$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa File: b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa (raw, json) Hash identifier: wECOBD/QVelFBSJxvT+ZOlF6zDDuKKLKiLbwqViCTxc= Subject key identifier: DF:17:60:8D:74:1B:42:4B:DF:03:84:A1:19:02:F2:12:89:1C:6B:7C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A2836871805AE51F3400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa Signing time: Thu 23 Jan 2025 06:13:17 +0000 ROA not before: Thu 23 Jan 2025 06:13:17 +0000 ROA not after: Wed 23 Apr 2025 05:13:17 +0000 asID: 16591 IP address blocks: 136.32.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a2:83:68:71:80:5a:e5:1f:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:17 2025 GMT Not After : Apr 23 05:13:17 2025 GMT Subject: CN=51faa3f8-1994-4fbe-83a4-291717cc1453 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4d:f4:77:b7:67:12:1f:5f:34:03:a4:3a:88: d2:99:02:00:9f:fa:5c:81:4e:74:af:ca:2e:d1:33: d4:27:33:1d:74:11:ab:36:28:b2:d1:81:81:ae:53: be:04:98:78:f7:23:7c:66:45:ae:59:08:7c:0d:29: 1c:de:f4:71:ae:01:4a:97:a5:6c:15:2f:b0:30:d9: 86:a3:03:bd:8b:93:a1:80:94:fe:40:e7:fd:72:78: b5:1c:78:e7:08:e6:9e:1d:b6:02:c1:81:59:21:ff: 2b:8e:cb:bb:f7:b8:81:3d:bd:c5:74:20:4e:0b:91: 32:e3:59:d4:a6:57:26:33:47:86:88:9b:0f:b4:a3: 8d:92:0d:8f:c3:64:b4:38:fd:c5:52:a1:61:c0:73: 4e:0b:af:98:51:61:38:57:4c:4d:07:06:eb:9a:d3: 15:5c:c0:c8:7c:b9:7f:ca:73:5a:9d:a5:58:71:1a: 76:bc:17:59:04:76:95:12:e9:cd:97:5d:a5:92:5c: fd:58:a6:34:34:17:b1:ce:b8:12:30:12:ae:9a:46: 2f:09:71:19:5e:a7:0d:6a:96:31:0b:b3:16:08:4d: 3a:d5:f3:f1:ae:0e:7e:13:13:40:10:56:86:10:12: c0:3e:d9:a1:c4:bf:2d:b6:77:32:ae:52:ff:d5:b6: a7:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:17:60:8D:74:1B:42:4B:DF:03:84:A1:19:02:F2:12:89:1C:6B:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b767457c-fa3c-3db7-9beb-1e7bd3c625ce.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 93:5f:cb:32:97:94:63:f5:46:46:28:91:71:bd:4a:18:15:4b: 42:51:a1:10:cc:4d:66:de:e3:3b:a2:b7:bf:31:96:6c:27:12: e5:cc:a3:a8:d4:31:32:88:37:c4:2a:2a:74:9d:0e:2d:5e:95: e4:73:55:d2:d1:84:cf:c0:22:0c:ee:c8:64:e2:be:fa:bc:42: 7d:2b:e0:7f:0d:7e:de:c2:99:b0:da:56:0a:b2:05:17:2e:68: 77:2b:f1:20:a5:26:64:8f:5e:29:2d:8a:d2:00:f0:22:88:15: 0c:8c:5a:e9:9b:28:ad:41:23:6b:a1:4c:b3:c7:61:9e:7c:ba: c8:f0:35:8d:b3:51:b3:6e:75:83:70:99:99:d8:3e:56:11:70: 3e:f0:e0:20:c2:3b:00:0e:6c:35:bb:ec:5c:c8:bc:a0:d2:36: 35:bd:78:93:21:f1:35:c4:c8:70:65:61:6a:f9:40:41:90:2b: ca:0f:d4:23:73:d9:f4:a9:82:df:ab:c1:34:ab:11:3b:f0:c0: 83:eb:8e:e0:91:75:1a:70:91:dd:68:1c:d8:f6:9d:89:74:a8: d2:5a:ab:43:a3:22:c9:a8:d8:df:50:1a:aa:e6:c3:a9:f1:0a: 74:07:69:24:f6:8b:1a:91:46:e3:e2:1e:8d:67:e6:c2:af:e2: a2:15:9b:c9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKKDaHGAWuUfNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxN1oXDTI1MDQyMzA1MTMxN1owLzEtMCsGA1UEAxMk NTFmYWEzZjgtMTk5NC00ZmJlLTgzYTQtMjkxNzE3Y2MxNDUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo030d7dnEh9fNAOkOojSmQIAn/pcgU50r8ou 0TPUJzMddBGrNiiy0YGBrlO+BJh49yN8ZkWuWQh8DSkc3vRxrgFKl6VsFS+wMNmG owO9i5OhgJT+QOf9cni1HHjnCOaeHbYCwYFZIf8rjsu797iBPb3FdCBOC5Ey41nU plcmM0eGiJsPtKONkg2Pw2S0OP3FUqFhwHNOC6+YUWE4V0xNBwbrmtMVXMDIfLl/ ynNanaVYcRp2vBdZBHaVEunNl12lklz9WKY0NBexzrgSMBKumkYvCXEZXqcNapYx C7MWCE061fPxrg5+ExNAEFaGEBLAPtmhxL8ttncyrlL/1banUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8XYI10G0JL3wOEoRkC8hKJHGt8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjc2NzQ1N2MtZmEzYy0z ZGI3LTliZWItMWU3YmQzYzYyNWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJNfyzKXlGP1RkYokXG9ShgVS0JRoRDMTWbe4zuit78xlmwnEuXMo6jU MTKIN8QqKnSdDi1eleRzVdLRhM/AIgzuyGTivvq8Qn0r4H8Nft7CmbDaVgqyBRcu aHcr8SClJmSPXiktitIA8CKIFQyMWumbKK1BI2uhTLPHYZ58usjwNY2zUbNudYNw mZnYPlYRcD7w4CDCOwAObDW77FzIvKDSNjW9eJMh8TXEyHBlYWr5QEGQK8oP1CNz 2fSpgt+rwTSrETvwwIPrjuCRdRpwkd1oHNj2nYl0qNJaq0OjIsmo2N9QGqrmw6nx CnQHaST2ixqRRuPiHo1n5sKv4qIVm8k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:08 2025 by rpki-client