$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa File: 91471df1-315b-329a-b59a-d5aab839d18e.roa (raw, json) Hash identifier: bJXfa/QRZrGjEt/0hMXhq3gSp8y242byqK63NRBudm8= Subject key identifier: 52:4C:36:0A:BE:58:8A:36:5A:1C:C3:99:01:1E:0C:03:82:13:0E:B3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A3189FD974B22E5943F47B00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.35.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:9f:d9:74:b2:2e:59:43:f4:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=94de35eb-4e51-4513-92df-a4919c37e84a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:b9:24:26:19:36:39:4d:7e:c2:2e:37:de:33: 47:29:f9:13:e4:ec:61:80:e5:ab:3d:15:98:77:82: 5e:72:45:9b:3d:8a:7d:39:fc:01:b6:33:a0:be:4a: 51:1b:18:e1:b5:c2:22:d1:c5:0d:e4:81:a4:0c:1c: 91:4a:7e:ba:24:ae:b7:8a:25:92:9c:25:fa:eb:22: 6e:c4:8a:d7:26:9c:31:76:28:fb:e4:77:a6:c1:88: ec:15:4f:41:82:3f:9d:2c:0b:55:fc:2b:be:74:f0: 79:6d:63:40:7a:27:55:d3:93:39:3e:4b:fc:49:bb: 2f:59:75:3f:47:b2:a2:1d:be:c5:42:bc:21:9e:19: 0c:7b:61:7e:c4:2a:58:ef:13:a9:34:3e:4e:a6:83: 4c:d9:1d:b1:0f:48:99:a8:b0:d5:43:f2:46:b8:b6: 64:52:9c:4b:9e:4e:21:20:0d:b4:70:55:70:82:81: dc:bf:02:92:e6:d1:fd:86:ee:61:3a:c5:f7:12:8d: af:cd:d9:16:17:7b:aa:19:e5:4d:29:15:db:96:16: 01:70:a1:54:ad:87:dc:5f:6b:23:a1:bb:e3:1c:8f: a1:f0:ac:0e:1e:56:5d:42:41:0d:d6:b8:09:35:73: 35:57:8f:4b:d9:e9:43:66:e0:31:3c:ca:3a:be:40: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:4C:36:0A:BE:58:8A:36:5A:1C:C3:99:01:1E:0C:03:82:13:0E:B3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/91471df1-315b-329a-b59a-d5aab839d18e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 34:f0:25:07:f8:a1:50:64:46:b8:24:f2:6a:4d:1e:95:7a:62: f4:86:b2:c8:ad:66:1f:53:7c:8a:99:f0:dc:34:08:9a:57:1a: 18:4a:21:b4:c0:4f:e1:3d:53:22:ed:8c:32:d0:ab:4d:e4:66: 54:ca:4a:f6:12:06:ec:d7:35:10:56:94:77:78:19:ab:60:07: 00:48:88:e2:6a:f1:9e:a7:25:2b:06:29:28:ed:bb:d1:a1:b0: d1:a5:41:58:82:e9:10:3a:cf:22:05:bf:8d:ab:5c:ef:85:90: 7d:9c:7a:84:72:5c:33:54:80:0e:17:c6:9b:8a:5e:ce:37:58: bf:8d:26:20:ce:61:ad:f1:b2:eb:99:9b:8c:ad:aa:88:f5:4f: 55:1e:ab:03:c1:20:eb:55:d8:92:2d:b1:65:6b:b2:ba:99:1e: 28:1e:db:37:da:43:b0:6b:69:30:e7:25:26:e7:30:dd:75:38: c9:1b:e3:e6:7c:dd:94:7f:4c:5c:5d:75:03:80:d5:f1:6c:55: d9:3d:d5:1b:48:60:93:b3:3b:41:83:e4:af:63:ea:cf:a6:21: f5:4c:a5:98:0e:a2:06:eb:34:09:86:2b:e6:79:f5:4a:03:50: 69:5f:7b:e5:d9:06:b8:da:73:dc:d5:0a:98:42:a3:26:40:f0: c3:7c:ca:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGJ/ZdLIuWUP0ewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk OTRkZTM1ZWItNGU1MS00NTEzLTkyZGYtYTQ5MTljMzdlODRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrkkJhk2OU1+wi433jNHKfkT5OxhgOWrPRWY d4JeckWbPYp9OfwBtjOgvkpRGxjhtcIi0cUN5IGkDByRSn66JK63iiWSnCX66yJu xIrXJpwxdij75HemwYjsFU9Bgj+dLAtV/Cu+dPB5bWNAeidV05M5Pkv8SbsvWXU/ R7KiHb7FQrwhnhkMe2F+xCpY7xOpND5OpoNM2R2xD0iZqLDVQ/JGuLZkUpxLnk4h IA20cFVwgoHcvwKS5tH9hu5hOsX3Eo2vzdkWF3uqGeVNKRXblhYBcKFUrYfcX2sj obvjHI+h8KwOHlZdQkEN1rgJNXM1V49L2elDZuAxPMo6vkDU+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJMNgq+WIo2WhzDmQEeDAOCEw6zMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTE0NzFkZjEtMzE1Yi0z MjlhLWI1OWEtZDVhYWI4MzlkMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCNAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADTwJQf4oVBkRrgk8mpNHpV6YvSGssitZh9TfIqZ8Nw0CJpXGhhKIbTA T+E9UyLtjDLQq03kZlTKSvYSBuzXNRBWlHd4GatgBwBIiOJq8Z6nJSsGKSjtu9Gh sNGlQViC6RA6zyIFv42rXO+FkH2ceoRyXDNUgA4XxpuKXs43WL+NJiDOYa3xsuuZ m4ytqoj1T1UeqwPBIOtV2JItsWVrsrqZHige2zfaQ7BraTDnJSbnMN11OMkb4+Z8 3ZR/TFxddQOA1fFsVdk91RtIYJOzO0GD5K9j6s+mIfVMpZgOogbrNAmGK+Z59UoD UGlfe+XZBrjac9zVCphCoyZA8MN8ypQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:38 2025 by rpki-client