$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa File: 1e781fae-e632-3ad2-897b-adff15914591.roa (raw, json) Hash identifier: HtgGfwkYm272+0yYeeb0a+5OA2AdVUY1N5e+Oab9Q50= Subject key identifier: B2:0A:57:2B:69:71:7A:E6:D4:CB:C5:2F:66:44:0B:49:A0:70:1B:0D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AAC035C2DB8447551780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.57.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:aa:c0:35:c2:db:84:47:55:17:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=da6607a5-952e-4960-88dd-56fdd5c438ce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:c1:22:7b:70:c9:9c:c3:9b:99:e7:03:e6:98: a3:a7:7d:9c:57:c8:19:27:49:76:57:3b:49:14:85: 4b:cc:0e:c9:5d:cb:4c:1a:b6:e6:e5:cf:0c:b1:49: 0d:92:e0:ea:22:13:4e:bd:fd:0b:ca:28:51:63:ac: 3a:28:61:37:f6:5a:d1:e9:1f:5b:85:f4:1f:c7:d2: 10:de:46:52:60:cb:0b:b3:8e:32:9f:a3:67:17:6b: 13:c2:42:67:ab:3b:f2:90:75:10:67:f3:45:c0:7e: 07:7d:dd:f9:1e:58:a8:1d:6d:8b:f5:c7:44:f4:cc: 1e:80:0a:0f:86:4f:e9:97:dd:b9:d0:f7:cb:dc:8e: 7c:a2:95:e6:f3:ea:25:92:97:80:7e:11:81:ac:99: 2b:04:4f:8b:f6:e8:a8:f8:0a:37:0b:72:b7:47:9b: b2:6c:6b:11:89:4e:08:19:28:87:5e:ce:4e:0d:2a: 5f:92:95:d1:0c:f7:c6:f5:c8:b6:6a:65:7d:67:56: 1c:e8:0d:c4:ba:38:a8:b7:ad:11:03:e3:a0:9b:3a: 0d:3b:24:ca:14:93:15:fa:04:c1:c7:b8:cc:52:51: ab:4a:00:a3:a4:16:5c:28:6c:49:98:6f:7a:ce:3e: 41:b0:e9:40:f2:1d:d0:a9:59:59:c5:bc:5a:7a:26: f9:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0A:57:2B:69:71:7A:E6:D4:CB:C5:2F:66:44:0B:49:A0:70:1B:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1e781fae-e632-3ad2-897b-adff15914591.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:d9:25:cb:5e:e9:9c:eb:69:af:88:55:00:1b:40:eb:53:32: 6e:86:53:e1:9f:54:3f:e2:a5:2d:84:a4:35:39:37:70:61:8d: fb:6d:60:9a:04:c2:75:3e:62:8a:32:ae:e5:0e:49:0a:e3:33: 47:c2:d3:b9:e3:ce:bc:fd:96:48:a9:95:1d:62:e7:74:00:2e: 46:35:78:dc:99:96:1d:26:79:2d:3b:a7:ea:15:c6:9e:61:13: 90:75:ad:44:03:68:51:c7:e2:40:e0:07:e6:fe:5a:1a:92:b4: 9f:d1:66:f7:d5:bc:d3:2c:49:0f:6f:e3:a6:cd:f4:63:a7:cb: d4:69:da:64:62:c1:3e:3f:c7:f3:19:15:71:ef:01:63:50:e6: 9b:c6:1b:c1:ea:d0:19:00:57:cc:29:74:75:ee:be:cf:ef:c5: ce:4a:19:8b:84:df:5f:b8:e6:52:8c:c1:94:75:77:c3:a7:d8: 48:bc:a5:10:20:98:11:8b:05:0a:7c:d3:b6:a4:02:b4:16:5b: 3d:51:6d:24:b0:ae:d4:75:c9:48:44:11:11:cc:71:16:27:12: a7:ea:ff:d2:de:c6:2b:f4:eb:28:46:7a:90:42:b0:39:84:d8: 94:07:cb:39:04:90:af:e6:88:67:bf:83:6a:f8:03:0d:37:36: 79:9a:31:8c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKrANcLbhEdVF4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk ZGE2NjA3YTUtOTUyZS00OTYwLTg4ZGQtNTZmZGQ1YzQzOGNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsEie3DJnMObmecD5pijp32cV8gZJ0l2VztJ FIVLzA7JXctMGrbm5c8MsUkNkuDqIhNOvf0LyihRY6w6KGE39lrR6R9bhfQfx9IQ 3kZSYMsLs44yn6NnF2sTwkJnqzvykHUQZ/NFwH4Hfd35HlioHW2L9cdE9MwegAoP hk/pl9250PfL3I58opXm8+olkpeAfhGBrJkrBE+L9uio+Ao3C3K3R5uybGsRiU4I GSiHXs5ODSpfkpXRDPfG9ci2amV9Z1Yc6A3Eujiot60RA+OgmzoNOyTKFJMV+gTB x7jMUlGrSgCjpBZcKGxJmG96zj5BsOlA8h3QqVlZxbxaeib5KQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLIKVytpcXrm1MvFL2ZEC0mgcBsNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWU3ODFmYWUtZTYzMi0z YWQyLTg5N2ItYWRmZjE1OTE0NTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAATZJcte6Zzraa+IVQAbQOtTMm6GU+GfVD/ipS2EpDU5N3BhjfttYJoE wnU+YooyruUOSQrjM0fC07njzrz9lkiplR1i53QALkY1eNyZlh0meS07p+oVxp5h E5B1rUQDaFHH4kDgB+b+WhqStJ/RZvfVvNMsSQ9v46bN9GOny9Rp2mRiwT4/x/MZ FXHvAWNQ5pvGG8Hq0BkAV8wpdHXuvs/vxc5KGYuE31+45lKMwZR1d8On2Ei8pRAg mBGLBQp807akArQWWz1RbSSwrtR1yUhEERHMcRYnEqfq/9Lexiv06yhGepBCsDmE 2JQHyzkEkK/miGe/g2r4Aw03NnmaMYw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:25 2025 by rpki-client