:0e:d8:68:ff:9d:2f:24:72:b7:65:fc:d4:3d:a8:5b:d9: 1a:6d:8a:8e:fb:af:70:0c:53:18:12:50:44:b7:9f:5c:81:9d: dc:91:84:ed:b0:04:27:17:42:e5:eb:e3:17:3f:65:1b:b8:33: b3:51:d6:5e:4c:3b:89:25:31:4f:f1:fc:a2:b1:48:9f:36:a8: 97:f5:15:c2:46:3b:01:47:50:83:70:dc:b9:67:cb:6f:fe:60: 5f:76:a2:3b:5a:9c:96:ef:cf:44:ef:6e:19:9f:7f:89:b8:ee: 56:b3:55:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGLDUBnxBOhznCAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyNFoXDTI1MDQyMzA1MTMyNFowLzEtMCsGA1UEAxMk NzgxMmYzZWUtMjRhNS00YzUyLWJkMjgtZjIyYzEzYTg5NjQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA560jS5xp8TsRONdGQZ1fIreTTrRblmEezCsW A2yB0ElXuuqbo6zUNb4CGFz217cDQkbtTcEZPJ1r//++Rxp7szHYz/5k4u5xdOAp gh8DFAMo6PQZe2kMWvLlHxjqjcTnKQu12OFHueR1iBDjjo22HznKa2gmcjC99lHV hhgFoWUTSlmGr4udBTSttX240OF0NDF3n2KjTaT0/eOfF4fd0EOgIAcq2/P2qJHr uigyz6E+9iAkBuGZS/V3q/Zf8qi1Zd0nBBKPsBW3mXttwMWkqspQsMSyHP2OvztF w3pD5wo8g71c2PTkUfgD/YWfxNoQ52mT+dvyMW+Nm0+D+YyWwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOReW7D7FryX5Zs5eeyVD94qDMxQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTBkNTRjNDktYTQ2YS0z ZWZkLTk4M2QtYjA0MGQzODYxMjg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCRQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEflpDibY+r0AaixXYEwAK9OgMtVBTiuvFgRLvyJ83zyz9+eE3mq8tE+ gO94pUw8vrqpHGQI0fhqnKBXhE679hXIwnTy6Ie5ErcmcGkxr+6G1FnU3G0nzpAy OrBpC64T0csce+Hf6FIicMS7lcJW4Zv0HjtU4cv2lfT+9KBcBYN3GYiLXXcHgwv1 l6RTqv5S0OE1Dtho/50vJHK3ZfzUPahb2Rptio77r3AMUxgSUES3n1yBndyRhO2w BCcXQuXr4xc/ZRu4M7NR1l5MO4klMU/x/KKxSJ82qJf1FcJGOwFHUINw3Llny2/+ YF92ojtanJbvz0Tvbhmff4m47lazVdk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:56 2025 by rpki-client