$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa File: 7414e153-6a51-342c-a0c1-785f5d538a41.roa (raw, json) Hash identifier: oZDjs2JClMrhY73B1XCq4QbY2BweyAL+85CsSpWSUMk= Subject key identifier: 3A:62:55:B0:F9:93:24:74:D0:41:75:AE:76:45:AF:1F:7E:E2:1E:F0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318ACF61FA7047609967E20 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa Signing time: Thu 23 Jan 2025 06:13:22 +0000 ROA not before: Thu 23 Jan 2025 06:13:22 +0000 ROA not after: Wed 23 Apr 2025 05:13:22 +0000 asID: 16591 IP address blocks: 136.38.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ac:f6:1f:a7:04:76:09:96:7e:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:22 2025 GMT Not After : Apr 23 05:13:22 2025 GMT Subject: CN=abf0d7d4-4a39-4739-9d71-ee9d4aa82a72 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e5:ab:4b:fd:c3:9a:cb:97:11:76:6a:5d:9b: cc:ae:81:8b:61:a9:ad:98:28:ea:d9:40:dc:a8:54: 89:d0:6e:e9:96:2e:e7:1a:c8:2a:4d:39:22:c4:5f: 75:31:16:8f:8a:27:92:84:8c:b2:d2:10:8e:72:ba: 23:f4:ff:3d:67:b5:78:f6:f2:f8:bc:23:20:fb:dd: 9a:45:8a:b1:e6:b4:ab:71:23:5b:3a:fb:7e:d3:b7: 88:23:30:fd:3a:f9:90:8a:d7:54:43:37:58:39:43: c8:4d:0b:57:a9:ab:8b:8a:22:3d:f0:cf:b4:72:02: 6c:1b:83:1b:69:43:e1:05:46:f4:e0:49:2a:a6:8c: 42:40:e9:d1:f0:b5:6e:7b:6e:f7:70:88:15:07:21: f8:11:24:35:1d:db:8b:d9:96:7a:5a:14:9f:2e:1f: a6:49:6d:14:8e:61:21:4c:44:86:0d:f2:03:b8:5d: 53:8e:3c:0a:3b:cc:19:70:86:74:74:79:6c:79:8b: 88:8b:89:db:40:f5:fb:94:55:ca:44:a9:1f:29:94: 0d:79:60:22:3e:c7:e7:e8:3f:04:2d:2b:84:a1:6f: 85:21:a2:36:18:e2:17:76:4b:4a:ec:f8:bf:14:a5: 56:be:01:d2:e0:0e:d9:eb:0f:d4:70:52:48:2c:9a: 98:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:62:55:B0:F9:93:24:74:D0:41:75:AE:76:45:AF:1F:7E:E2:1E:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7414e153-6a51-342c-a0c1-785f5d538a41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 15:8d:ac:58:d7:98:1f:82:cb:c3:31:e3:c7:a1:9a:a8:64:59: 08:fe:30:59:fb:8a:f6:af:d8:ef:cf:e4:e9:8f:39:4f:9e:88: 3e:2a:c6:7a:7c:48:78:2c:3b:5f:d5:07:89:c1:ff:56:05:bb: 6b:ba:cb:0a:b5:23:ab:3a:b2:94:ec:bd:e6:14:0f:24:00:ec: 2f:f8:92:64:a5:8e:ef:d4:d8:a0:45:dc:c9:4b:a3:2d:a7:74: 9e:7f:19:ae:90:72:56:9f:f3:12:81:a9:34:2c:a3:83:97:82: 4a:ce:d2:af:4b:31:e7:88:63:bd:e7:3d:35:bf:4a:96:36:c0: e2:14:2e:29:38:b3:6f:28:f8:36:50:1f:70:23:99:44:65:08: 44:0d:22:63:36:85:0a:79:f7:2f:18:25:29:05:b9:5e:ff:48: 1b:fc:02:73:ba:64:3b:d7:a2:7b:7e:bf:25:57:3a:98:d6:81: 65:87:20:8a:e7:0b:12:87:98:fd:e6:fd:b2:da:79:8a:b3:95: 85:e5:90:46:d6:65:16:c9:e6:cb:91:fe:1c:da:a4:ee:5d:26: 2e:b3:52:90:15:9e:e8:57:e9:3a:43:81:7d:6a:f2:2f:ac:d9: 99:92:ed:9f:28:70:c1:dd:2f:be:d1:02:46:8b:27:4c:64:6a: 9c:88:4b:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKz2H6cEdgmWfiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk YWJmMGQ3ZDQtNGEzOS00NzM5LTlkNzEtZWU5ZDRhYTgyYTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuWrS/3DmsuXEXZqXZvMroGLYamtmCjq2UDc qFSJ0G7pli7nGsgqTTkixF91MRaPiieShIyy0hCOcroj9P89Z7V49vL4vCMg+92a RYqx5rSrcSNbOvt+07eIIzD9OvmQitdUQzdYOUPITQtXqauLiiI98M+0cgJsG4Mb aUPhBUb04EkqpoxCQOnR8LVue273cIgVByH4ESQ1HduL2ZZ6WhSfLh+mSW0UjmEh TESGDfIDuF1TjjwKO8wZcIZ0dHlseYuIi4nbQPX7lFXKRKkfKZQNeWAiPsfn6D8E LSuEoW+FIaI2GOIXdktK7Pi/FKVWvgHS4A7Z6w/UcFJILJqYZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDpiVbD5kyR00EF1rnZFrx9+4h7wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzQxNGUxNTMtNmE1MS0z NDJjLWEwYzEtNzg1ZjVkNTM4YTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABWNrFjXmB+Cy8Mx48ehmqhkWQj+MFn7ivav2O/P5OmPOU+eiD4qxnp8 SHgsO1/VB4nB/1YFu2u6ywq1I6s6spTsveYUDyQA7C/4kmSlju/U2KBF3MlLoy2n dJ5/Ga6Qclaf8xKBqTQso4OXgkrO0q9LMeeIY73nPTW/SpY2wOIULik4s28o+DZQ H3AjmURlCEQNImM2hQp59y8YJSkFuV7/SBv8AnO6ZDvXont+vyVXOpjWgWWHIIrn CxKHmP3m/bLaeYqzlYXlkEbWZRbJ5suR/hzapO5dJi6zUpAVnuhX6TpDgX1q8i+s 2ZmS7Z8ocMHdL77RAkaLJ0xkapyISxo= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:38 2025 by rpki-client