$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa File: 642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa (raw, json) Hash identifier: yvLK6wlXmxOwijqVq7fKd9ASJe1wIJrBx+UPAcnm3fw= Subject key identifier: 2A:C6:5F:97:26:F9:A5:B0:EC:F0:0B:92:73:DD:82:75:7C:EE:1D:27 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AAD104A5A4C185C09500 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.35.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:aa:d1:04:a5:a4:c1:85:c0:95:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=941f162c-4adc-4702-bcf0-0309bb46977e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7f:24:8e:26:be:51:f9:0e:89:e6:ae:2e:b3: 88:01:43:4b:66:b8:48:a1:66:db:0d:38:7a:b8:b9: fd:69:3c:9a:cb:87:1f:0b:2a:be:6e:94:9e:b2:bf: f9:ae:8e:c9:90:de:6b:a6:ca:b4:18:d1:be:4a:23: 23:13:4e:07:0b:95:f4:a3:41:4f:b7:ce:3b:8b:1a: 66:a2:f7:3d:2e:54:85:ad:c6:09:6a:36:c2:2f:23: aa:3c:3f:29:c2:e8:d3:f2:28:66:a5:b6:e8:f9:9d: 92:96:4a:fd:cc:25:54:8d:d0:bf:63:c1:72:eb:bf: c0:6b:de:a6:b6:59:a3:62:6a:6b:b9:f6:8e:de:2f: 9a:c6:84:f1:30:f5:78:86:9e:8d:fa:c1:b8:68:40: eb:89:5f:16:73:05:b8:e9:8c:7a:25:0c:3f:37:93: 9f:81:8d:62:b5:04:fd:48:a1:4f:fa:67:db:5b:03: af:dd:ed:2b:87:80:8a:6b:be:10:0e:be:c8:07:fa: 8e:7a:db:fe:9f:ab:05:3f:d1:8f:22:d4:ec:6a:df: 84:f2:2f:79:93:3c:ea:59:72:c4:ef:73:21:e7:09: 1e:0d:cd:a3:1a:a5:87:fb:15:fb:79:61:2d:22:cc: e8:ea:17:9e:2c:a8:ac:9e:1d:d0:2c:4e:5f:ec:c8: 94:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:C6:5F:97:26:F9:A5:B0:EC:F0:0B:92:73:DD:82:75:7C:EE:1D:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/642928de-dbc1-326a-9a3b-fc9fc9cbd139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:5e:b9:e6:1f:2c:a4:51:2d:c3:da:dd:dc:a4:4d:59:c9:08: d1:e0:18:d1:44:b1:23:10:4f:1e:0e:8c:7e:84:3a:38:ee:89: a6:94:10:fc:33:39:4f:c1:ba:7d:47:19:d4:9f:30:20:ea:93: a8:97:c3:40:e3:bd:78:6c:b2:0e:10:85:0c:a4:27:ec:93:57: 97:b3:44:7b:f5:92:9b:36:4b:c1:f1:7f:70:f4:67:64:a3:71: d2:e7:c7:f9:5d:eb:ae:34:98:97:d4:ff:76:c4:f1:1f:8f:be: 8c:ba:e8:1d:c8:36:d8:ab:84:90:69:83:73:cb:72:e5:f5:52: 2c:ef:f1:80:9d:17:b5:1b:7b:d3:b8:b1:2e:c5:8c:3a:4a:35: d4:25:19:b5:90:f3:50:db:99:5b:81:83:08:a8:6b:c6:c1:0c: ae:5f:0d:06:ad:50:45:a5:10:1d:ee:2c:fa:c6:76:25:52:90: 09:53:cc:1c:f4:3c:29:14:eb:cc:75:22:58:4c:15:b8:4c:f4: 7b:9b:1a:54:2c:14:72:fe:04:b3:7e:e2:49:7d:51:f7:8a:56: c9:9a:14:d5:1e:1b:54:63:fa:50:cd:d6:39:47:4d:fc:72:7e: 92:f7:83:dc:7b:13:75:5a:b2:e0:30:bd:13:6d:e3:4c:8d:b0: 78:a9:81:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKrRBKWkwYXAlQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk OTQxZjE2MmMtNGFkYy00NzAyLWJjZjAtMDMwOWJiNDY5NzdlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhH8kjia+UfkOieauLrOIAUNLZrhIoWbbDTh6 uLn9aTyay4cfCyq+bpSesr/5ro7JkN5rpsq0GNG+SiMjE04HC5X0o0FPt847ixpm ovc9LlSFrcYJajbCLyOqPD8pwujT8ihmpbbo+Z2Slkr9zCVUjdC/Y8Fy67/Aa96m tlmjYmprufaO3i+axoTxMPV4hp6N+sG4aEDriV8WcwW46Yx6JQw/N5OfgY1itQT9 SKFP+mfbWwOv3e0rh4CKa74QDr7IB/qOetv+n6sFP9GPItTsat+E8i95kzzqWXLE 73Mh5wkeDc2jGqWH+xX7eWEtIszo6heeLKisnh3QLE5f7MiU8QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCrGX5cm+aWw7PALknPdgnV87h0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjQyOTI4ZGUtZGJjMS0z MjZhLTlhM2ItZmM5ZmM5Y2JkMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADteueYfLKRRLcPa3dykTVnJCNHgGNFEsSMQTx4OjH6EOjjuiaaUEPwz OU/Bun1HGdSfMCDqk6iXw0DjvXhssg4QhQykJ+yTV5ezRHv1kps2S8Hxf3D0Z2Sj cdLnx/ld6640mJfU/3bE8R+Pvoy66B3INtirhJBpg3PLcuX1Uizv8YCdF7Ube9O4 sS7FjDpKNdQlGbWQ81DbmVuBgwioa8bBDK5fDQatUEWlEB3uLPrGdiVSkAlTzBz0 PCkU68x1IlhMFbhM9HubGlQsFHL+BLN+4kl9UfeKVsmaFNUeG1Rj+lDN1jlHTfxy fpL3g9x7E3VasuAwvRNt40yNsHipgTQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:16 2025 by rpki-client