$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa File: b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa (raw, json) Hash identifier: KlaFwhMcXtqC9/diJhztAZzJ0TW8QKxvBVRZpUuT8D4= Subject key identifier: A7:2C:F2:41:47:B3:37:4B:AD:AF:29:AC:68:1B:BE:52:44:3C:57:AA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AA6C2282614DEE2E5342 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.32.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:aa:6c:22:82:61:4d:ee:2e:53:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=c415a3a8-23a4-4f5f-af12-ee9cf728df19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f0:71:65:94:55:e7:a0:70:24:f3:85:2c:c8:e7: 00:b6:44:43:59:d9:8a:88:93:44:11:6a:28:b6:4f: fa:1e:22:c9:f7:3c:dd:da:d8:e7:f6:b4:28:4d:37: 4d:e7:80:3d:09:4c:a7:6a:db:64:f7:1d:60:59:7d: bf:66:4d:cf:dc:b9:c8:26:2e:ef:4d:34:6d:90:79: 7d:33:98:b9:c3:6a:6b:f0:8f:a3:03:b9:9a:fd:86: ab:a3:2f:62:37:6b:09:c7:e5:87:3b:5b:73:ca:b4: 7a:2c:0e:83:8e:d0:96:d5:36:3d:35:7c:26:7d:6e: a0:e8:86:a2:73:dc:e6:cd:5f:d1:26:36:89:22:25: 3b:09:b7:f9:d6:c3:53:0d:26:70:37:26:17:90:20: b4:b4:73:af:54:63:e5:9c:8d:b7:2d:93:b4:3a:8a: fd:86:57:fc:f9:1e:b0:6b:20:96:57:33:da:04:d0: d5:75:28:0f:20:17:b5:ea:92:80:84:df:ff:bb:14: 06:ea:a8:ab:60:d6:24:be:3a:8a:cb:c9:b8:a6:33: 6a:88:08:fb:ba:e6:53:2d:10:40:04:d3:47:9d:24: f7:ec:28:d2:ae:2c:b9:04:ee:0a:2b:63:61:70:ca: d3:2d:2c:fc:c0:54:98:9c:d3:3b:0e:7c:bd:a5:75: ba:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:2C:F2:41:47:B3:37:4B:AD:AF:29:AC:68:1B:BE:52:44:3C:57:AA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b748cc4c-b756-3a58-a5ef-2a205ba047e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9e:41:64:5a:62:7d:c9:e7:9b:fb:64:e8:f1:e3:a0:7b:63:98: 0b:0d:87:5f:13:64:fc:79:66:83:c1:4b:b8:66:64:02:d6:09: 06:d9:62:ca:56:17:f2:ab:e8:2c:16:8a:84:20:2d:72:a5:39: 2f:f4:66:dc:5d:3a:9f:d4:61:65:4d:a8:02:7b:43:8d:75:65: 77:60:2b:0f:e3:df:ed:00:53:1f:88:54:d8:34:b7:2e:0a:fe: b9:ce:b0:f3:0e:de:0a:00:68:87:a0:79:15:bc:75:2d:ee:1d: 50:d1:17:20:c1:f8:83:2c:ea:8f:a6:d3:c0:45:38:55:f7:4e: ae:2e:c9:50:22:e3:d5:6c:d6:01:8b:82:f6:34:69:85:16:a5: e7:95:f8:20:b2:85:46:70:7d:24:09:a9:e0:5f:f2:90:99:31: c9:e1:6a:e5:fa:50:3c:8f:e1:f1:dd:83:23:29:d0:60:e0:6b: 95:99:36:87:02:09:e8:26:54:be:cd:0b:cc:37:2d:4a:e0:c1: 21:3f:d3:64:c7:16:1f:61:e3:be:2a:48:f7:6a:c7:70:13:c9: a9:af:c0:00:75:f4:e4:d6:11:a4:e2:6c:84:bf:d1:5f:78:6c: 4e:e4:03:dd:00:fa:5f:ac:2e:bd:c1:e4:81:ab:dc:62:f3:63: 8e:66:ed:d1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKpsIoJhTe4uU0IwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk YzQxNWEzYTgtMjNhNC00ZjVmLWFmMTItZWU5Y2Y3MjhkZjE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8HFllFXnoHAk84UsyOcAtkRDWdmKiJNEEWoo tk/6HiLJ9zzd2tjn9rQoTTdN54A9CUynattk9x1gWX2/Zk3P3LnIJi7vTTRtkHl9 M5i5w2pr8I+jA7ma/Yaroy9iN2sJx+WHO1tzyrR6LA6DjtCW1TY9NXwmfW6g6Iai c9zmzV/RJjaJIiU7Cbf51sNTDSZwNyYXkCC0tHOvVGPlnI23LZO0Oor9hlf8+R6w ayCWVzPaBNDVdSgPIBe16pKAhN//uxQG6qirYNYkvjqKy8m4pjNqiAj7uuZTLRBA BNNHnST37CjSriy5BO4KK2NhcMrTLSz8wFSYnNM7Dny9pXW6qwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKcs8kFHszdLra8prGgbvlJEPFeqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc0OGNjNGMtYjc1Ni0z YTU4LWE1ZWYtMmEyMDViYTA0N2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCCAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ5BZFpifcnnm/tk6PHjoHtjmAsNh18TZPx5ZoPBS7hmZALWCQbZYspW F/Kr6CwWioQgLXKlOS/0ZtxdOp/UYWVNqAJ7Q411ZXdgKw/j3+0AUx+IVNg0ty4K /rnOsPMO3goAaIegeRW8dS3uHVDRFyDB+IMs6o+m08BFOFX3Tq4uyVAi49Vs1gGL gvY0aYUWpeeV+CCyhUZwfSQJqeBf8pCZMcnhauX6UDyP4fHdgyMp0GDga5WZNocC CegmVL7NC8w3LUrgwSE/02THFh9h474qSPdqx3ATyamvwAB19OTWEaTibIS/0V94 bE7kA90A+l+sLr3B5IGr3GLzY45m7dE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:36:36 2025 by rpki-client