$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa File: 52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa (raw, json) Hash identifier: /yZREWnhyr0tJF2G3Kd5HRI7ezD2phi1vLovpLQwb08= Subject key identifier: ED:87:7E:E2:2D:17:8A:1E:7C:1E:53:0E:5E:00:38:D9:66:94:FA:6A Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A9A169D930CD18546940 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa Signing time: Thu 23 Jan 2025 06:13:20 +0000 ROA not before: Thu 23 Jan 2025 06:13:20 +0000 ROA not after: Wed 23 Apr 2025 05:13:20 +0000 asID: 16591 IP address blocks: 136.59.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a9:a1:69:d9:30:cd:18:54:69:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:20 2025 GMT Not After : Apr 23 05:13:20 2025 GMT Subject: CN=5d7ca248-3e14-4165-b49e-899f8e2b9842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c1:e5:76:80:25:67:b4:b3:69:52:4c:0f:50: f0:ca:37:de:64:e4:cc:6e:67:d2:da:75:04:31:ae: e2:cc:66:01:82:ee:d3:4d:16:e9:4a:6f:63:8b:ac: 19:7e:db:8f:02:ad:7e:16:a3:ed:76:69:43:f2:31: 35:4a:1c:e8:58:24:fd:1e:92:22:69:44:d7:0d:c6: 8b:26:7c:a5:34:7b:52:27:17:68:15:e7:f8:74:6d: 8b:f9:e9:e7:51:b4:8e:ea:8f:45:8e:24:d8:7d:34: 44:6e:39:33:7c:71:eb:e2:bc:48:bf:d3:51:d8:ed: d1:f8:5c:0e:97:60:fb:db:be:f9:1e:f5:37:72:c8: 59:79:0d:ba:3d:0f:c5:1d:6e:a5:ea:7c:41:4d:fc: 7e:fb:35:33:19:05:9f:31:28:9f:25:c9:40:a6:33: d2:3e:29:1c:3e:23:33:e4:26:98:75:5e:e5:de:7f: ca:dd:ca:78:ac:2d:5f:71:f8:57:28:d7:ea:5e:e0: 92:8c:e4:5c:7b:13:04:96:36:9b:68:60:55:c6:34: 38:8b:01:a1:19:f5:7e:74:df:4c:7f:f4:e8:6c:9c: 62:84:a4:7e:d9:1c:d8:df:3c:47:62:0e:20:80:c3: 85:90:55:4b:8c:e7:b8:81:31:8f:c1:24:85:7f:07: f4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:87:7E:E2:2D:17:8A:1E:7C:1E:53:0E:5E:00:38:D9:66:94:FA:6A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/52f4d093-e1f7-320d-a2d5-c6ade4cec791.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.59.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:14:c4:bf:26:ce:c2:9d:4c:5f:c0:4a:e5:c8:e7:f5:44:3b: 31:58:6d:82:f5:35:71:a5:03:0e:ea:e2:dc:7c:cb:c8:ac:43: e6:62:50:9b:b5:2d:42:b0:e0:c7:a5:28:df:ba:ef:5a:00:e2: 27:8c:f8:b2:ec:b6:99:b5:3b:7b:2b:36:ff:aa:39:a1:42:33: 7e:67:a8:0d:f6:ed:be:f6:82:94:00:d5:d2:a7:2a:c9:b6:1d: 3a:4d:9d:98:ec:17:a9:57:f6:3f:65:14:f2:b4:1f:72:d5:e6: f7:9d:bb:e1:95:7b:d8:29:b7:ef:6d:5a:d5:d0:ae:0f:4e:be: 05:1f:72:31:46:f3:e8:b0:1f:99:5a:24:cf:dd:28:52:49:19: a3:6a:24:7a:8b:ff:54:70:e7:d5:7e:fb:08:0a:f3:dc:8b:ec: 57:25:59:a2:51:3e:0e:ab:6b:45:6d:7b:66:03:ac:a9:98:5c: 23:fd:90:0c:fd:94:64:a6:43:88:85:a0:09:33:2d:1b:ec:9a: 9b:27:9e:5e:a9:97:a8:22:5b:e6:f7:cb:10:c2:d4:21:e9:8a: 1a:e3:a5:53:0a:0d:b1:cb:37:c6:fe:7e:7b:b7:9d:2a:89:7c: e4:b3:4b:a6:91:56:40:77:89:0f:6f:0c:fd:de:35:60:d8:36: ea:78:bd:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKmhadkwzRhUaUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMFoXDTI1MDQyMzA1MTMyMFowLzEtMCsGA1UEAxMk NWQ3Y2EyNDgtM2UxNC00MTY1LWI0OWUtODk5ZjhlMmI5ODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsHldoAlZ7SzaVJMD1DwyjfeZOTMbmfS2nUE Ma7izGYBgu7TTRbpSm9ji6wZftuPAq1+FqPtdmlD8jE1ShzoWCT9HpIiaUTXDcaL JnylNHtSJxdoFef4dG2L+ennUbSO6o9FjiTYfTREbjkzfHHr4rxIv9NR2O3R+FwO l2D72775HvU3cshZeQ26PQ/FHW6l6nxBTfx++zUzGQWfMSifJclApjPSPikcPiMz 5CaYdV7l3n/K3cp4rC1fcfhXKNfqXuCSjORcexMEljabaGBVxjQ4iwGhGfV+dN9M f/TobJxihKR+2RzY3zxHYg4ggMOFkFVLjOe4gTGPwSSFfwf09wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO2HfuItF4oefB5TDl4AONlmlPpqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTJmNGQwOTMtZTFmNy0z MjBkLWEyZDUtYzZhZGU0Y2VjNzkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDsQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGAUxL8mzsKdTF/ASuXI5/VEOzFYbYL1NXGlAw7q4tx8y8isQ+ZiUJu1 LUKw4MelKN+671oA4ieM+LLstpm1O3srNv+qOaFCM35nqA327b72gpQA1dKnKsm2 HTpNnZjsF6lX9j9lFPK0H3LV5vedu+GVe9gpt+9tWtXQrg9OvgUfcjFG8+iwH5la JM/dKFJJGaNqJHqL/1Rw59V++wgK89yL7FclWaJRPg6ra0Vte2YDrKmYXCP9kAz9 lGSmQ4iFoAkzLRvsmpsnnl6pl6giW+b3yxDC1CHpihrjpVMKDbHLN8b+fnu3nSqJ fOSzS6aRVkB3iQ9vDP3eNWDYNup4vag= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:14 2025 by rpki-client