$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: 7zFVp+vfJyPn0zjipKOmNyb1Og5/iMExGsVZhbVpUOE= Subject key identifier: 9A:6C:53:F1:74:6B:15:66:04:00:2A:43:98:55:DF:34:EF:CB:9F:BC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A6133BCF9109455BEF00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a6:13:3b:cf:91:09:45:5b:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=def56cb9-e8b9-4a8c-8a0d-fcdf0df3e054 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:80:44:b2:de:ec:b6:9e:8a:6a:9c:df:8a:34: 30:20:4d:3d:47:10:7b:f3:ba:7a:4d:43:ef:57:a4: 06:ba:59:71:c6:09:87:07:d2:66:b7:54:5a:60:10: a6:ba:a3:59:38:38:e7:dd:bc:de:7f:f5:24:5d:75: 5a:9a:88:ce:d6:ae:2b:3b:46:b4:81:cd:d7:69:22: 72:20:72:40:01:a2:13:5a:46:f9:b3:d7:fe:62:cd: e5:38:c2:34:08:56:77:26:da:97:05:68:d8:df:be: 96:19:8a:07:cd:5c:1e:24:62:66:1d:c0:e1:4a:9f: b3:6c:ab:04:3f:32:99:9e:ac:ea:b9:aa:a1:d2:b7: 95:0f:47:4c:e6:d2:7c:49:da:3a:ae:2b:63:bb:80: 9f:31:76:af:12:df:dd:a9:2b:d2:26:51:bb:ac:0d: 4b:09:7c:b2:5b:e4:12:09:d9:b4:7b:4a:14:78:d1: 25:12:6a:cd:27:ba:78:77:3b:01:80:dd:8d:20:0a: 50:c5:5e:52:31:32:a0:63:c0:86:97:1d:1c:89:47: da:b7:b4:51:b5:d5:06:40:86:21:70:ef:8d:49:dd: f6:eb:15:ef:fe:24:64:39:91:9c:d7:9f:71:11:d1: cf:dc:ba:01:84:ca:29:62:fc:12:ab:1d:e3:f0:2a: cc:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:6C:53:F1:74:6B:15:66:04:00:2A:43:98:55:DF:34:EF:CB:9F:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:40:e0:2b:e1:f7:e9:73:91:9a:16:8f:d5:be:31:8e:91:43: 2a:b3:48:45:d6:86:76:32:b2:ab:a7:ae:4f:47:a3:6e:36:f1: 51:63:f4:d4:5d:5a:e5:b0:82:f0:40:8a:f1:33:bc:c0:3a:a1: f7:d3:96:e2:01:49:ff:4e:70:a0:d1:c1:98:59:ab:20:c7:16: e3:a1:15:9d:92:25:13:12:e2:5e:92:4d:25:92:37:7d:88:04: 04:6f:7c:3a:3f:0c:54:d9:51:ea:fa:72:39:8b:91:00:9b:fb: 86:21:63:43:d6:5d:e1:19:6b:16:9d:af:bb:1a:ee:18:77:72: 78:37:12:b6:7e:c4:5e:27:34:4e:3e:5c:2d:05:0f:d2:c5:11: bb:19:15:66:1e:cd:59:d7:39:b1:a7:90:d3:1b:cc:09:cd:38: 26:f3:28:14:e9:6d:fb:63:58:17:17:04:09:ba:9e:6c:0b:62: 93:1a:05:29:85:37:1d:a1:54:c8:bf:13:c1:14:a8:e5:63:5f: 86:69:0d:16:01:07:64:05:80:52:bd:04:80:fa:45:f2:ed:56: e9:86:b5:f5:4d:84:d7:05:5b:26:7e:af:8a:58:1c:65:69:ee: 27:dc:17:b2:db:6f:b9:54:99:da:39:80:f3:95:fb:37:34:00: 44:89:75:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKYTO8+RCUVb7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk ZGVmNTZjYjktZThiOS00YThjLThhMGQtZmNkZjBkZjNlMDU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYBEst7stp6KapzfijQwIE09RxB787p6TUPv V6QGullxxgmHB9Jmt1RaYBCmuqNZODjn3bzef/UkXXVamojO1q4rO0a0gc3XaSJy IHJAAaITWkb5s9f+Ys3lOMI0CFZ3JtqXBWjY376WGYoHzVweJGJmHcDhSp+zbKsE PzKZnqzquaqh0reVD0dM5tJ8Sdo6ritju4CfMXavEt/dqSvSJlG7rA1LCXyyW+QS Cdm0e0oUeNElEmrNJ7p4dzsBgN2NIApQxV5SMTKgY8CGlx0ciUfat7RRtdUGQIYh cO+NSd326xXv/iRkOZGc159xEdHP3LoBhMopYvwSqx3j8CrMVQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJpsU/F0axVmBAAqQ5hV3zTvy5+8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACFA4Cvh9+lzkZoWj9W+MY6RQyqzSEXWhnYysqunrk9Ho2428VFj9NRd WuWwgvBAivEzvMA6offTluIBSf9OcKDRwZhZqyDHFuOhFZ2SJRMS4l6STSWSN32I BARvfDo/DFTZUer6cjmLkQCb+4YhY0PWXeEZaxadr7sa7hh3cng3ErZ+xF4nNE4+ XC0FD9LFEbsZFWYezVnXObGnkNMbzAnNOCbzKBTpbftjWBcXBAm6nmwLYpMaBSmF Nx2hVMi/E8EUqOVjX4ZpDRYBB2QFgFK9BID6RfLtVumGtfVNhNcFWyZ+r4pYHGVp 7ifcF7Lbb7lUmdo5gPOV+zc0AESJdUQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:07 2025 by rpki-client