$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa File: b968a0f5-a9a4-37a1-ae22-297830d659f3.roa (raw, json) Hash identifier: sC8z2ULPkg54LLQXu4CIvEmW8M+G22iMz0yvJnbpSVY= Subject key identifier: 81:30:B3:CE:AA:AC:7B:C5:50:78:23:4B:36:B7:7F:BD:7F:60:58:33 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A6A0B73ED1F48C24B1C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.56.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a6:a0:b7:3e:d1:f4:8c:24:b1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=4a0fd487-a978-4991-9fbf-6d6ff248d790 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b7:79:66:e5:3a:f0:af:37:b0:0b:88:53:e5: 65:91:f9:72:56:00:06:74:02:70:15:4b:93:9c:1b: 9c:c1:c9:10:ad:90:77:7d:9f:35:e7:f0:81:8d:4c: 52:35:a5:15:29:b1:e3:17:cc:7b:ab:59:85:ef:34: f1:ba:0a:78:97:cb:ac:51:66:75:c7:f1:82:37:e7: b4:c4:55:35:3b:02:63:fb:ca:78:81:c5:b2:7e:20: 0d:cf:e2:0e:b0:f4:6a:0a:8b:fe:31:11:cb:96:34: 17:89:4c:c5:a0:a3:50:90:6f:d3:7c:07:b7:e3:68: 58:68:1c:26:5c:52:61:61:17:66:38:ea:c4:0f:fb: 67:3c:fb:10:bd:4b:8e:75:24:42:d4:de:e2:d9:a4: 3e:38:cd:ba:fb:0d:50:79:70:3c:5f:dc:09:43:ed: 7b:65:70:77:ee:44:a9:e8:cd:1a:cb:6a:a6:87:d3: bb:c7:c0:2b:80:32:2c:d4:1b:50:df:6a:71:67:22: ac:c2:64:5e:30:80:93:11:0d:08:dd:08:be:34:7a: af:cb:73:a8:be:86:f8:fd:3e:bf:13:b3:ad:bb:1f: cc:0f:13:89:3b:fb:27:aa:36:65:28:e1:67:0d:54: da:44:c2:94:5d:6e:8d:de:5e:fd:b7:ee:06:95:e5: 77:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 81:30:B3:CE:AA:AC:7B:C5:50:78:23:4B:36:B7:7F:BD:7F:60:58:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b968a0f5-a9a4-37a1-ae22-297830d659f3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:4e:7c:a3:de:0b:77:96:5a:11:93:28:fb:97:b5:b2:ba:df: 42:01:55:51:4d:d8:5a:f4:e3:9e:ad:5d:ff:7a:0c:15:8f:9d: ec:e0:3c:a0:40:07:87:de:b8:ed:66:6f:e7:ce:5b:8f:8b:e6: b8:00:a9:25:4b:55:9f:21:e2:a2:09:00:a3:1a:58:ce:26:19: c0:4d:8d:ae:cb:22:fb:db:1d:bd:99:e1:2a:69:38:c2:c8:47: a2:62:87:4a:7f:ae:ec:fe:67:25:46:f8:de:d8:73:3b:de:a9: 12:7d:80:b0:cb:f0:9f:2a:44:56:59:2e:d3:92:f4:58:59:01: 56:7c:82:12:e0:65:5b:11:cd:20:96:7d:9a:c2:f9:dc:99:cd: f1:f0:d8:a7:32:36:81:f3:4f:c3:17:3e:2f:6b:6d:e6:f8:d9: 2b:3e:91:4d:96:06:35:0d:38:9c:fa:fa:3d:8b:5e:ba:4a:11: 46:a6:98:41:b4:a2:95:31:bb:a6:78:e5:f8:81:75:72:88:2d: 8b:6b:0c:4e:35:de:8a:98:88:b3:9b:0a:31:a2:08:08:19:d8: be:a9:d3:52:fe:77:16:64:a3:bb:8e:40:9d:73:2e:8b:58:11: 82:3a:84:38:32:96:cc:58:4b:1a:f9:da:43:4f:37:a4:de:f1: 40:86:b7:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKagtz7R9IwkscAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk NGEwZmQ0ODctYTk3OC00OTkxLTlmYmYtNmQ2ZmYyNDhkNzkwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrd5ZuU68K83sAuIU+VlkflyVgAGdAJwFUuT nBucwckQrZB3fZ815/CBjUxSNaUVKbHjF8x7q1mF7zTxugp4l8usUWZ1x/GCN+e0 xFU1OwJj+8p4gcWyfiANz+IOsPRqCov+MRHLljQXiUzFoKNQkG/TfAe342hYaBwm XFJhYRdmOOrED/tnPPsQvUuOdSRC1N7i2aQ+OM26+w1QeXA8X9wJQ+17ZXB37kSp 6M0ay2qmh9O7x8ArgDIs1BtQ32pxZyKswmReMICTEQ0I3Qi+NHqvy3Oovob4/T6/ E7Otux/MDxOJO/snqjZlKOFnDVTaRMKUXW6N3l79t+4GleV3kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIEws86qrHvFUHgjSza3f71/YFgzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjk2OGEwZjUtYTlhNC0z N2ExLWFlMjItMjk3ODMwZDY1OWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDgQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBOfKPeC3eWWhGTKPuXtbK630IBVVFN2Fr0456tXf96DBWPnezgPKBA B4feuO1mb+fOW4+L5rgAqSVLVZ8h4qIJAKMaWM4mGcBNja7LIvvbHb2Z4SppOMLI R6Jih0p/ruz+ZyVG+N7YczveqRJ9gLDL8J8qRFZZLtOS9FhZAVZ8ghLgZVsRzSCW fZrC+dyZzfHw2KcyNoHzT8MXPi9rbeb42Ss+kU2WBjUNOJz6+j2LXrpKEUammEG0 opUxu6Z45fiBdXKILYtrDE413oqYiLObCjGiCAgZ2L6p01L+dxZko7uOQJ1zLotY EYI6hDgylsxYSxr52kNPN6Te8UCGt7U= -----END CERTIFICATE-----Generated at Wed Feb 19 22:37:27 2025 by rpki-client