$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa File: 39708eac-3243-3a6a-88da-6bc7ae510463.roa (raw, json) Hash identifier: VgGxZOqUgJV0K1PYtM/qtKMJZjI43Uc8IYSKRsnfH8c= Subject key identifier: 73:9F:A7:B6:5B:21:2F:58:A0:BA:D9:7B:79:8B:20:27:CE:17:98:3F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AD817AA62B338A57C580 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa Signing time: Thu 23 Jan 2025 06:13:22 +0000 ROA not before: Thu 23 Jan 2025 06:13:22 +0000 ROA not after: Wed 23 Apr 2025 05:13:22 +0000 asID: 16591 IP address blocks: 136.33.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ad:81:7a:a6:2b:33:8a:57:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:22 2025 GMT Not After : Apr 23 05:13:22 2025 GMT Subject: CN=73e1ac3a-04e6-4d97-9728-7c3787f048dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ac:7f:21:50:a4:dd:ae:95:82:9f:87:75:5e: 88:82:f5:8b:e0:cd:56:aa:a3:7b:77:99:ba:6d:11: 3e:7e:2c:de:62:87:1e:88:3e:51:48:39:e4:7f:31: a1:60:4f:9a:43:36:22:cb:eb:d6:ef:0d:43:c3:2d: b8:eb:60:6b:53:28:04:24:f0:46:85:b5:8d:0e:eb: b8:3e:47:18:72:90:95:f5:57:48:4f:86:a5:f9:2b: 19:c7:89:f3:22:33:c5:40:b4:78:61:6e:d2:1a:fe: dc:b3:95:a4:dd:5a:9d:b3:7a:f2:c2:36:9f:2a:cf: 92:23:eb:14:0e:1d:16:cf:7c:dd:3c:22:95:0b:a5: bd:91:d9:8a:5a:44:b9:ad:2e:6e:16:2d:8f:91:fa: 1b:0a:f9:5c:e2:e2:b0:b7:d5:12:ac:91:52:61:11: 02:60:74:fd:93:d7:f3:af:26:a3:b3:32:0d:44:7e: bc:1d:fe:f1:e9:32:28:47:26:bc:c3:35:a1:3a:11: 70:c6:6b:0c:91:d9:6d:dd:ed:d7:66:9c:37:ab:c9: 12:10:3b:87:ee:a1:4f:23:29:3a:c5:e2:9a:77:0f: 1a:d3:58:00:cb:2c:e3:ee:9c:be:4e:93:67:67:dc: 71:b2:0e:64:2f:33:70:3b:a5:57:e3:0b:f8:1d:05: cb:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:9F:A7:B6:5B:21:2F:58:A0:BA:D9:7B:79:8B:20:27:CE:17:98:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/39708eac-3243-3a6a-88da-6bc7ae510463.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a1:68:7b:a1:a8:da:52:ef:f3:02:ea:36:20:59:6e:0d:75:58: 8c:d4:69:33:7b:a7:0e:ef:0e:3a:f0:8d:3d:f0:05:b1:3c:0b: 59:ef:d9:de:24:67:d2:60:3f:8b:25:1d:84:21:55:a6:d1:d6: 9e:d3:2f:12:f0:88:bd:82:47:47:23:ac:43:8c:9d:4b:2b:cd: 7a:dd:7f:22:c4:35:af:81:17:8f:6b:18:ee:62:42:9e:c7:9f: bc:e1:d3:2c:e8:5b:41:7e:f4:51:89:82:d5:b9:31:bd:10:a1: 59:be:e3:4c:75:43:b9:6f:eb:c8:11:ff:24:a8:e7:38:1e:ac: 4f:bd:0f:6d:dd:a6:84:0c:5d:7f:a7:bb:50:e9:a9:0f:8f:c6: 2f:75:56:a9:83:66:83:6a:50:d8:74:70:f3:56:7e:fc:8b:1e: 78:2c:1c:79:93:77:66:5f:75:7c:88:0f:b7:a9:42:75:a2:00: 41:ed:28:80:8c:e7:2c:95:05:33:f9:ce:87:c5:60:0d:42:57: ee:f6:35:7b:0c:cf:3b:4f:2d:be:a9:16:a8:0e:36:50:d9:d5: cf:51:87:82:51:c7:be:56:28:68:f3:c3:de:38:04:a3:ab:77: 21:72:33:20:79:62:4a:45:55:8f:5c:8c:8d:36:17:b5:93:6b: 04:6b:80:d9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK2BeqYrM4pXxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk NzNlMWFjM2EtMDRlNi00ZDk3LTk3MjgtN2MzNzg3ZjA0OGRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnqx/IVCk3a6Vgp+HdV6IgvWL4M1WqqN7d5m6 bRE+fizeYoceiD5RSDnkfzGhYE+aQzYiy+vW7w1Dwy2462BrUygEJPBGhbWNDuu4 PkcYcpCV9VdIT4al+SsZx4nzIjPFQLR4YW7SGv7cs5Wk3Vqds3rywjafKs+SI+sU Dh0Wz3zdPCKVC6W9kdmKWkS5rS5uFi2PkfobCvlc4uKwt9USrJFSYRECYHT9k9fz ryajszINRH68Hf7x6TIoRya8wzWhOhFwxmsMkdlt3e3XZpw3q8kSEDuH7qFPIyk6 xeKadw8a01gAyyzj7py+TpNnZ9xxsg5kLzNwO6VX4wv4HQXL9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHOfp7ZbIS9YoLrZe3mLICfOF5g/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzk3MDhlYWMtMzI0My0z YTZhLTg4ZGEtNmJjN2FlNTEwNDYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCHAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKFoe6Go2lLv8wLqNiBZbg11WIzUaTN7pw7vDjrwjT3wBbE8C1nv2d4k Z9JgP4slHYQhVabR1p7TLxLwiL2CR0cjrEOMnUsrzXrdfyLENa+BF49rGO5iQp7H n7zh0yzoW0F+9FGJgtW5Mb0QoVm+40x1Q7lv68gR/ySo5zgerE+9D23dpoQMXX+n u1DpqQ+Pxi91VqmDZoNqUNh0cPNWfvyLHngsHHmTd2ZfdXyID7epQnWiAEHtKICM 5yyVBTP5zofFYA1CV+72NXsMzztPLb6pFqgONlDZ1c9Rh4JRx75WKGjzw944BKOr dyFyMyB5YkpFVY9cjI02F7WTawRrgNk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:46:14 2025 by rpki-client