$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4b8f360-aefd-3780-839d-a9047fbf5997.roa File: a4b8f360-aefd-3780-839d-a9047fbf5997.roa (raw, json) Hash identifier: WVHEaj8kQ4xSDXnvJ15vkGMxiMJ+9tpDFadrw+ZH5wQ= Subject key identifier: 33:90:A0:EC:11:1F:7C:AF:1A:DB:E6:35:70:CA:19:C9:AE:6D:98:60 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A8C91FFB1E2631ACF700 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4b8f360-aefd-3780-839d-a9047fbf5997.roa Signing time: Thu 23 Jan 2025 06:13:20 +0000 ROA not before: Thu 23 Jan 2025 06:13:20 +0000 ROA not after: Wed 23 Apr 2025 05:13:20 +0000 asID: 16591 IP address blocks: 136.46.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a8:c9:1f:fb:1e:26:31:ac:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:20 2025 GMT Not After : Apr 23 05:13:20 2025 GMT Subject: CN=e56c09a3-eb92-411b-8de5-a20c3df55c12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:d5:53:b9:5d:c2:fd:bf:de:de:bb:b2:b2: 12:0b:cb:81:6e:4a:00:72:27:83:a9:38:ef:81:66: c1:99:82:2a:02:a8:29:a8:2d:5a:c1:cd:70:ce:b6: 69:70:d9:45:74:6e:f4:1d:82:9f:d2:85:bb:f2:09: 05:40:90:22:95:02:1a:58:14:8b:e8:78:39:f1:bb: 40:c9:0b:d8:91:71:3e:1d:67:ff:18:bd:45:06:82: 62:bd:99:43:d7:62:60:9a:f3:85:06:44:ae:e0:b5: 9c:e3:1a:d3:03:22:cf:af:68:ba:91:bb:26:54:22: a4:6b:54:c1:6d:97:fd:fe:a3:18:22:74:bd:28:8d: 98:b0:b6:c6:be:50:c1:f1:10:49:82:ca:39:a3:29: ed:f3:63:f3:76:b7:e3:fb:ca:69:96:b1:1f:ef:a6: bc:9c:e4:aa:be:a5:e3:e9:2c:69:f4:9f:88:74:77: ab:59:8e:7c:75:55:79:e1:a5:fc:fc:f3:fd:7e:27: 11:34:31:59:ed:ea:cf:33:58:f0:7b:94:aa:b9:ba: 78:25:24:c5:6a:26:2a:0d:cd:e1:53:02:16:c4:cc: da:75:83:77:1f:83:b4:cb:04:cb:3b:8e:f1:89:79: 12:1a:e0:a1:05:3a:d0:35:3d:88:72:26:cf:a8:fc: 6d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:90:A0:EC:11:1F:7C:AF:1A:DB:E6:35:70:CA:19:C9:AE:6D:98:60 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4b8f360-aefd-3780-839d-a9047fbf5997.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:8d:72:d7:76:57:f1:f4:78:47:37:95:56:8a:f4:ec:08:02: 9c:7f:b7:6e:71:46:54:30:77:df:a2:95:e0:14:19:76:7e:59: f7:a6:94:b3:47:01:a6:b0:41:12:9d:e9:70:7b:6e:5d:60:72: 46:cf:5d:dd:b0:59:e1:8a:e8:23:18:5b:d8:6e:4f:88:62:a9: e7:1b:ac:0f:9c:67:aa:75:3d:30:2e:d1:f9:fb:d2:f2:d5:96: ce:2c:48:ff:28:f5:9c:46:eb:47:1f:5f:68:9f:ac:53:11:bc: db:8b:f5:68:11:1d:24:b7:3f:56:ae:65:d0:e6:ee:1e:ef:1e: ea:bd:92:a0:cb:df:d4:d8:83:2a:04:8a:d8:3d:c0:97:ab:ca: ee:c1:ac:b0:45:81:ac:09:56:d8:f0:52:3b:5b:06:6f:c8:9a: 3f:06:f5:1a:af:ae:74:1f:6a:9c:b3:db:17:b3:06:be:66:a3: ce:c8:62:6e:23:c9:23:19:c7:42:30:53:e3:90:37:39:e9:11: 59:06:59:6c:63:43:e0:cd:32:10:7c:36:30:63:0b:73:b8:0a: 25:b7:56:65:65:ce:aa:fb:23:d8:cc:e5:c8:55:bf:a4:3c:7f: 5e:28:82:65:81:44:81:56:d0:de:7c:f7:b0:ac:04:87:b5:a6: 1c:96:22:a8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKjJH/seJjGs9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMFoXDTI1MDQyMzA1MTMyMFowLzEtMCsGA1UEAxMk ZTU2YzA5YTMtZWI5Mi00MTFiLThkZTUtYTIwYzNkZjU1YzEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAfVU7ldwv2/3t67srISC8uBbkoAcieDqTjv gWbBmYIqAqgpqC1awc1wzrZpcNlFdG70HYKf0oW78gkFQJAilQIaWBSL6Hg58btA yQvYkXE+HWf/GL1FBoJivZlD12JgmvOFBkSu4LWc4xrTAyLPr2i6kbsmVCKka1TB bZf9/qMYInS9KI2YsLbGvlDB8RBJgso5oynt82Pzdrfj+8pplrEf76a8nOSqvqXj 6Sxp9J+IdHerWY58dVV54aX8/PP9ficRNDFZ7erPM1jwe5Squbp4JSTFaiYqDc3h UwIWxMzadYN3H4O0ywTLO47xiXkSGuChBTrQNT2IcibPqPxtnwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDOQoOwRH3yvGtvmNXDKGcmubZhgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTRiOGYzNjAtYWVmZC0z NzgwLTgzOWQtYTkwNDdmYmY1OTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAECNctd2V/H0eEc3lVaK9OwIApx/t25xRlQwd9+ileAUGXZ+WfemlLNH AaawQRKd6XB7bl1gckbPXd2wWeGK6CMYW9huT4hiqecbrA+cZ6p1PTAu0fn70vLV ls4sSP8o9ZxG60cfX2ifrFMRvNuL9WgRHSS3P1auZdDm7h7vHuq9kqDL39TYgyoE itg9wJeryu7BrLBFgawJVtjwUjtbBm/Imj8G9RqvrnQfapyz2xezBr5mo87IYm4j ySMZx0IwU+OQNznpEVkGWWxjQ+DNMhB8NjBjC3O4CiW3VmVlzqr7I9jM5chVv6Q8 f14ogmWBRIFW0N5897CsBIe1phyWIqg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:42 2025 by rpki-client