$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/567740fb-1f76-363c-ba76-cce13a4bbdc2.roa File: 567740fb-1f76-363c-ba76-cce13a4bbdc2.roa (raw, json) Hash identifier: Y1HTgT63cdHBvL0mkrctB2kVJNpO0PmtnAZoLULN6kQ= Subject key identifier: EB:6F:C5:54:DF:EC:16:AA:68:32:04:8A:29:E6:D6:5E:8E:F7:1D:B9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A6CFE77E9ACCE9F97E80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/567740fb-1f76-363c-ba76-cce13a4bbdc2.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.56.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a6:cf:e7:7e:9a:cc:e9:f9:7e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=cf87a798-302a-4436-805f-d9096f0242d1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:72:ec:77:cf:77:6d:91:a9:de:1b:35:57:9d: 34:92:3a:40:f5:1e:34:da:db:d0:57:5e:d9:cb:1a: db:e0:57:e4:af:03:54:b1:a1:d3:df:06:84:a2:a7: b1:df:ea:c4:33:26:58:fc:05:6c:57:08:bb:66:0a: a1:25:70:8c:44:50:85:d5:bb:ac:6d:aa:bd:4e:30: ad:86:e1:46:ef:2a:90:e2:57:bf:d6:b8:d4:dd:d4: 1f:c2:a9:95:34:d9:ef:86:c5:d9:67:54:a4:66:30: 37:fa:64:c9:f0:3d:62:af:6d:b9:1c:4e:c1:fd:f6: 02:c7:d5:77:9d:dc:5d:d9:a0:30:db:0c:0d:f3:cc: 5f:c3:86:ae:99:72:0b:eb:cd:53:c8:12:77:fc:53: 92:e4:a8:0a:75:ae:9a:63:c7:3e:e8:d5:fb:bc:35: d0:9d:53:4e:c5:b1:6d:dc:24:c8:05:7d:e8:99:0f: 60:03:ae:38:aa:b9:8a:f0:20:92:42:22:be:76:ee: 1b:5b:91:19:c8:04:39:f6:bb:cd:c4:0a:1d:13:2f: d4:ea:60:e1:11:40:33:22:1f:6b:7b:3f:05:7e:6e: 36:2f:05:df:6c:33:62:1f:a1:83:c8:05:41:46:43: c0:ec:e6:c4:6c:b4:63:d7:98:e8:41:5d:c5:38:0f: 77:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:6F:C5:54:DF:EC:16:AA:68:32:04:8A:29:E6:D6:5E:8E:F7:1D:B9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/567740fb-1f76-363c-ba76-cce13a4bbdc2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:6e:21:37:32:d7:b1:c2:a8:9d:63:6e:9c:6c:37:28:21:b9: f1:14:a9:b7:20:c6:b2:f9:4a:76:f6:5c:0a:d7:3d:e3:12:c7: cb:09:d9:bf:89:2c:7f:00:80:51:ff:cc:b8:a1:88:3d:5a:d0: ea:e2:11:ab:70:0f:eb:99:cf:af:b7:cb:ba:f2:5c:78:9f:bb: 2b:db:c7:9f:76:e8:89:6c:b4:7b:e8:32:c3:60:90:73:44:a4: 06:0a:06:ff:be:d4:40:69:1d:6d:b5:58:6a:9c:a5:63:c1:6d: d0:70:bc:23:30:a2:e0:25:d1:9d:96:69:f1:44:52:62:be:27: 4c:cf:45:6e:86:64:3f:3b:71:c4:08:e5:79:5f:53:d1:f2:df: 47:12:f6:e4:26:83:41:b1:64:9d:18:4d:56:93:c4:17:61:ba: 97:41:b5:f7:96:f6:f8:dc:b6:1d:8f:cf:83:33:73:e8:f9:da: d8:29:b7:51:08:de:78:91:4b:d5:24:f1:c1:f8:c1:13:6d:30: d9:c4:88:46:be:71:e9:13:a6:d5:15:d7:07:18:d8:db:5a:74: a6:20:d9:be:0f:78:dc:e5:5c:27:fe:4a:60:7c:5a:62:67:97: 16:4f:49:48:9d:34:e8:7a:fd:73:fe:07:7b:43:24:43:0b:32: b5:e9:f0:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKbP536azOn5foAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk Y2Y4N2E3OTgtMzAyYS00NDM2LTgwNWYtZDkwOTZmMDI0MmQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk3Lsd893bZGp3hs1V500kjpA9R402tvQV17Z yxrb4FfkrwNUsaHT3waEoqex3+rEMyZY/AVsVwi7ZgqhJXCMRFCF1busbaq9TjCt huFG7yqQ4le/1rjU3dQfwqmVNNnvhsXZZ1SkZjA3+mTJ8D1ir225HE7B/fYCx9V3 ndxd2aAw2wwN88xfw4aumXIL681TyBJ3/FOS5KgKda6aY8c+6NX7vDXQnVNOxbFt 3CTIBX3omQ9gA644qrmK8CCSQiK+du4bW5EZyAQ59rvNxAodEy/U6mDhEUAzIh9r ez8Ffm42LwXfbDNiH6GDyAVBRkPA7ObEbLRj15joQV3FOA933QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOtvxVTf7BaqaDIEiinm1l6O9x25MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNTY3NzQwZmItMWY3Ni0z NjNjLWJhNzYtY2NlMTNhNGJiZGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDggMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJpuITcy17HCqJ1jbpxsNyghufEUqbcgxrL5Snb2XArXPeMSx8sJ2b+J LH8AgFH/zLihiD1a0OriEatwD+uZz6+3y7ryXHifuyvbx5926IlstHvoMsNgkHNE pAYKBv++1EBpHW21WGqcpWPBbdBwvCMwouAl0Z2WafFEUmK+J0zPRW6GZD87ccQI 5XlfU9Hy30cS9uQmg0GxZJ0YTVaTxBdhupdBtfeW9vjcth2Pz4Mzc+j52tgpt1EI 3niRS9Uk8cH4wRNtMNnEiEa+cekTptUV1wcY2NtadKYg2b4PeNzlXCf+SmB8WmJn lxZPSUidNOh6/XP+B3tDJEMLMrXp8D0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:40 2025 by rpki-client