$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/178f5b5a-4835-3d04-ad66-c8b95e39abaf.roa File: 178f5b5a-4835-3d04-ad66-c8b95e39abaf.roa (raw, json) Hash identifier: +AcCZM4DmszKukyJRzU8OqIxLl343KIROtAmziXQmmg= Subject key identifier: 13:91:74:EA:A3:EF:B8:A1:F0:79:70:06:88:61:98:6F:6F:81:4B:64 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A09F4D561EC8B78D7AC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/178f5b5a-4835-3d04-ad66-c8b95e39abaf.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.38.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a0:9f:4d:56:1e:c8:b7:8d:7a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=0246883a-dd72-4a76-b6ce-616e65b41e7f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d4:8a:0a:66:62:7a:41:33:ef:18:83:c1:66: 68:f3:85:4b:1c:ef:19:9f:fe:fb:79:78:1f:4a:9a: c0:3c:85:9c:30:2f:eb:5b:d3:65:ee:1d:51:fe:40: f7:89:af:f1:d1:e7:51:17:6b:d3:cc:d5:0e:88:f2: 74:13:34:0c:4d:4f:11:4a:29:32:9f:89:7b:e7:b1: 13:df:93:9d:fd:bf:8e:31:36:5b:56:4f:46:24:e9: eb:cd:2d:70:8f:3f:10:cb:fe:8e:ec:c7:11:cf:f7: 93:65:c6:06:72:df:ea:b7:10:2b:c8:50:65:5c:14: f9:ee:bc:c8:cf:3c:50:8a:a6:66:53:a7:e0:28:0a: 4d:c5:d2:a9:19:69:20:13:bb:a6:bc:66:e1:76:62: 63:a5:a3:60:51:06:4b:1b:79:b4:b4:c3:19:15:43: a2:2d:dc:3b:6e:3f:76:1f:0d:ff:8a:88:11:22:13: db:2c:97:f3:9a:2d:5d:02:9f:55:5c:b2:00:15:e4: 9e:ab:f5:92:33:ea:05:b6:8b:57:d2:5e:6e:57:a2: 07:1f:db:9b:b3:d8:91:fc:4b:dd:93:4e:64:b7:29: fa:c7:b0:ec:2c:37:93:87:36:1e:54:0a:d4:f6:96: 59:17:63:b0:c0:c5:0e:1d:bb:89:f8:d0:1f:d9:3e: 87:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:91:74:EA:A3:EF:B8:A1:F0:79:70:06:88:61:98:6F:6F:81:4B:64 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/178f5b5a-4835-3d04-ad66-c8b95e39abaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:66:41:c4:47:90:68:2a:a4:26:98:08:a9:b7:2e:4a:56:9a: 9e:82:ce:a1:30:b0:a5:4a:0b:5b:9d:46:36:5a:29:d6:da:78: 4f:ef:31:99:a1:84:9e:2e:2b:75:f6:2c:0a:11:2c:5e:fb:11: 8a:29:06:19:73:e1:1d:4c:d6:e0:ec:40:fd:79:f3:31:cb:b9: 6b:0f:ee:0b:a8:6f:8b:52:1f:6a:b3:41:aa:24:69:70:55:33: a9:0c:b4:4e:c0:14:23:b9:c0:ba:68:62:2c:42:80:51:4c:c4: f2:c4:7e:5f:42:fa:89:b3:1f:51:f0:09:c0:20:8f:ff:c7:c1: d8:ed:dd:82:17:a5:51:2a:9d:27:72:c6:ae:4b:f6:86:82:20: 42:37:b0:af:0a:dd:c4:c0:b0:91:66:84:66:45:34:d1:f1:f8: 3b:4e:2d:63:bf:f1:63:af:2e:39:b6:21:80:3d:83:6b:40:ef: 17:14:cc:9a:36:d1:4b:63:ef:ef:cd:ca:81:54:61:1a:c9:4d: bf:d7:bd:d6:aa:9a:43:10:6b:62:88:da:a1:09:53:2c:a4:1d: 9c:bc:92:dd:a6:42:0a:a5:6a:da:ea:ba:a3:e0:57:dc:bc:4a: 83:5f:2e:c1:c8:c9:d7:9d:a0:a3:bf:8d:b7:37:e9:85:61:09: 35:99:5a:19 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKCfTVYeyLeNesAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk MDI0Njg4M2EtZGQ3Mi00YTc2LWI2Y2UtNjE2ZTY1YjQxZTdmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNSKCmZiekEz7xiDwWZo84VLHO8Zn/77eXgf SprAPIWcMC/rW9Nl7h1R/kD3ia/x0edRF2vTzNUOiPJ0EzQMTU8RSikyn4l757ET 35Od/b+OMTZbVk9GJOnrzS1wjz8Qy/6O7McRz/eTZcYGct/qtxAryFBlXBT57rzI zzxQiqZmU6fgKApNxdKpGWkgE7umvGbhdmJjpaNgUQZLG3m0tMMZFUOiLdw7bj92 Hw3/iogRIhPbLJfzmi1dAp9VXLIAFeSeq/WSM+oFtotX0l5uV6IHH9ubs9iR/Evd k05ktyn6x7DsLDeThzYeVArU9pZZF2OwwMUOHbuJ+NAf2T6H0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBORdOqj77ih8HlwBohhmG9vgUtkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTc4ZjViNWEtNDgzNS0z ZDA0LWFkNjYtYzhiOTVlMzlhYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEpmQcRHkGgqpCaYCKm3LkpWmp6CzqEwsKVKC1udRjZaKdbaeE/vMZmh hJ4uK3X2LAoRLF77EYopBhlz4R1M1uDsQP158zHLuWsP7guob4tSH2qzQaokaXBV M6kMtE7AFCO5wLpoYixCgFFMxPLEfl9C+omzH1HwCcAgj//Hwdjt3YIXpVEqnSdy xq5L9oaCIEI3sK8K3cTAsJFmhGZFNNHx+DtOLWO/8WOvLjm2IYA9g2tA7xcUzJo2 0Utj7+/NyoFUYRrJTb/XvdaqmkMQa2KI2qEJUyykHZy8kt2mQgqlatrquqPgV9y8 SoNfLsHIydedoKO/jbc36YVhCTWZWhk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:14 2025 by rpki-client