$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa File: 43bc24c4-e6e1-3452-a132-895a65997e92.roa (raw, json) Hash identifier: lAOhGwIpuTQyFAkMue54dN9UFzvCJaMPBZPSKWrhOS4= Subject key identifier: CA:21:74:34:45:41:AD:88:34:8B:A2:C0:E4:27:3B:57:2C:F1:F6:6F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318ACE4D10B59E13C3EFE00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa Signing time: Thu 23 Jan 2025 06:13:22 +0000 ROA not before: Thu 23 Jan 2025 06:13:22 +0000 ROA not after: Wed 23 Apr 2025 05:13:22 +0000 asID: 16591 IP address blocks: 136.49.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ac:e4:d1:0b:59:e1:3c:3e:fe:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:22 2025 GMT Not After : Apr 23 05:13:22 2025 GMT Subject: CN=bef4e3e7-b70f-4f46-bf15-4c34e9d2c84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:a9:df:01:11:38:48:59:48:4a:67:6b:4b:94: e9:99:89:31:21:75:1b:b2:a5:72:dd:29:c5:ce:9e: 6d:bd:e5:b6:be:49:65:13:18:f7:f4:ee:10:b6:f5: 76:45:3f:51:09:a5:5d:e8:82:1f:09:c9:0b:14:8d: 50:67:8d:01:25:e8:b3:e0:da:09:13:3a:ac:08:40: bb:ee:80:b2:18:84:86:0f:9b:41:84:2a:46:8f:5c: 96:21:bd:33:a4:79:2a:6b:d5:5c:31:73:f8:7d:34: ce:6c:97:b4:1f:e4:df:3f:c6:1c:d6:da:c1:10:ed: 44:c8:8b:68:f8:eb:2e:f0:1e:12:c2:a1:fe:2e:fd: e7:fb:34:b9:73:1e:45:93:4a:7a:c0:ef:34:d4:f4: 07:11:99:82:02:29:22:e2:fe:40:5a:0b:b3:35:27: a6:d1:0d:f1:a5:01:80:23:b2:0a:3a:86:6b:a8:8e: 80:d1:c8:82:7c:50:82:8a:7c:74:55:99:21:70:b7: 46:33:9a:c8:cb:d4:fa:fd:b7:20:6d:83:f4:b2:98: e9:38:da:bf:b0:b7:40:a9:4d:ba:a6:84:13:b0:44: 85:43:3a:c1:12:37:9f:b9:ad:20:11:e4:c6:a7:fb: 5f:cf:64:80:e0:e3:55:ff:c7:d5:7f:f5:4a:d8:fc: 9d:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:21:74:34:45:41:AD:88:34:8B:A2:C0:E4:27:3B:57:2C:F1:F6:6F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/43bc24c4-e6e1-3452-a132-895a65997e92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 38:59:95:83:04:ad:2f:44:0b:b4:e7:63:d4:ff:25:39:95:bf: 2e:22:9a:35:60:8f:1e:50:dd:10:4c:d3:52:77:1b:81:0f:31: 58:f1:ea:42:b4:5b:b7:96:14:b6:0f:ea:20:6f:a7:34:86:75: 77:b1:ab:10:43:77:c4:a3:b0:b8:e4:28:1d:c1:26:19:57:d8: e4:a5:1e:64:f2:c7:12:0a:da:87:48:a0:dd:dc:d1:fb:6f:27: 3d:2d:d2:72:70:f4:ac:7d:c7:78:ef:90:82:27:08:e7:66:0a: ca:f7:02:e0:07:0e:dd:3a:55:a5:af:75:06:5e:47:a4:d3:e8: 37:13:57:4d:e4:de:15:32:06:a7:0f:9f:10:3f:be:0a:f4:6a: a6:00:b5:27:04:8d:59:9a:3b:fe:de:0b:b0:07:c4:40:6c:b5: 63:71:26:1f:83:42:23:bb:af:ed:7d:85:0e:60:dc:5a:bf:a7: 26:4d:aa:a0:20:8e:5c:95:b3:14:5b:c8:ec:b3:6b:77:c9:ee: ee:ae:93:85:8e:8f:13:f8:9f:93:af:8a:50:65:d1:3f:b1:1e: 42:f2:1c:59:07:37:3e:49:11:04:7a:b7:3c:ec:da:eb:c8:a0: 74:85:33:00:27:c4:ec:2e:16:c4:d3:aa:3a:fa:5f:7e:b9:58: 0e:b4:63:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKzk0QtZ4Tw+/gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk YmVmNGUzZTctYjcwZi00ZjQ2LWJmMTUtNGMzNGU5ZDJjODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhanfARE4SFlISmdrS5TpmYkxIXUbsqVy3SnF zp5tveW2vkllExj39O4QtvV2RT9RCaVd6IIfCckLFI1QZ40BJeiz4NoJEzqsCEC7 7oCyGISGD5tBhCpGj1yWIb0zpHkqa9VcMXP4fTTObJe0H+TfP8Yc1trBEO1EyIto +Osu8B4SwqH+Lv3n+zS5cx5Fk0p6wO801PQHEZmCAiki4v5AWguzNSem0Q3xpQGA I7IKOoZrqI6A0ciCfFCCinx0VZkhcLdGM5rIy9T6/bcgbYP0spjpONq/sLdAqU26 poQTsESFQzrBEjefua0gEeTGp/tfz2SA4ONV/8fVf/VK2PydzQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMohdDRFQa2INIuiwOQnO1cs8fZvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDNiYzI0YzQtZTZlMS0z NDUyLWExMzItODk1YTY1OTk3ZTkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDFAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADhZlYMErS9EC7TnY9T/JTmVvy4imjVgjx5Q3RBM01J3G4EPMVjx6kK0 W7eWFLYP6iBvpzSGdXexqxBDd8SjsLjkKB3BJhlX2OSlHmTyxxIK2odIoN3c0ftv Jz0t0nJw9Kx9x3jvkIInCOdmCsr3AuAHDt06VaWvdQZeR6TT6DcTV03k3hUyBqcP nxA/vgr0aqYAtScEjVmaO/7eC7AHxEBstWNxJh+DQiO7r+19hQ5g3Fq/pyZNqqAg jlyVsxRbyOyza3fJ7u6uk4WOjxP4n5OvilBl0T+xHkLyHFkHNz5JEQR6tzzs2uvI oHSFMwAnxOwuFsTTqjr6X365WA60Y6k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:41 2025 by rpki-client