$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa File: 4923fab5-423d-3396-8261-8c9f4af962e5.roa (raw, json) Hash identifier: QsGQCar9jtNuuCg8ba1OLA/XcnYtCHCUSGTy44T8x5o= Subject key identifier: 31:3B:8A:34:E9:5E:E7:75:9A:07:2C:18:5C:B5:45:59:43:86:77:9C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A9E4A7717D22566AD380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.35.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a9:e4:a7:71:7d:22:56:6a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=fde72e31-35dc-4e89-80eb-c12f1370b041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:87:11:53:67:5b:52:8e:74:8f:93:44:f9:97: a0:4e:03:04:05:91:08:73:27:67:4a:e4:ec:1b:4f: 4f:67:35:ae:33:33:6f:ba:47:2d:c7:98:02:9b:82: 83:55:24:16:34:3e:1a:1d:d1:c2:e2:ac:88:18:9b: d0:aa:ba:69:b6:ec:ae:7c:cb:69:25:96:19:05:d3: 11:12:72:a9:bd:c3:2e:b7:98:2a:24:2a:fb:88:17: 50:fe:85:07:92:d5:0c:c8:62:d6:91:6d:2d:8e:20: 0c:88:9a:36:3e:fc:2f:b8:ae:dc:1b:4f:19:b3:3c: 56:30:fb:72:f0:a1:c4:59:b6:b6:e3:db:41:1b:10: 1b:bd:07:a5:fc:8a:6d:a7:9f:fb:a5:e2:de:72:13: ad:42:d0:45:82:24:d3:49:8b:d0:71:51:a9:29:38: a0:47:74:5d:c0:c9:9d:26:a8:b9:ad:d9:a8:6a:d5: af:f7:26:03:ef:d7:b2:d2:a7:52:3e:b7:69:6f:e6: a8:c7:9b:7f:62:5b:76:ef:0f:a8:1e:03:ae:c1:92: 5c:c2:36:f0:dc:5d:54:99:16:00:6d:8a:c9:d6:b6: 65:32:1a:ee:82:ec:96:89:8c:85:c7:2f:04:2b:26: f6:55:13:07:8d:7a:d4:a1:69:40:25:06:6b:e1:60: 32:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:3B:8A:34:E9:5E:E7:75:9A:07:2C:18:5C:B5:45:59:43:86:77:9C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4923fab5-423d-3396-8261-8c9f4af962e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 25:b2:da:f9:57:96:21:63:d7:78:a6:68:93:44:51:c1:a0:62: 8f:fa:fa:a7:70:df:af:c5:7d:9c:97:85:5b:43:f6:d7:c6:63: 6a:ff:c5:52:52:13:bc:28:b6:42:41:0c:57:d2:37:fa:ee:8e: d1:24:4e:bc:a1:02:18:1c:de:a1:d9:6c:ba:7e:f2:7f:ac:b0: d4:ec:5e:f1:5e:74:7c:ba:0e:b8:61:9f:62:9d:0a:3c:ff:7f: de:a9:bf:47:a4:74:87:32:fe:91:e0:ce:95:ab:1e:70:50:33: f9:be:1e:ae:60:cc:92:d0:32:73:dd:99:49:cc:3e:17:6d:5a: e4:ac:78:6b:0c:4d:4d:c0:cb:55:ad:03:d0:69:19:77:7f:ed: 84:5e:36:bb:4d:95:01:d2:6a:f4:d0:2b:b1:51:08:84:37:6c: 32:0d:18:50:45:ff:47:8f:dc:e0:f2:de:86:53:ff:13:51:12: 07:24:ed:88:06:6d:9e:df:31:2d:7e:28:38:95:f0:81:17:17: e0:60:c5:5d:fd:c3:7c:d6:07:84:23:aa:7d:e7:f4:85:00:d5: 5e:7a:6d:28:38:0e:e3:90:8c:5f:74:03:a9:6b:f2:8e:bd:be: c7:3d:f7:3f:b6:f9:44:d4:bc:71:0b:b1:aa:ab:25:50:35:7f: 1f:59:61:8f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKnkp3F9IlZq04AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk ZmRlNzJlMzEtMzVkYy00ZTg5LTgwZWItYzEyZjEzNzBiMDQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjIcRU2dbUo50j5NE+ZegTgMEBZEIcydnSuTs G09PZzWuMzNvukctx5gCm4KDVSQWND4aHdHC4qyIGJvQqrpptuyufMtpJZYZBdMR EnKpvcMut5gqJCr7iBdQ/oUHktUMyGLWkW0tjiAMiJo2PvwvuK7cG08ZszxWMPty 8KHEWba249tBGxAbvQel/Iptp5/7peLechOtQtBFgiTTSYvQcVGpKTigR3RdwMmd Jqi5rdmoatWv9yYD79ey0qdSPrdpb+aox5t/Ylt27w+oHgOuwZJcwjbw3F1UmRYA bYrJ1rZlMhruguyWiYyFxy8EKyb2VRMHjXrUoWlAJQZr4WAyFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDE7ijTpXud1mgcsGFy1RVlDhnecMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDkyM2ZhYjUtNDIzZC0z Mzk2LTgyNjEtOGM5ZjRhZjk2MmU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACWy2vlXliFj13imaJNEUcGgYo/6+qdw36/FfZyXhVtD9tfGY2r/xVJS E7wotkJBDFfSN/rujtEkTryhAhgc3qHZbLp+8n+ssNTsXvFedHy6Drhhn2KdCjz/ f96pv0ekdIcy/pHgzpWrHnBQM/m+Hq5gzJLQMnPdmUnMPhdtWuSseGsMTU3Ay1Wt A9BpGXd/7YReNrtNlQHSavTQK7FRCIQ3bDINGFBF/0eP3ODy3oZT/xNREgck7YgG bZ7fMS1+KDiV8IEXF+BgxV39w3zWB4Qjqn3n9IUA1V56bSg4DuOQjF90A6lr8o69 vsc99z+2+UTUvHELsaqrJVA1fx9ZYY8= -----END CERTIFICATE-----Generated at Wed Feb 19 22:30:41 2025 by rpki-client