$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa File: 680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa (raw, json) Hash identifier: VXFcnoJjjXrcVXZ0kjFVkV0CeOfCYWaN+/UT9h34qmM= Subject key identifier: 6C:3C:9E:35:8B:48:04:37:7C:D2:BF:49:73:AF:DC:97:B3:B7:50:88 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A1227B999A808450BB60 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.35.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a1:22:7b:99:9a:80:84:50:bb:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=7d628375-e5e1-4446-89d4-340490fcd6d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:e3:58:1f:0f:e9:0d:a7:7b:3c:30:42:50:d8: 10:04:fc:c2:1f:19:a2:96:23:91:90:2a:7d:31:8c: 10:23:fd:1d:9c:5b:91:f5:78:81:ea:67:a1:9b:10: 8c:50:94:78:2d:cb:69:34:11:d8:fc:79:b0:86:b2: b5:bb:19:44:a1:69:f0:18:8b:2c:a9:31:d0:f3:68: bd:0d:ff:b8:b7:98:16:9c:b1:cf:e1:e5:3c:a2:a3: b6:2c:c1:81:88:f9:9b:e8:de:dd:db:5c:06:14:a2: e2:99:73:ff:b1:58:bf:6a:8b:9a:5c:1e:57:9c:22: 74:3e:64:d3:2e:97:d2:62:5c:62:ea:50:36:76:4e: 2b:1f:c5:29:a2:71:92:5c:ea:10:f4:34:30:76:4b: ba:5e:e1:e6:6a:49:f8:93:f0:5f:26:7e:10:4d:f5: 16:7b:8c:b6:03:57:53:7c:f9:7c:9b:30:4f:fb:05: 68:ee:56:ad:ff:94:74:6c:5a:9a:cd:d8:e9:cd:d9: 87:1f:15:db:90:4d:92:7e:0a:bc:f5:4a:ca:33:e2: 15:32:1d:38:db:a1:45:30:3e:a2:74:bf:03:a7:51: 3a:d7:b6:8a:6a:09:28:f9:cd:09:88:14:25:1c:73: 3b:69:e0:9f:06:74:5b:a7:d0:77:71:56:c3:79:c3: 71:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:3C:9E:35:8B:48:04:37:7C:D2:BF:49:73:AF:DC:97:B3:B7:50:88 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/680ebc27-259d-3d5b-95ef-0ded2fe3e8be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:fe:9d:ff:ea:02:8d:ce:0f:e1:d4:7d:e9:c3:23:d6:de:f1: b1:2a:dd:9a:3d:6b:33:8e:2c:34:5c:96:d5:35:4e:19:e8:f9: 75:04:7b:81:e7:a5:bf:ed:59:fd:fd:3e:e6:8a:9f:0d:32:8e: 0d:59:01:07:c9:ac:60:81:8f:75:6f:51:1a:4b:2e:f6:06:e5: a9:67:a0:a9:3b:50:5d:99:0d:0c:78:d3:46:5a:82:04:0f:85: e1:7f:70:af:ae:1b:c1:d0:7f:2b:09:05:d4:17:38:60:f6:be: 2f:50:4a:9f:77:13:82:d7:61:2c:1c:f4:d1:20:34:3b:25:cc: f5:44:25:40:28:1f:94:dc:d7:d3:51:20:80:c0:88:70:7c:f1: c5:3f:92:99:79:f0:de:a1:5c:a7:4a:06:f1:34:84:52:b8:a1: fc:da:76:41:71:68:e6:81:36:9a:8b:ea:a1:88:8d:46:1f:d3: 70:56:bb:f7:5f:9c:d5:87:9a:6e:3f:91:1a:53:76:78:f4:fd: 90:45:07:41:fb:e2:05:d5:38:53:07:6b:af:ad:3f:53:40:05: b7:0c:85:7a:d4:0d:58:12:67:bd:e3:83:da:24:c5:2f:4b:15: 92:3f:17:b1:a9:c6:20:00:ce:35:b2:c5:21:2c:da:26:05:28: d7:24:57:f6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKEie5magIRQu2AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk N2Q2MjgzNzUtZTVlMS00NDQ2LTg5ZDQtMzQwNDkwZmNkNmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoONYHw/pDad7PDBCUNgQBPzCHxmiliORkCp9 MYwQI/0dnFuR9XiB6mehmxCMUJR4LctpNBHY/HmwhrK1uxlEoWnwGIssqTHQ82i9 Df+4t5gWnLHP4eU8oqO2LMGBiPmb6N7d21wGFKLimXP/sVi/aouaXB5XnCJ0PmTT LpfSYlxi6lA2dk4rH8UponGSXOoQ9DQwdku6XuHmakn4k/BfJn4QTfUWe4y2A1dT fPl8mzBP+wVo7lat/5R0bFqazdjpzdmHHxXbkE2Sfgq89UrKM+IVMh0426FFMD6i dL8Dp1E617aKagko+c0JiBQlHHM7aeCfBnRbp9B3cVbDecNxDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGw8njWLSAQ3fNK/SXOv3Jezt1CIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNjgwZWJjMjctMjU5ZC0z ZDViLTk1ZWYtMGRlZDJmZTNlOGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEr+nf/qAo3OD+HUfenDI9be8bEq3Zo9azOOLDRcltU1Thno+XUEe4Hn pb/tWf39PuaKnw0yjg1ZAQfJrGCBj3VvURpLLvYG5alnoKk7UF2ZDQx400ZaggQP heF/cK+uG8HQfysJBdQXOGD2vi9QSp93E4LXYSwc9NEgNDslzPVEJUAoH5Tc19NR IIDAiHB88cU/kpl58N6hXKdKBvE0hFK4ofzadkFxaOaBNpqL6qGIjUYf03BWu/df nNWHmm4/kRpTdnj0/ZBFB0H74gXVOFMHa6+tP1NABbcMhXrUDVgSZ73jg9okxS9L FZI/F7GpxiAAzjWyxSEs2iYFKNckV/Y= -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:56 2025 by rpki-client