$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa File: 5b456bf4-139a-3442-9f58-1b5e542b743e.roa (raw, json) Hash identifier: S+dgGP6XnXFndWy1fQGeF2gGWEpAW5REd6i6Bkj5oWE= Subject key identifier: F5:2E:58:16:7B:4C:0B:07:55:15:6D:C1:7C:4D:52:28:76:6F:C2:2C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AA7C6AF23AF62F6813C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.62.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:aa:7c:6a:f2:3a:f6:2f:68:13:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=a179e966-aad6-46e4-8339-1da9d0d91b14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:11:56:d5:d8:13:cc:39:eb:2c:8d:dd:8e:0d: 36:fe:7e:7a:b7:46:2e:8d:24:3c:11:cf:08:a7:3d: ca:a7:98:cb:92:64:75:0a:ad:d1:9a:81:ed:36:70: 9e:38:70:63:30:96:bb:af:b3:ea:53:3f:86:7d:f7: 1b:0f:a6:23:e4:f3:73:d4:30:d5:f4:65:54:a0:23: be:dc:a3:2c:6a:f6:06:2a:3a:f2:9c:ea:2c:c9:bf: 4d:9f:39:7d:33:61:df:bc:5d:f6:a6:31:e9:59:97: 22:4b:de:ea:36:ad:ec:70:f1:96:4a:6b:0c:8a:80: 3d:9d:c0:25:b7:fe:3f:85:a5:b4:40:43:45:86:0b: dc:29:72:eb:11:96:f8:dc:ba:ae:07:34:6c:a0:8a: bb:c1:5b:c5:6f:15:21:56:18:c2:2b:88:da:1e:dd: 86:40:1d:bd:e3:22:15:e7:68:30:29:91:8d:c6:92: 6f:46:2c:d7:95:18:4c:22:62:19:ef:3a:ff:c7:c8: 52:8f:ca:e1:0b:d8:4c:df:0d:c3:d6:90:f3:a4:fd: 75:c5:98:dc:7a:bb:cd:c9:6f:8e:88:4e:dc:4d:a9: 00:28:d0:f5:2b:a9:de:dd:1e:ac:5f:96:30:5f:79: 57:0f:e2:24:67:6d:2d:d7:f9:06:06:44:ea:08:93: a5:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:2E:58:16:7B:4C:0B:07:55:15:6D:C1:7C:4D:52:28:76:6F:C2:2C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/5b456bf4-139a-3442-9f58-1b5e542b743e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:71:88:2d:39:d0:78:be:f4:88:0d:a9:01:a4:9a:3e:6c:35: 86:7a:ad:fd:a2:10:fd:06:d2:4a:eb:6e:ff:d5:0d:1f:92:3e: 59:b2:91:66:9d:65:4d:12:16:7a:e6:86:f6:e1:86:9a:05:cd: 88:2b:b0:4f:59:ad:fc:6e:a6:4c:19:a4:d2:de:7b:36:14:15: 83:89:50:fc:ac:62:f7:5d:c4:14:e0:48:25:09:f4:eb:4d:94: 32:7d:99:5d:01:a2:b3:88:9e:69:af:e6:08:41:8f:6a:78:8c: 13:ff:bb:4f:f2:2a:04:df:f5:2b:d5:00:89:a3:12:1b:94:b7: 91:ff:20:ea:7e:ac:f7:18:23:ee:08:96:06:79:dc:e8:4f:6b: a6:81:f4:bd:f2:80:f8:20:72:56:71:d4:4d:bb:37:fd:f6:a5: 0c:e9:cc:32:84:7b:55:78:07:82:e2:62:60:ac:27:30:48:fe: d4:81:c6:e3:41:0d:67:c9:22:13:ee:99:da:31:ae:be:d2:0b: 0f:e8:93:3e:67:bd:2f:c9:ea:12:e1:33:4a:81:bc:d8:2d:4b: 98:da:92:58:17:d1:55:30:27:ce:41:b2:90:25:0e:4d:a6:9a: 57:be:3e:00:04:28:f1:ae:93:db:43:a6:fd:01:ce:36:f3:0e: bc:fe:42:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKp8avI69i9oE8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk YTE3OWU5NjYtYWFkNi00NmU0LTgzMzktMWRhOWQwZDkxYjE0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBFW1dgTzDnrLI3djg02/n56t0YujSQ8Ec8I pz3Kp5jLkmR1Cq3RmoHtNnCeOHBjMJa7r7PqUz+GffcbD6Yj5PNz1DDV9GVUoCO+ 3KMsavYGKjrynOosyb9Nnzl9M2HfvF32pjHpWZciS97qNq3scPGWSmsMioA9ncAl t/4/haW0QENFhgvcKXLrEZb43LquBzRsoIq7wVvFbxUhVhjCK4jaHt2GQB294yIV 52gwKZGNxpJvRizXlRhMImIZ7zr/x8hSj8rhC9hM3w3D1pDzpP11xZjcervNyW+O iE7cTakAKND1K6ne3R6sX5YwX3lXD+IkZ20t1/kGBkTqCJOl2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPUuWBZ7TAsHVRVtwXxNUih2b8IsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNWI0NTZiZjQtMTM5YS0z NDQyLTlmNTgtMWI1ZTU0MmI3NDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFxxiC050Hi+9IgNqQGkmj5sNYZ6rf2iEP0G0krrbv/VDR+SPlmykWad ZU0SFnrmhvbhhpoFzYgrsE9ZrfxupkwZpNLeezYUFYOJUPysYvddxBTgSCUJ9OtN lDJ9mV0BorOInmmv5ghBj2p4jBP/u0/yKgTf9SvVAImjEhuUt5H/IOp+rPcYI+4I lgZ53OhPa6aB9L3ygPggclZx1E27N/32pQzpzDKEe1V4B4LiYmCsJzBI/tSBxuNB DWfJIhPumdoxrr7SCw/okz5nvS/J6hLhM0qBvNgtS5jaklgX0VUwJ85BspAlDk2m mle+PgAEKPGuk9tDpv0BzjbzDrz+QkE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:43:10 2025 by rpki-client