$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa File: 559275c7-d502-32c7-83b9-37204f3e27b2.roa (raw, json) Hash identifier: ffEdhYdREIJdGGrP6XcF8v0z/vuexelRP8ZV+HqrX9M= Subject key identifier: 5F:EC:AC:32:4D:DA:B8:11:47:8B:C3:86:FE:62:4B:0E:97:B2:27:09 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A3189FC92BAB14CEE11146C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.46.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:9f:c9:2b:ab:14:ce:e1:11:46:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=1b1d6fa1-5668-4924-953f-6095e9da6e86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a2:94:a5:6b:99:c4:78:d1:3f:1c:b1:bd:d3: 42:6e:ef:79:27:d9:32:4c:83:a4:9c:17:d7:1c:9a: ff:82:2e:43:3b:5a:dd:9f:a2:66:28:ab:45:61:59: b2:a5:18:f3:3d:3b:b5:8f:15:b9:c4:26:be:da:26: 8a:26:09:81:2a:0f:60:0d:a3:df:64:71:67:d5:30: 42:75:22:1f:6b:fe:a0:05:be:18:95:18:97:b0:eb: 5a:fb:65:9b:d3:c4:74:67:74:dd:b7:d6:38:86:55: d9:19:05:e5:21:b5:90:da:fc:cc:07:9c:68:ec:75: f8:af:54:cf:a3:12:59:54:ec:de:5c:de:6f:ff:49: 96:db:97:df:d7:78:33:4f:15:d8:37:62:99:b4:c7: 0d:39:3f:bd:fa:55:1d:c9:84:c9:d3:a6:c4:e1:4e: ef:81:2d:b1:69:eb:59:26:b3:7b:cf:c7:b8:2a:07: e9:fc:74:f4:1d:36:41:f2:2b:c4:4b:d8:12:59:04: 5f:43:63:da:42:2a:7b:95:ee:32:88:c2:98:e9:f7: 04:f8:91:25:c4:5a:2e:5e:ea:ff:cb:5f:00:9d:f3: d7:40:71:e4:20:03:f8:b1:3b:05:dc:19:2d:ad:f1: 25:f1:75:39:f7:9b:f9:19:4a:a1:22:ca:59:7d:ed: ea:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:EC:AC:32:4D:DA:B8:11:47:8B:C3:86:FE:62:4B:0E:97:B2:27:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/559275c7-d502-32c7-83b9-37204f3e27b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:2f:29:5c:2b:bc:b9:c8:33:f6:24:0a:42:61:c2:3d:39:74: a5:ce:e4:b2:8d:76:a5:d3:cf:8d:94:cb:dd:24:fa:d6:23:b8: 89:fb:58:21:ef:8d:ee:f1:4e:f7:91:99:b2:f5:c1:2f:06:9e: 1c:8e:0c:0f:26:14:74:5b:c7:44:02:35:cc:f0:3e:6e:65:10: db:9d:cf:9a:0a:54:54:f2:6c:bf:13:b5:9e:37:f3:78:6c:78: 24:8a:05:e0:84:52:69:f9:85:5b:7f:de:1a:ab:8a:10:25:17: 79:cf:3f:61:b0:9d:14:ec:82:7b:1b:d6:45:fb:4a:f6:18:a1: 9f:42:d6:ae:a4:fe:90:28:72:e2:42:d2:fa:27:a0:e7:ef:8d: 96:83:8a:f5:99:14:3b:1b:ec:ac:2f:42:e8:3c:5e:a3:3c:0f: 87:9b:a8:29:01:09:6f:39:92:3e:45:0a:e3:86:37:b7:fc:20: 1c:1d:c8:5c:fe:b3:f2:45:bf:de:34:1a:c5:45:ae:c9:6a:9d: 4d:ca:fa:9f:4e:c1:f0:e2:b0:90:41:10:83:b8:be:84:3f:66: 28:34:ec:c0:f3:6f:5e:58:3b:93:c0:95:80:52:8d:7c:38:ce: 54:40:58:0c:10:2c:7a:77:04:43:f7:ac:34:72:bc:19:a7:05: 6d:e7:66:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGJ/JK6sUzuERRsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk MWIxZDZmYTEtNTY2OC00OTI0LTk1M2YtNjA5NWU5ZGE2ZTg2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6KUpWuZxHjRPxyxvdNCbu95J9kyTIOknBfX HJr/gi5DO1rdn6JmKKtFYVmypRjzPTu1jxW5xCa+2iaKJgmBKg9gDaPfZHFn1TBC dSIfa/6gBb4YlRiXsOta+2Wb08R0Z3Tdt9Y4hlXZGQXlIbWQ2vzMB5xo7HX4r1TP oxJZVOzeXN5v/0mW25ff13gzTxXYN2KZtMcNOT+9+lUdyYTJ06bE4U7vgS2xaetZ JrN7z8e4Kgfp/HT0HTZB8ivES9gSWQRfQ2PaQip7le4yiMKY6fcE+JElxFouXur/ y18AnfPXQHHkIAP4sTsF3BktrfEl8XU595v5GUqhIspZfe3qeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF/srDJN2rgRR4vDhv5iSw6XsicJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTU5Mjc1YzctZDUwMi0z MmM3LTgzYjktMzcyMDRmM2UyN2IyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC6QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADYvKVwrvLnIM/YkCkJhwj05dKXO5LKNdqXTz42Uy90k+tYjuIn7WCHv je7xTveRmbL1wS8GnhyODA8mFHRbx0QCNczwPm5lENudz5oKVFTybL8TtZ4383hs eCSKBeCEUmn5hVt/3hqrihAlF3nPP2GwnRTsgnsb1kX7SvYYoZ9C1q6k/pAocuJC 0vonoOfvjZaDivWZFDsb7KwvQug8XqM8D4ebqCkBCW85kj5FCuOGN7f8IBwdyFz+ s/JFv940GsVFrslqnU3K+p9OwfDisJBBEIO4voQ/Zig07MDzb15YO5PAlYBSjXw4 zlRAWAwQLHp3BEP3rDRyvBmnBW3nZlE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:53 2025 by rpki-client