$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: qwtPZD3VVQ0Z0q+t24Ng7m+1qBBFNSUiozpFlDrqJ8M= Subject key identifier: F5:47:7F:4B:DE:7D:D7:BA:9F:E5:59:47:C8:A7:A0:F5:EC:DE:58:49 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A45D38D9D2612BFEA200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Thu 23 Jan 2025 06:13:18 +0000 ROA not before: Thu 23 Jan 2025 06:13:18 +0000 ROA not after: Wed 23 Apr 2025 05:13:18 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a4:5d:38:d9:d2:61:2b:fe:a2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:18 2025 GMT Not After : Apr 23 05:13:18 2025 GMT Subject: CN=d8b93dee-41e7-49e1-84dc-8f44fa831172 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:18:1e:45:2c:34:32:ac:b7:f3:8c:25:b7:f9: f2:66:1b:8e:94:11:e1:bc:0c:4b:7d:d7:97:cf:79: e8:3a:ae:6c:d0:f7:5d:11:6b:ce:45:a8:ad:75:05: 65:78:f8:e8:28:84:0c:65:fc:b0:7b:e5:14:c8:bf: f6:f7:fb:72:5a:91:8f:cb:2a:60:82:b7:d2:53:ea: 3e:05:0d:a4:22:01:97:10:3a:f2:46:85:77:d4:a3: f8:61:1c:e1:95:8c:0f:63:49:6e:a0:52:2a:45:c9: a9:95:fa:8a:c9:1b:85:b2:bb:ba:4c:1f:93:9e:b1: e5:f0:54:dd:fa:06:f8:85:15:f2:fb:d3:ba:d1:15: 9a:43:24:01:f9:4a:c6:bc:c3:4f:ec:90:44:17:5a: 5b:0c:a7:48:af:54:b7:ac:86:5a:e3:99:02:47:3d: 8b:e4:84:55:8b:9e:47:1c:3f:36:52:b7:e0:d5:4e: 57:3b:d6:ea:32:a1:33:19:56:55:28:48:4f:14:42: bd:d1:59:50:30:dc:50:d4:05:1e:a4:2f:51:52:22: 93:73:73:78:89:aa:dc:86:55:c9:4a:8b:e9:8f:72: 83:51:26:a9:74:6c:e3:76:6b:ef:a4:89:7d:e2:01: 11:2a:d2:e8:d5:b0:31:3e:c0:cf:53:40:e2:bf:c1: f8:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:47:7F:4B:DE:7D:D7:BA:9F:E5:59:47:C8:A7:A0:F5:EC:DE:58:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:c3:25:74:a1:4c:04:5a:e5:f6:de:c2:06:fb:e7:05:0d:ef: 78:c3:5e:3c:dd:36:6c:b0:1d:be:d3:9f:bb:2a:6f:b5:11:15: 10:d4:4e:7a:e5:f0:7c:7d:4f:31:6c:63:d6:c5:ea:e2:8c:09: 2e:c9:97:d2:28:a0:d3:a6:52:86:ed:8f:77:2d:69:cf:9d:45: 8d:05:50:1b:b6:b6:d0:30:aa:bf:ee:ee:67:3c:ed:01:a9:a3: 5e:fc:d2:3f:33:74:31:e2:51:bc:f4:09:33:b7:9e:8b:de:25: d0:1b:31:a4:e2:9a:67:b8:67:5e:94:f1:b0:53:b3:82:62:c4: f2:97:1b:94:c6:f7:f6:c0:0e:3f:96:eb:31:57:44:6b:48:76: 0c:b7:9e:a7:8f:13:ed:67:e5:0d:f5:9a:a6:3b:08:96:e6:39: 44:68:e9:5f:50:84:1e:a6:5d:11:a4:27:05:9d:62:9d:ac:87: 0c:d6:9c:10:1a:e2:50:fd:22:ef:95:fa:b1:21:7a:08:50:94: 25:69:02:48:40:f0:54:98:9c:8f:5e:0e:d3:7f:02:93:91:9f: 8e:6f:ab:cf:33:31:74:40:fc:93:34:51:de:e4:71:6f:6d:d8: bc:f7:0f:5d:ab:18:da:32:93:d3:bc:9e:cf:78:48:b3:32:8a: f3:ab:f1:2a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKRdONnSYSv+ogAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk ZDhiOTNkZWUtNDFlNy00OWUxLTg0ZGMtOGY0NGZhODMxMTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4RgeRSw0Mqy384wlt/nyZhuOlBHhvAxLfdeX z3noOq5s0PddEWvORaitdQVlePjoKIQMZfywe+UUyL/29/tyWpGPyypggrfSU+o+ BQ2kIgGXEDryRoV31KP4YRzhlYwPY0luoFIqRcmplfqKyRuFsru6TB+TnrHl8FTd +gb4hRXy+9O60RWaQyQB+UrGvMNP7JBEF1pbDKdIr1S3rIZa45kCRz2L5IRVi55H HD82Urfg1U5XO9bqMqEzGVZVKEhPFEK90VlQMNxQ1AUepC9RUiKTc3N4iarchlXJ Sovpj3KDUSapdGzjdmvvpIl94gERKtLo1bAxPsDPU0Div8H4JwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPVHf0vefde6n+VZR8inoPXs3lhJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE/DJXShTARa5fbewgb75wUN73jDXjzdNmywHb7Tn7sqb7URFRDUTnrl 8Hx9TzFsY9bF6uKMCS7Jl9IooNOmUobtj3ctac+dRY0FUBu2ttAwqr/u7mc87QGp o1780j8zdDHiUbz0CTO3noveJdAbMaTimme4Z16U8bBTs4JixPKXG5TG9/bADj+W 6zFXRGtIdgy3nqePE+1n5Q31mqY7CJbmOURo6V9QhB6mXRGkJwWdYp2shwzWnBAa 4lD9Iu+V+rEheghQlCVpAkhA8FSYnI9eDtN/ApORn45vq88zMXRA/JM0Ud7kcW9t 2Lz3D12rGNoyk9O8ns94SLMyivOr8So= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:13 2025 by rpki-client