$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa File: b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa (raw, json) Hash identifier: 2NYVXAmwdl9tnitzqmP68vdA+RY+pFxd3iZbidJq4Rc= Subject key identifier: C7:32:60:F9:02:6C:AA:A8:36:A4:D0:73:59:D0:85:12:F7:A6:3C:C4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A0561D75828BBE0AA320 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.52.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a0:56:1d:75:82:8b:be:0a:a3:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=c90186eb-4eb3-44e3-9017-66ae14f2354a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7e:45:a9:2f:be:b6:eb:c4:f5:63:8e:c1:68: b7:13:ef:eb:6a:2e:c5:de:9b:1d:00:47:cf:7c:ad: b1:ac:47:ad:3f:89:a6:20:36:54:c1:ec:08:f8:73: 7e:40:81:48:78:56:2b:b7:a9:85:3d:60:45:40:ff: 60:20:44:f2:98:9c:df:cd:6a:82:bf:f7:9d:95:11: 1c:8a:29:d2:59:21:0a:7a:bb:17:d9:a2:64:a9:47: 4a:30:b9:13:dd:3a:81:3a:76:cc:3b:c4:2a:9e:6f: 1f:59:65:b8:3c:24:af:08:19:7d:07:20:13:d3:21: 9d:c2:b7:18:b3:31:0f:32:8d:3f:78:c1:a4:da:73: 3e:47:e6:49:80:71:f9:2b:c8:a3:7c:2e:7a:18:ad: e3:79:98:5f:6e:02:82:6e:f6:6e:f7:f8:c4:33:49: a6:d3:6e:a4:65:70:ca:4b:b3:1d:62:44:44:d9:f1: d4:8c:fc:2f:90:6b:73:d2:e1:42:34:1a:bb:f0:29: 6a:6f:9b:e8:91:be:ae:e3:67:a7:a0:3d:a9:82:0d: c7:f6:88:e8:ef:14:b0:e5:ce:be:9a:4b:aa:72:64: 99:44:4e:f7:57:72:1e:be:8f:a9:d3:96:50:91:89: df:b9:de:52:a3:aa:87:55:c5:ab:77:90:9d:e3:f3: 17:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:32:60:F9:02:6C:AA:A8:36:A4:D0:73:59:D0:85:12:F7:A6:3C:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:60:37:73:13:8f:74:30:57:bd:90:a6:84:f8:c0:e2:c5:fb: b1:dc:bb:84:bf:4c:4a:1a:ea:63:c7:47:b5:bc:89:8e:09:7f: 6a:04:bf:c4:8e:78:d4:31:c1:8f:52:f7:db:b2:a5:00:26:c3: 61:d8:8a:74:70:6b:bb:70:1f:72:5a:87:8d:e6:9d:d6:92:9f: c4:32:34:be:68:17:b5:2d:d1:0a:70:8a:57:fc:52:8b:b3:2f: 24:0d:41:eb:cf:da:1c:b5:fb:30:1b:c1:bc:34:87:e2:a4:81: 5f:8b:83:c9:b9:39:51:5e:e2:c4:22:e9:c4:c6:6f:2a:96:76: d9:48:87:f2:a5:92:2c:87:c3:77:1c:be:c3:61:4a:28:4a:a3: 28:98:11:10:07:19:dc:2c:d5:08:cb:f0:ef:21:a4:62:57:4f: 02:9e:63:a8:45:58:b0:59:f7:e6:55:9e:1a:68:c9:73:17:67: 96:27:aa:ba:45:91:e4:68:e2:f5:a8:dd:77:55:f9:ad:32:dc: 03:e6:c6:68:6d:66:7a:a7:f9:81:bc:68:3b:55:17:e3:c8:cd: 71:bd:46:26:bc:ed:ea:66:2b:3f:ce:7c:c2:1e:79:a0:24:7e: c8:2e:65:39:b4:62:df:5d:91:b4:50:67:7d:ee:dd:99:6a:b4: 0e:cc:4b:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKBWHXWCi74KoyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk YzkwMTg2ZWItNGViMy00NGUzLTkwMTctNjZhZTE0ZjIzNTRhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn5FqS++tuvE9WOOwWi3E+/rai7F3psdAEfP fK2xrEetP4mmIDZUwewI+HN+QIFIeFYrt6mFPWBFQP9gIETymJzfzWqCv/edlREc iinSWSEKersX2aJkqUdKMLkT3TqBOnbMO8Qqnm8fWWW4PCSvCBl9ByAT0yGdwrcY szEPMo0/eMGk2nM+R+ZJgHH5K8ijfC56GK3jeZhfbgKCbvZu9/jEM0mm026kZXDK S7MdYkRE2fHUjPwvkGtz0uFCNBq78Clqb5vokb6u42enoD2pgg3H9ojo7xSw5c6+ mkuqcmSZRE73V3Ievo+p05ZQkYnfud5So6qHVcWrd5Cd4/MXMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMcyYPkCbKqoNqTQc1nQhRL3pjzEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjI4ZjVhNTctYzQyMS0z Y2YwLTliMmUtODdlM2MwZWQ0NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHhgN3MTj3QwV72QpoT4wOLF+7Hcu4S/TEoa6mPHR7W8iY4Jf2oEv8SO eNQxwY9S99uypQAmw2HYinRwa7twH3Jah43mndaSn8QyNL5oF7Ut0Qpwilf8Uouz LyQNQevP2hy1+zAbwbw0h+KkgV+Lg8m5OVFe4sQi6cTGbyqWdtlIh/KlkiyHw3cc vsNhSihKoyiYERAHGdws1QjL8O8hpGJXTwKeY6hFWLBZ9+ZVnhpoyXMXZ5YnqrpF keRo4vWo3XdV+a0y3APmxmhtZnqn+YG8aDtVF+PIzXG9Ria87epmKz/OfMIeeaAk fsguZTm0Yt9dkbRQZ33u3ZlqtA7MS8w= -----END CERTIFICATE-----Generated at Wed Feb 19 22:44:23 2025 by rpki-client