$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa File: 2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa (raw, json) Hash identifier: DJNzWCwSSIsWo75/juh57WdJ4qPfcO9AnDsnAB81SSk= Subject key identifier: 58:B3:9F:09:BE:14:46:28:21:11:2B:31:65:77:D5:98:65:8C:FE:E5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AE24A53B2666C90E2F00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.57.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ae:24:a5:3b:26:66:c9:0e:2f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=928a0190-4ce1-4963-9c1f-fe6d0db5997e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:df:da:cf:e5:85:93:67:27:85:51:4d:59:04: 31:5d:2c:02:0c:26:2d:8e:65:c8:d7:99:3f:42:b5: 42:d3:f9:aa:c0:d5:1d:e6:c7:4f:38:12:d1:a3:f0: 07:be:e0:85:27:f1:fb:37:91:89:9f:ec:bc:75:71: a1:49:03:de:07:ce:d3:3a:f5:05:c0:c6:5b:2b:c5: 4e:da:8f:cd:94:c8:d3:c7:fe:5d:f3:ec:00:52:4d: 24:d0:e4:15:cf:44:0a:f2:a4:2b:8a:73:bf:45:ad: 56:3e:ae:a7:d0:8e:df:63:23:1f:a1:ee:1c:5a:64: 73:f8:b9:12:3f:8b:d9:6d:c7:7c:75:91:e0:38:e4: 17:03:f8:21:69:ec:dc:40:6b:ab:26:6f:22:14:72: c7:40:d9:50:55:dd:4f:01:17:21:e6:44:8e:8b:8e: d5:65:f1:6b:4a:ce:3e:ea:4c:ad:98:27:c1:65:ff: 72:e4:66:14:37:0b:88:44:02:59:8e:47:77:66:a2: 8a:69:71:af:1a:a3:26:41:10:a4:d8:3d:58:86:aa: 69:b1:1c:a0:89:4a:da:9c:eb:86:4b:ee:30:6b:5e: 59:cd:91:7c:ec:f7:bc:c3:9b:77:a6:20:7c:0a:22: 69:69:1a:d9:80:a3:f4:e0:d2:17:ec:b9:23:3d:46: e7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:B3:9F:09:BE:14:46:28:21:11:2B:31:65:77:D5:98:65:8C:FE:E5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2840b8e9-69ab-3a8f-ab85-f83d852b0c1d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:0c:d2:a8:da:09:46:54:a1:96:51:f2:73:37:93:2d:59:73: 6e:4e:db:9c:8b:4d:07:b5:40:2d:5e:f9:c7:0f:b6:82:7e:1f: 74:37:14:22:a8:6a:6f:c9:a7:54:d3:3c:84:38:3f:4a:94:0f: 28:1c:62:d2:d4:42:12:90:5e:bf:9a:50:7a:be:1e:42:6d:67: 67:86:15:99:a4:7e:ab:79:8f:fc:79:dc:f2:51:51:36:ba:9d: 87:ec:20:b1:66:07:f6:2f:33:b8:81:bd:fb:20:72:f1:35:30: d8:36:a9:60:90:5a:9f:75:17:e0:03:a7:52:5d:bd:aa:c1:9a: df:a8:31:c9:81:af:63:ca:cd:f0:0a:56:00:14:9b:be:1a:2b: e4:f6:7f:9a:d5:d5:67:aa:ff:70:ec:86:77:79:d2:bf:05:cd: 61:a1:26:2f:4a:4e:e7:92:71:fb:a6:22:2b:30:8d:b0:be:55: 99:de:cf:db:ba:63:6b:2a:72:65:29:57:06:b9:ec:e9:84:46: 83:7e:02:4c:fc:2f:49:88:fa:92:f9:67:ae:ae:29:c7:ad:76: 1b:d3:96:6f:b0:75:8a:9b:95:9d:73:39:ac:32:1f:7f:24:d5: 56:f2:99:2e:55:d0:67:06:b0:3f:08:ad:3f:1c:44:9c:b8:9a: a6:74:b1:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK4kpTsmZskOLwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk OTI4YTAxOTAtNGNlMS00OTYzLTljMWYtZmU2ZDBkYjU5OTdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit/az+WFk2cnhVFNWQQxXSwCDCYtjmXI15k/ QrVC0/mqwNUd5sdPOBLRo/AHvuCFJ/H7N5GJn+y8dXGhSQPeB87TOvUFwMZbK8VO 2o/NlMjTx/5d8+wAUk0k0OQVz0QK8qQrinO/Ra1WPq6n0I7fYyMfoe4cWmRz+LkS P4vZbcd8dZHgOOQXA/ghaezcQGurJm8iFHLHQNlQVd1PARch5kSOi47VZfFrSs4+ 6kytmCfBZf9y5GYUNwuIRAJZjkd3ZqKKaXGvGqMmQRCk2D1YhqppsRygiUranOuG S+4wa15ZzZF87Pe8w5t3piB8CiJpaRrZgKP04NIX7LkjPUbnUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFiznwm+FEYoIRErMWV31ZhljP7lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjg0MGI4ZTktNjlhYi0z YThmLWFiODUtZjgzZDg1MmIwYzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDnAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADoM0qjaCUZUoZZR8nM3ky1Zc25O25yLTQe1QC1e+ccPtoJ+H3Q3FCKo am/Jp1TTPIQ4P0qUDygcYtLUQhKQXr+aUHq+HkJtZ2eGFZmkfqt5j/x53PJRUTa6 nYfsILFmB/YvM7iBvfsgcvE1MNg2qWCQWp91F+ADp1JdvarBmt+oMcmBr2PKzfAK VgAUm74aK+T2f5rV1Weq/3Dshnd50r8FzWGhJi9KTueScfumIiswjbC+VZnez9u6 Y2sqcmUpVwa57OmERoN+Akz8L0mI+pL5Z66uKcetdhvTlm+wdYqblZ1zOawyH38k 1VbymS5V0GcGsD8IrT8cRJy4mqZ0sUc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:53 2025 by rpki-client