$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa File: 38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa (raw, json) Hash identifier: HM9oTaFFHmaRB8VB+zNtlRkNrx8lKRYu9f3UdlI/AvA= Subject key identifier: B4:18:3F:2B:71:BD:47:92:B7:18:20:D8:77:DC:7F:F4:34:F4:60:C5 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AC152A677C1D339084C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa Signing time: Thu 23 Jan 2025 06:13:22 +0000 ROA not before: Thu 23 Jan 2025 06:13:22 +0000 ROA not after: Wed 23 Apr 2025 05:13:22 +0000 asID: 16591 IP address blocks: 136.60.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ac:15:2a:67:7c:1d:33:90:84:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:22 2025 GMT Not After : Apr 23 05:13:22 2025 GMT Subject: CN=06c6d681-eafc-4e1d-8262-413a2c3fe7cd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:3d:68:d1:65:d0:96:c6:17:25:87:76:d0:85: 3e:a1:68:5c:f5:da:23:15:f5:c2:44:ec:35:21:0a: 40:96:a7:27:17:6d:c8:1a:60:6e:44:e8:c4:a5:69: 8b:0a:ac:23:d6:dd:cc:77:b7:48:fc:27:07:f3:8b: dd:ea:5f:1d:1b:0a:ad:0c:ce:ed:e3:c0:48:ab:42: d7:7f:b5:60:cc:07:d6:20:0b:dc:e7:4d:d2:41:a3: f8:4b:ab:55:f4:1a:b4:95:cd:0d:7a:61:77:71:9e: 7b:37:e7:81:8e:a1:3e:ed:4a:92:db:2d:4e:10:c3: aa:ac:1b:5d:c6:07:68:8a:50:48:c6:5e:f7:72:6a: 4c:27:de:88:41:a6:01:fe:7b:81:f6:66:ff:23:17: 46:30:44:6a:9f:c2:1f:33:f7:8e:7a:9e:d3:32:56: a4:5c:8b:94:c3:05:34:07:a2:a9:90:62:c1:19:4f: e3:cd:90:3e:2b:81:43:7b:c5:e0:21:4f:27:8e:d1: 97:a3:09:a6:ff:d8:d3:fd:81:d4:76:51:f0:e9:35: 8f:ae:e2:16:c9:b0:ec:89:90:9f:94:5e:37:59:41: 33:24:d0:4d:d3:3b:df:13:b0:54:b0:20:73:4c:77: 1f:48:13:79:9e:85:b2:3d:97:60:c0:79:7a:e8:0b: 08:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:18:3F:2B:71:BD:47:92:B7:18:20:D8:77:DC:7F:F4:34:F4:60:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/38f93485-d290-34c3-90ff-ea5a55bdd7e9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 37:89:4b:6b:16:cc:47:aa:c0:14:61:c5:d6:e4:cf:bb:22:8e: a4:72:24:c3:1c:48:a8:93:f6:a1:8e:83:91:e0:a4:0e:03:d5: 96:7d:46:95:6c:cc:ff:2a:7b:c0:ae:44:be:27:94:b9:99:10: 0d:59:f0:cb:01:5f:35:8a:b9:75:52:df:ca:a3:18:a0:38:1e: 15:46:16:56:cb:9d:76:85:98:2b:13:6d:19:a5:a1:84:0c:bf: f1:a9:ce:e1:44:bd:95:f8:5d:61:5d:ff:c3:f5:63:e4:42:94: 71:26:bd:5a:dd:6a:91:9e:95:16:06:6c:af:17:5d:22:93:9f: b7:ea:99:ce:f8:ed:60:07:22:1d:88:90:a1:59:ac:f3:1b:b8: 3a:6f:6c:4f:40:ff:49:24:be:20:29:de:4d:64:b0:8e:fa:7f: 92:88:67:7f:60:79:99:a1:33:95:76:55:7b:fd:d6:5f:52:d1: 9a:dc:00:78:9d:f0:0c:02:d8:03:47:97:89:3f:a9:d7:02:6f: ef:99:19:c7:ac:85:1a:69:e3:cf:6c:df:17:dd:85:b7:d7:e6: 3b:a8:9d:28:14:41:21:98:b0:7e:d9:cc:46:55:59:70:82:00: 2a:d1:3f:09:55:f8:e9:65:8f:b3:64:a4:da:75:b7:53:04:bd: e5:2a:78:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKwVKmd8HTOQhMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk MDZjNmQ2ODEtZWFmYy00ZTFkLTgyNjItNDEzYTJjM2ZlN2NkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArD1o0WXQlsYXJYd20IU+oWhc9dojFfXCROw1 IQpAlqcnF23IGmBuROjEpWmLCqwj1t3Md7dI/CcH84vd6l8dGwqtDM7t48BIq0LX f7VgzAfWIAvc503SQaP4S6tV9Bq0lc0NemF3cZ57N+eBjqE+7UqS2y1OEMOqrBtd xgdoilBIxl73cmpMJ96IQaYB/nuB9mb/IxdGMERqn8IfM/eOep7TMlakXIuUwwU0 B6KpkGLBGU/jzZA+K4FDe8XgIU8njtGXowmm/9jT/YHUdlHw6TWPruIWybDsiZCf lF43WUEzJNBN0zvfE7BUsCBzTHcfSBN5noWyPZdgwHl66AsIuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLQYPytxvUeStxgg2Hfcf/Q09GDFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzhmOTM0ODUtZDI5MC0z NGMzLTkwZmYtZWE1YTU1YmRkN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDzgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADeJS2sWzEeqwBRhxdbkz7sijqRyJMMcSKiT9qGOg5HgpA4D1ZZ9RpVs zP8qe8CuRL4nlLmZEA1Z8MsBXzWKuXVS38qjGKA4HhVGFlbLnXaFmCsTbRmloYQM v/GpzuFEvZX4XWFd/8P1Y+RClHEmvVrdapGelRYGbK8XXSKTn7fqmc747WAHIh2I kKFZrPMbuDpvbE9A/0kkviAp3k1ksI76f5KIZ39geZmhM5V2VXv91l9S0ZrcAHid 8AwC2ANHl4k/qdcCb++ZGceshRpp489s3xfdhbfX5juonSgUQSGYsH7ZzEZVWXCC ACrRPwlV+Ollj7NkpNp1t1MEveUqeD4= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:53 2025 by rpki-client