$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa File: 73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa (raw, json) Hash identifier: IsgNeYOzCAz8DJSe2JmF82cTIlTK1Q78IWvN8LaJmf0= Subject key identifier: 71:35:04:9E:0E:35:4F:6D:E3:2F:7E:36:D4:F2:C3:0A:D6:F1:26:2D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A090ADD7DCD3F8EF5600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.62.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a0:90:ad:d7:dc:d3:f8:ef:56:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=6456f744-4dbd-43cc-b4ee-b1f88919c234 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:eb:2c:0c:a8:11:68:dc:91:db:e7:13:3c: fd:02:6b:69:10:18:fd:51:fa:f1:37:4a:fc:98:c8: 86:35:30:c5:0b:8d:15:15:7e:dc:b2:05:95:9f:d2: ca:70:18:c2:e4:a6:f9:d1:dd:d2:29:fe:8a:bb:94: a0:1b:00:4b:9a:30:e3:20:06:75:e9:97:08:67:9c: 4d:9d:98:d3:8a:05:0f:d7:97:bb:90:15:32:01:64: a0:13:61:d6:76:a9:89:a4:8f:0c:64:1e:99:5a:e8: 70:9c:c6:57:a5:4b:14:11:cc:0d:5c:c3:29:11:eb: ee:dd:3a:6e:15:4e:87:35:c9:92:75:05:03:c1:da: 3c:43:4b:1a:06:f8:b5:c8:f4:ec:92:b6:6b:77:72: 81:75:e7:b5:8d:6a:23:fa:f4:dd:ce:ec:05:44:3a: 07:c1:ff:e3:e8:57:55:ad:9e:45:0f:1c:4b:c0:8e: cf:82:e9:89:cd:9a:83:28:77:de:3e:e3:6d:ed:63: 4a:79:31:24:4f:04:71:bd:2f:b0:0b:7d:97:f3:18: c2:3d:ee:6b:09:58:47:4f:28:a6:22:59:71:52:6f: 60:e1:6b:03:1c:1d:e9:75:fc:16:1e:ed:57:0f:35: e4:eb:0f:76:a6:2d:74:34:7c:0d:1b:96:17:cd:00: 5b:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:35:04:9E:0E:35:4F:6D:E3:2F:7E:36:D4:F2:C3:0A:D6:F1:26:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73c9fe52-d315-36ad-84a9-0f9b50c9d56e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:de:b0:a8:18:13:96:9b:9c:56:68:a3:36:ed:7d:b4:cb:aa: 2c:c8:2a:e6:7d:21:08:03:51:eb:ac:2a:fe:3c:bb:41:6f:26: c0:52:a5:2d:19:5b:6c:83:ba:26:9a:0c:51:de:a8:bc:9f:ab: 77:50:cb:d4:50:ff:cd:a9:ca:35:99:9a:93:d4:bb:67:64:ac: 9f:4a:47:f4:8c:4b:18:29:59:11:a2:f9:c5:e1:c3:a6:be:17: 67:ee:8a:66:f1:c1:84:c2:4b:97:49:6d:b3:cc:6e:b4:c3:a7: 52:80:e9:10:07:98:6a:17:c5:0d:f0:6c:80:ed:fb:6c:47:29: be:5c:fb:b8:bb:16:98:90:a9:02:7b:b1:f7:04:ee:f4:88:62: 9f:54:8e:fa:35:2c:9c:df:9b:4d:22:fa:f8:4f:cf:b3:ff:33: bd:1f:e6:ee:8c:7e:43:76:b0:ad:44:8b:76:3b:3e:2b:d9:c1: ae:08:b2:bb:c4:08:5e:05:8e:f5:e0:4c:33:ae:b6:4d:83:b0: 4e:4a:94:a3:20:0f:b2:43:f6:35:d4:43:7d:e0:73:92:fc:2e: 3b:44:f6:38:c4:71:72:d1:3d:c0:4f:f9:da:12:da:54:e3:b6: 61:89:22:18:63:1e:a6:25:26:a4:dc:03:06:6a:31:44:b9:f1: 13:83:1f:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKCQrdfc0/jvVgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk NjQ1NmY3NDQtNGRiZC00M2NjLWI0ZWUtYjFmODg5MTljMjM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlynrLAyoEWjckdvnEzz9AmtpEBj9UfrxN0r8 mMiGNTDFC40VFX7csgWVn9LKcBjC5Kb50d3SKf6Ku5SgGwBLmjDjIAZ16ZcIZ5xN nZjTigUP15e7kBUyAWSgE2HWdqmJpI8MZB6ZWuhwnMZXpUsUEcwNXMMpEevu3Tpu FU6HNcmSdQUDwdo8Q0saBvi1yPTskrZrd3KBdee1jWoj+vTdzuwFRDoHwf/j6FdV rZ5FDxxLwI7PgumJzZqDKHfePuNt7WNKeTEkTwRxvS+wC32X8xjCPe5rCVhHTyim IllxUm9g4WsDHB3pdfwWHu1XDzXk6w92pi10NHwNG5YXzQBbeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHE1BJ4ONU9t4y9+NtTywwrW8SYtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzNjOWZlNTItZDMxNS0z NmFkLTg0YTktMGY5YjUwYzlkNTZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD4gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvesKgYE5abnFZoozbtfbTLqizIKuZ9IQgDUeusKv48u0FvJsBSpS0Z W2yDuiaaDFHeqLyfq3dQy9RQ/82pyjWZmpPUu2dkrJ9KR/SMSxgpWRGi+cXhw6a+ F2fuimbxwYTCS5dJbbPMbrTDp1KA6RAHmGoXxQ3wbIDt+2xHKb5c+7i7FpiQqQJ7 sfcE7vSIYp9Ujvo1LJzfm00i+vhPz7P/M70f5u6MfkN2sK1Ei3Y7PivZwa4IsrvE CF4FjvXgTDOutk2DsE5KlKMgD7JD9jXUQ33gc5L8LjtE9jjEcXLRPcBP+doS2lTj tmGJIhhjHqYlJqTcAwZqMUS58RODHwk= -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:50 2025 by rpki-client