$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa File: 2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa (raw, json) Hash identifier: rmlibQtExA5sF5qPoAk8+Zw0EHhccRCVCYu9AaZCRYk= Subject key identifier: BB:79:5A:49:58:08:A6:1F:E3:4B:B9:54:90:16:47:91:70:DC:F6:8D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AE6CBE9AE2F6B6CDEE00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.34.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ae:6c:be:9a:e2:f6:b6:cd:ee:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=ffbe4f08-483c-4c24-b798-12a679fc86bf Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:34:2f:80:5e:b9:90:fd:ad:ac:63:90:1b:11: 38:23:6e:a9:1f:91:a9:45:4e:ca:74:9d:08:35:c8: 27:e7:25:e3:ba:80:ce:89:21:e6:49:99:82:35:9b: 9b:5b:2f:b6:18:7f:2d:e8:63:38:69:4f:57:c8:34: bb:63:0f:e5:95:23:f8:f7:01:c9:92:e0:25:37:a6: c7:44:f4:ee:4b:7a:5d:5d:d9:25:09:73:1b:2a:43: 12:5b:0e:2b:12:70:de:6d:59:3f:85:87:76:a7:d3: 85:7b:43:72:32:36:ba:18:21:10:8d:c4:f6:3c:21: f2:34:1b:6f:7d:1c:7a:58:61:be:ef:bd:15:ae:b1: ac:16:71:53:1f:96:58:b9:5c:b5:2d:40:ee:6c:aa: 79:73:26:d8:e2:8e:59:fc:e6:76:53:2c:f7:40:e4: ff:5a:2f:5f:81:c1:84:6c:e9:29:7a:8a:d8:76:03: b3:d9:9c:1d:78:a2:5b:c3:02:cb:82:ee:f8:2f:c4: ed:a1:46:13:10:f0:f5:62:9e:28:97:20:ac:56:5d: e1:cc:53:96:4d:bc:1b:de:8e:53:1b:a0:69:8d:49: 34:dd:61:f0:cd:1b:e8:de:c4:a8:5a:5b:07:e9:e7: 43:67:97:e3:09:0b:c1:18:d6:81:71:51:b8:64:9f: 61:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:79:5A:49:58:08:A6:1F:E3:4B:B9:54:90:16:47:91:70:DC:F6:8D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/2eb50b07-58eb-3acd-b4ed-b052c02253d5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 84:ff:bf:28:74:95:9e:2a:c8:ad:ca:bc:6e:75:0d:89:3c:03: 2a:f6:f2:32:29:3b:85:d6:b8:86:5f:fd:2d:bf:ca:e6:29:2a: 48:9c:22:c8:b3:e2:78:a0:a5:4a:01:b4:4d:05:e0:9a:06:bd: dd:6a:10:be:e2:1a:39:61:85:17:b5:ef:d6:f9:cd:2f:30:bd: e1:13:0c:19:e7:80:93:30:a4:bc:8f:b0:10:1d:48:d5:12:e6: 0e:e3:c6:a9:9f:a6:c0:1d:78:7f:8d:06:35:69:33:fa:e3:bc: 97:10:fc:8c:b0:81:1d:5f:94:81:ee:5f:e4:b2:b4:a0:15:05: 92:72:64:46:54:19:f1:a2:59:d1:5c:58:20:72:32:b3:f3:98: 5c:72:ec:cd:45:5e:13:0a:5e:09:30:68:12:42:60:a0:86:10: 27:0f:9a:90:12:9e:73:f0:44:3a:65:33:a1:6d:aa:2a:fd:12: 4e:75:d6:06:9b:37:2e:38:9f:72:08:03:de:9a:9e:d6:91:6f: 98:5e:f1:3f:00:be:0b:c9:7d:61:81:2e:a0:33:8d:f5:05:7c: 34:e9:df:58:7a:73:17:90:c2:36:69:21:49:a8:81:0b:9a:66: 0a:39:7c:5f:9b:7f:f6:07:c8:11:41:ee:4a:7e:04:a9:1e:3f: fd:09:b3:40 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK5svpri9rbN7gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk ZmZiZTRmMDgtNDgzYy00YzI0LWI3OTgtMTJhNjc5ZmM4NmJmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzQvgF65kP2trGOQGxE4I26pH5GpRU7KdJ0I Ncgn5yXjuoDOiSHmSZmCNZubWy+2GH8t6GM4aU9XyDS7Yw/llSP49wHJkuAlN6bH RPTuS3pdXdklCXMbKkMSWw4rEnDebVk/hYd2p9OFe0NyMja6GCEQjcT2PCHyNBtv fRx6WGG+770VrrGsFnFTH5ZYuVy1LUDubKp5cybY4o5Z/OZ2Uyz3QOT/Wi9fgcGE bOkpeorYdgOz2ZwdeKJbwwLLgu74L8TtoUYTEPD1Yp4olyCsVl3hzFOWTbwb3o5T G6BpjUk03WHwzRvo3sSoWlsH6edDZ5fjCQvBGNaBcVG4ZJ9haQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLt5WklYCKYf40u5VJAWR5Fw3PaNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMmViNTBiMDctNThlYi0z YWNkLWI0ZWQtYjA1MmMwMjI1M2Q1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCJQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIT/vyh0lZ4qyK3KvG51DYk8Ayr28jIpO4XWuIZf/S2/yuYpKkicIsiz 4nigpUoBtE0F4JoGvd1qEL7iGjlhhRe179b5zS8wveETDBnngJMwpLyPsBAdSNUS 5g7jxqmfpsAdeH+NBjVpM/rjvJcQ/IywgR1flIHuX+SytKAVBZJyZEZUGfGiWdFc WCByMrPzmFxy7M1FXhMKXgkwaBJCYKCGECcPmpASnnPwRDplM6Ftqir9Ek511gab Ny44n3IIA96antaRb5he8T8AvgvJfWGBLqAzjfUFfDTp31h6cxeQwjZpIUmogQua Zgo5fF+bf/YHyBFB7kp+BKkeP/0Js0A= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:22 2025 by rpki-client