$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa File: 8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa (raw, json) Hash identifier: BUwZkV7Ss3QW6jl7AXuDp5qJcx2jMwJaCVdHV9CRi3Y= Subject key identifier: 4D:65:EE:78:28:15:74:D8:B9:95:24:B5:5F:EC:17:B0:0C:17:F9:63 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A6E01E37D7E25283E8D0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.56.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a6:e0:1e:37:d7:e2:52:83:e8:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=1b579905-d7db-4859-9eb4-3ff8c412713d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:24:dd:5f:6c:03:8c:ce:9f:37:5f:a4:65:25: 90:17:a3:43:03:4a:ba:60:c1:32:ce:7c:61:b4:11: 42:66:8d:d9:bb:4b:c2:fa:e7:a7:e8:95:c0:fc:c7: 74:c0:1e:79:01:19:6b:31:b5:9d:d2:7d:be:24:88: aa:03:bf:e0:4f:fd:59:35:31:f6:45:3c:43:e8:b7: bb:90:b1:9d:07:a3:2f:49:d5:49:22:84:9e:5b:03: 24:55:ba:2a:af:04:be:03:58:24:7d:8f:b9:c9:ad: 33:8b:35:82:17:4f:31:a1:b3:ee:8d:ff:24:ec:8e: b2:50:7c:ba:23:2d:95:9f:8e:04:06:92:16:73:e2: d1:9b:4e:f8:a2:b1:96:3d:07:02:4f:b2:2e:65:8d: 2a:fe:dc:26:1b:43:51:5f:00:0b:02:f5:0d:2e:ce: a1:b4:70:60:92:78:30:79:e1:d5:50:64:0a:c3:ac: dd:b0:36:10:a9:e9:b5:64:b8:73:5a:90:4d:76:60: 80:61:91:93:db:ab:49:32:a6:dc:22:be:4f:41:67: a5:00:1f:e5:58:36:d6:48:2c:a3:20:ca:fb:c3:4a: 88:18:8e:ff:7c:4f:69:99:68:a4:13:c8:f5:53:68: d9:a8:84:4e:df:c2:af:4f:d3:67:9c:f8:1f:ab:2c: 5a:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:65:EE:78:28:15:74:D8:B9:95:24:B5:5F:EC:17:B0:0C:17:F9:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8b6ddc99-e949-35b9-8135-79c5f30c17ef.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:87:79:b1:b1:81:b1:01:91:ed:e3:a6:67:12:d0:78:76:50: 5a:4b:59:40:bb:e6:25:63:ca:ed:c2:71:bb:55:8b:e4:d3:d0: 87:a2:20:e8:54:f6:5d:1a:23:dd:34:34:1b:3f:21:75:c1:1c: a5:9b:61:5a:76:ac:0f:20:ac:8c:a3:5e:d6:8c:f8:4b:14:f9: f1:9e:21:55:65:14:87:c7:e7:c8:75:73:b7:02:8a:ec:81:8b: 84:44:ed:89:21:82:57:12:7a:83:94:b3:3a:0e:11:fd:7f:f7: b2:8b:e6:98:68:99:55:bd:38:b4:37:aa:01:4a:c6:a2:e7:be: 82:c8:95:f7:51:39:5d:b7:45:ad:22:a7:65:5b:be:96:d3:18: 18:00:ad:f5:0c:86:a0:23:b4:e5:18:4c:a3:2f:5c:8e:d2:11: 24:97:fd:57:bb:d7:d6:d3:d0:8e:a6:01:3b:cb:ce:9e:2f:2f: 19:ec:f7:4c:09:c7:0e:72:e5:48:70:e2:54:19:83:96:3a:bc: f1:57:88:bf:72:d4:8d:da:70:fd:51:ab:25:03:ee:b3:f2:76: 56:1d:e9:13:47:05:26:f4:6e:83:4a:4b:6a:0c:33:bf:48:3e: c0:c1:9a:a9:f4:09:36:73:91:aa:bf:f2:11:e1:52:22:5b:a2: b7:97:6c:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKbgHjfX4lKD6NAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk MWI1Nzk5MDUtZDdkYi00ODU5LTllYjQtM2ZmOGM0MTI3MTNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCTdX2wDjM6fN1+kZSWQF6NDA0q6YMEyznxh tBFCZo3Zu0vC+uen6JXA/Md0wB55ARlrMbWd0n2+JIiqA7/gT/1ZNTH2RTxD6Le7 kLGdB6MvSdVJIoSeWwMkVboqrwS+A1gkfY+5ya0zizWCF08xobPujf8k7I6yUHy6 Iy2Vn44EBpIWc+LRm074orGWPQcCT7IuZY0q/twmG0NRXwALAvUNLs6htHBgkngw eeHVUGQKw6zdsDYQqem1ZLhzWpBNdmCAYZGT26tJMqbcIr5PQWelAB/lWDbWSCyj IMr7w0qIGI7/fE9pmWikE8j1U2jZqIRO38KvT9NnnPgfqyxaWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE1l7ngoFXTYuZUktV/sF7AMF/ljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGI2ZGRjOTktZTk0OS0z NWI5LTgxMzUtNzljNWYzMGMxN2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDigMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKHebGxgbEBke3jpmcS0Hh2UFpLWUC75iVjyu3CcbtVi+TT0IeiIOhU 9l0aI900NBs/IXXBHKWbYVp2rA8grIyjXtaM+EsU+fGeIVVlFIfH58h1c7cCiuyB i4RE7YkhglcSeoOUszoOEf1/97KL5phomVW9OLQ3qgFKxqLnvoLIlfdROV23Ra0i p2VbvpbTGBgArfUMhqAjtOUYTKMvXI7SESSX/Ve719bT0I6mATvLzp4vLxns90wJ xw5y5Uhw4lQZg5Y6vPFXiL9y1I3acP1RqyUD7rPydlYd6RNHBSb0boNKS2oMM79I PsDBmqn0CTZzkaq/8hHhUiJboreXbPI= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:34 2025 by rpki-client