$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa File: 9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa (raw, json) Hash identifier: xaI+oAtyhzc08yMy/kEME45RKEwT45gR0HXz7u5sIts= Subject key identifier: 98:2C:C2:DF:A2:E8:A9:17:F5:37:F4:C8:98:48:C5:00:23:1A:BB:31 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A3189FFA8A79CE6D8DA61880 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.48.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:9f:fa:8a:79:ce:6d:8d:a6:18:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=652b910f-2154-4bcc-9b0c-1cd1a75dc287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:62:e5:5e:22:3e:a5:43:fe:4b:6a:3c:57:65: b8:ef:0e:3d:6d:91:5e:dc:7f:00:cb:e6:e5:9d:43: b6:0b:a2:13:2a:6f:1d:3f:a5:d5:2f:fd:96:a0:2d: be:5a:89:58:e9:6e:76:78:aa:b9:c2:06:51:0c:05: 7c:b9:5e:2d:8e:dc:10:d9:a6:45:e0:54:6e:9a:63: 45:8a:92:43:7f:61:25:a4:81:8e:83:98:9d:c7:12: fb:e5:d9:97:1a:ff:de:b9:da:bf:0c:34:a5:0e:f2: 25:e8:6c:08:ff:80:50:97:c4:4e:a2:70:d7:16:2c: f6:b8:53:1b:d5:51:c3:d6:65:d4:c4:82:83:e7:9c: c9:57:52:8d:ff:1e:9f:b1:a0:b7:6d:78:fa:82:6a: 19:5c:f2:22:e3:56:cb:8e:1d:d0:1b:5d:b7:6e:a7: 15:fe:92:25:be:94:76:69:35:f9:3d:75:45:7f:f5: 5b:75:03:46:84:58:06:f9:ba:57:e8:f2:2a:2d:6f: 0b:f7:52:68:31:6d:f6:50:70:38:9a:b4:18:22:0e: 92:5e:01:c6:84:9b:c4:a5:a1:4c:4f:23:fc:77:c7: 73:e8:f5:c4:b4:79:a4:0c:f7:2b:eb:c7:72:34:22: 70:17:3e:d2:41:0d:f7:7d:b3:e8:13:e6:a3:d9:08: a8:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:2C:C2:DF:A2:E8:A9:17:F5:37:F4:C8:98:48:C5:00:23:1A:BB:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9b8468fe-079e-39c9-b4f6-5a6ac09ac3c9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.48.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:af:89:2b:06:f0:41:40:5d:50:54:8c:59:4c:cb:29:78:d4: 53:21:c4:90:28:e3:31:2e:98:30:61:b4:8c:67:2b:27:07:e2: 95:aa:19:95:ee:77:86:10:58:6a:60:1f:3f:0b:85:52:13:9d: 1b:1a:30:3a:b2:ac:2e:bf:86:df:fd:b3:c3:bf:8d:b9:5b:27: 78:bc:78:20:44:1d:8b:14:c4:fb:78:1a:19:71:62:a1:f9:c6: ef:ea:93:22:ba:27:dd:7b:02:67:27:46:20:71:01:73:e4:7a: c1:ed:76:70:3b:31:5d:04:ae:42:b9:b9:43:2a:5c:53:41:5b: 18:b6:66:94:e3:fa:74:79:59:06:66:ec:f0:77:fd:eb:9e:3e: fb:3c:54:9b:a7:29:a5:00:50:2b:8c:04:bd:68:c7:b4:ce:f9: 09:b7:33:4e:95:00:0b:3d:3b:c5:af:86:1e:81:51:21:55:7f: 6e:d2:9b:cd:be:80:09:02:cd:bd:e6:e9:71:9b:be:18:04:dc: fc:8f:56:c5:4c:25:2c:cd:61:a1:b4:6b:fe:1f:41:4a:c2:a3: 86:ea:a5:41:15:0d:2d:f2:c1:cf:51:92:9d:12:23:99:48:83: 2f:37:ba:dd:ba:a3:31:24:cf:e8:99:3c:d2:3f:9c:84:65:02: c7:b5:e6:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGJ/6innObY2mGIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk NjUyYjkxMGYtMjE1NC00YmNjLTliMGMtMWNkMWE3NWRjMjg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmLlXiI+pUP+S2o8V2W47w49bZFe3H8Ay+bl nUO2C6ITKm8dP6XVL/2WoC2+WolY6W52eKq5wgZRDAV8uV4tjtwQ2aZF4FRummNF ipJDf2ElpIGOg5idxxL75dmXGv/eudq/DDSlDvIl6GwI/4BQl8ROonDXFiz2uFMb 1VHD1mXUxIKD55zJV1KN/x6fsaC3bXj6gmoZXPIi41bLjh3QG123bqcV/pIlvpR2 aTX5PXVFf/VbdQNGhFgG+bpX6PIqLW8L91JoMW32UHA4mrQYIg6SXgHGhJvEpaFM TyP8d8dz6PXEtHmkDPcr68dyNCJwFz7SQQ33fbPoE+aj2QioDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJgswt+i6KkX9Tf0yJhIxQAjGrsxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWI4NDY4ZmUtMDc5ZS0z OWM5LWI0ZjYtNWE2YWMwOWFjM2M5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKviSsG8EFAXVBUjFlMyyl41FMhxJAo4zEumDBhtIxnKycH4pWqGZXu d4YQWGpgHz8LhVITnRsaMDqyrC6/ht/9s8O/jblbJ3i8eCBEHYsUxPt4GhlxYqH5 xu/qkyK6J917AmcnRiBxAXPkesHtdnA7MV0ErkK5uUMqXFNBWxi2ZpTj+nR5WQZm 7PB3/euePvs8VJunKaUAUCuMBL1ox7TO+Qm3M06VAAs9O8Wvhh6BUSFVf27Sm82+ gAkCzb3m6XGbvhgE3PyPVsVMJSzNYaG0a/4fQUrCo4bqpUEVDS3ywc9Rkp0SI5lI gy83ut26ozEkz+iZPNI/nIRlAse15ks= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:25 2025 by rpki-client