$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa File: 9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa (raw, json) Hash identifier: NTTcyn6LHXHLmB4USDsyX8BMezO4dfzO6DaVTm7+KPQ= Subject key identifier: 97:61:B4:3E:1C:88:06:CB:CB:6D:26:94:F0:12:72:35:98:E6:0D:B4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A13094F70C43CE6C6180 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.36.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a1:30:94:f7:0c:43:ce:6c:61:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=d7f64b23-e951-43d3-b086-7f8586e07be1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:38:ef:a3:4c:f7:73:96:58:e1:38:82:12:dd: c3:e0:e1:30:51:94:16:c4:75:df:49:d3:2b:e4:fe: 09:4b:e9:07:10:58:2f:d8:3c:d5:be:9a:57:cb:d1: 42:72:c9:18:93:80:68:1f:dc:69:47:e8:7b:6c:87: 74:87:69:0f:68:28:65:e6:8d:87:1a:25:7c:4b:9d: 93:b1:85:b7:88:42:c3:ee:33:b8:00:2e:01:c6:6b: 44:b3:83:1a:7c:9b:df:d6:4d:24:66:d5:94:d7:1a: 1f:23:c6:e5:ff:ee:a1:83:9e:6b:e4:56:83:09:ca: 60:2f:ee:f4:b8:92:db:21:a8:5d:57:2f:71:48:69: 8c:de:b9:27:e3:b8:8f:e7:68:d1:4d:8f:21:0a:f7: c1:d5:69:85:dd:69:db:36:ae:03:2b:79:19:ed:73: 20:ce:fd:8a:67:8b:63:3e:61:2f:91:25:44:a6:d1: 7d:b5:a7:cb:01:a8:01:93:df:4c:1a:0b:56:e8:4c: 41:52:d7:ba:b0:70:ab:c4:1c:f2:bb:bb:88:d1:69: dc:51:f4:1e:3c:61:ca:b9:39:34:bc:17:47:a6:45: bc:7d:1c:cb:94:af:87:5e:14:96:d9:b7:32:f5:1d: 20:85:ae:b2:b4:12:33:00:dd:18:f1:0e:68:c2:68: 57:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:61:B4:3E:1C:88:06:CB:CB:6D:26:94:F0:12:72:35:98:E6:0D:B4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9e8bdc80-45fc-3533-a58e-8ee7089ddb0e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 81:03:de:bd:72:4f:ed:fc:42:7f:b6:b6:d3:13:8b:72:e0:00: a2:d6:8d:54:d0:76:4d:76:cd:a6:e3:8d:15:40:2f:38:40:c1: 83:d2:20:11:0c:be:07:57:26:e2:ef:99:65:4d:81:8c:c7:ff: 54:70:70:1f:a0:1b:e3:80:79:66:b6:35:64:0a:72:47:a8:9a: c3:6f:c6:18:13:31:a0:6d:ff:63:15:55:da:eb:b4:9e:5c:43: 74:b8:a2:54:90:0c:1c:af:e7:ad:bf:06:11:e6:1d:63:07:29: d7:86:01:6d:f7:f6:00:b1:7e:85:a9:2d:5e:15:9f:88:cf:f7: 15:16:5b:93:98:8e:ed:9f:da:93:73:c8:85:d4:02:c0:15:64: 15:54:b2:b6:4e:33:1d:24:f8:33:99:3f:79:a8:8b:91:7c:60: ac:d6:28:e4:2b:d2:1e:5b:c4:78:e5:17:58:c5:a7:c2:36:5c: d0:a6:4c:4f:56:e0:24:46:f5:29:1f:d7:6f:31:67:9d:78:b5: 8e:ce:25:f6:f0:35:97:17:a5:ed:fc:7c:41:40:01:1b:cc:f0: 14:35:78:f2:85:01:59:7d:dc:aa:f5:8f:75:3b:28:0f:ef:9b: d5:e5:32:9d:6c:9a:ac:9e:cf:ef:5f:40:50:28:fa:86:a0:ab: 9b:5a:3d:04 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKEwlPcMQ85sYYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk ZDdmNjRiMjMtZTk1MS00M2QzLWIwODYtN2Y4NTg2ZTA3YmUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzjvo0z3c5ZY4TiCEt3D4OEwUZQWxHXfSdMr 5P4JS+kHEFgv2DzVvppXy9FCcskYk4BoH9xpR+h7bId0h2kPaChl5o2HGiV8S52T sYW3iELD7jO4AC4BxmtEs4MafJvf1k0kZtWU1xofI8bl/+6hg55r5FaDCcpgL+70 uJLbIahdVy9xSGmM3rkn47iP52jRTY8hCvfB1WmF3WnbNq4DK3kZ7XMgzv2KZ4tj PmEvkSVEptF9tafLAagBk99MGgtW6ExBUte6sHCrxBzyu7uI0WncUfQePGHKuTk0 vBdHpkW8fRzLlK+HXhSW2bcy9R0gha6ytBIzAN0Y8Q5owmhXgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdhtD4ciAbLy20mlPAScjWY5g20MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOWU4YmRjODAtNDVmYy0z NTMzLWE1OGUtOGVlNzA4OWRkYjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIED3r1yT+38Qn+2ttMTi3LgAKLWjVTQdk12zabjjRVALzhAwYPSIBEM vgdXJuLvmWVNgYzH/1RwcB+gG+OAeWa2NWQKckeomsNvxhgTMaBt/2MVVdrrtJ5c Q3S4olSQDByv562/BhHmHWMHKdeGAW339gCxfoWpLV4Vn4jP9xUWW5OYju2f2pNz yIXUAsAVZBVUsrZOMx0k+DOZP3moi5F8YKzWKOQr0h5bxHjlF1jFp8I2XNCmTE9W 4CRG9Skf128xZ514tY7OJfbwNZcXpe38fEFAARvM8BQ1ePKFAVl93Kr1j3U7KA/v m9XlMp1smqyez+9fQFAo+oagq5taPQQ= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:22 2025 by rpki-client