$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa File: 73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa (raw, json) Hash identifier: mzR0I9+cKgcNbIDsZF5RXCw2btBEsX1kPjLA8Ws3tao= Subject key identifier: B3:80:E1:4D:5F:F3:21:58:5F:3F:B9:B4:23:A3:85:D9:F3:80:84:A0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A047813876BF2D71ED00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.57.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a0:47:81:38:76:bf:2d:71:ed:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=29543b04-4f57-4cd9-9cc0-608a939d191c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:de:89:f8:1a:99:1a:c2:3c:14:2f:69:89:45: 07:a6:33:09:c8:78:8c:e2:a7:a7:09:a6:33:e7:4f: 8e:47:5d:76:7c:47:2c:c7:9f:d1:4c:ef:d2:b7:e8: 26:80:d9:92:de:4a:f9:6b:9c:2f:f2:1a:08:58:41: 12:6e:78:c2:ae:43:af:1f:98:29:8e:21:e8:83:b4: 63:ae:ff:c9:c0:92:bc:e3:d1:5d:1e:95:26:89:0c: cd:53:8f:a4:04:43:30:bc:32:9e:49:ab:23:89:d6: 81:6a:f4:a6:32:9f:3d:68:09:a6:64:27:fa:0e:95: b9:a4:31:2f:11:23:22:4d:b0:d8:b4:44:04:0e:db: b1:c3:aa:45:95:8c:9c:32:d8:7e:56:34:bf:bd:1b: cf:a8:86:53:a5:f2:a0:d5:1f:2b:3a:6e:10:a1:b7: 20:16:f1:23:ae:b7:9d:72:8a:08:cf:b6:15:7f:47: 37:b0:3f:94:78:43:f2:5d:58:6a:87:dd:aa:4d:c1: 4c:08:c0:f7:18:43:bc:64:0b:9f:05:48:70:0a:b0: 2a:3e:a3:44:6d:3d:73:ce:38:45:4b:cc:1d:bc:cd: 5c:66:b5:4c:7d:36:46:23:22:d3:f0:c1:9d:43:d2: de:23:11:4a:9d:6d:cb:0f:19:11:0d:28:96:19:f2: ee:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:80:E1:4D:5F:F3:21:58:5F:3F:B9:B4:23:A3:85:D9:F3:80:84:A0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/73d82f29-6c55-3196-ae7a-0d08e3aa1220.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:1f:07:62:b3:4d:2d:d4:fc:6c:de:c7:94:b0:bb:b9:db:a7: 33:88:a4:69:df:78:d6:e8:cc:b4:d9:ed:f6:fe:2b:36:30:23: fe:81:c5:05:07:13:95:cf:89:7b:85:da:c1:5d:d3:49:b7:6a: 64:29:88:b4:4d:ee:c8:2a:6b:d1:c9:ab:d3:28:5e:be:42:f8: 9a:f5:73:57:88:a7:30:50:2e:52:cb:15:85:e9:52:8c:7a:d7: f8:71:7e:11:a2:b9:56:bc:93:7c:16:ca:1c:29:0b:82:3b:ab: fa:25:b1:bc:cb:36:28:e6:6e:99:c6:11:b9:52:b0:d5:25:8b: 81:2c:ac:77:20:9f:14:84:20:ab:8d:d2:56:e3:8a:f4:33:2a: 11:2c:6e:79:4d:10:83:ac:35:57:5c:82:90:da:17:c2:25:98: 27:a8:57:f1:c4:6d:ab:12:5e:bc:2c:36:e8:46:97:d5:d7:fa: fa:a1:3d:97:43:24:00:6b:09:72:6b:4e:ac:b6:2e:1b:80:fc: 15:c8:70:d8:e0:69:1b:08:c5:12:fa:6e:9b:54:a4:45:95:4d: bb:87:33:23:51:30:d3:e6:17:b8:8c:c7:3a:32:04:5a:55:7f: a4:25:05:ed:d5:b6:9f:48:a5:3e:51:ba:74:6e:51:2b:89:69: 02:87:45:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKBHgTh2vy1x7QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk Mjk1NDNiMDQtNGY1Ny00Y2Q5LTljYzAtNjA4YTkzOWQxOTFjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw96J+BqZGsI8FC9piUUHpjMJyHiM4qenCaYz 50+OR112fEcsx5/RTO/St+gmgNmS3kr5a5wv8hoIWEESbnjCrkOvH5gpjiHog7Rj rv/JwJK849FdHpUmiQzNU4+kBEMwvDKeSasjidaBavSmMp89aAmmZCf6DpW5pDEv ESMiTbDYtEQEDtuxw6pFlYycMth+VjS/vRvPqIZTpfKg1R8rOm4QobcgFvEjrred cooIz7YVf0c3sD+UeEPyXVhqh92qTcFMCMD3GEO8ZAufBUhwCrAqPqNEbT1zzjhF S8wdvM1cZrVMfTZGIyLT8MGdQ9LeIxFKnW3LDxkRDSiWGfLuqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLOA4U1f8yFYXz+5tCOjhdnzgISgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzNkODJmMjktNmM1NS0z MTk2LWFlN2EtMGQwOGUzYWExMjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDkwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADsfB2KzTS3U/Gzex5Swu7nbpzOIpGnfeNbozLTZ7fb+KzYwI/6BxQUH E5XPiXuF2sFd00m3amQpiLRN7sgqa9HJq9MoXr5C+Jr1c1eIpzBQLlLLFYXpUox6 1/hxfhGiuVa8k3wWyhwpC4I7q/olsbzLNijmbpnGEblSsNUli4EsrHcgnxSEIKuN 0lbjivQzKhEsbnlNEIOsNVdcgpDaF8IlmCeoV/HEbasSXrwsNuhGl9XX+vqhPZdD JABrCXJrTqy2LhuA/BXIcNjgaRsIxRL6bptUpEWVTbuHMyNRMNPmF7iMxzoyBFpV f6QlBe3Vtp9IpT5RunRuUSuJaQKHRUM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:02 2025 by rpki-client