$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc9f1d6c-8750-3085-82b8-5ab844459bb0.roa File: bc9f1d6c-8750-3085-82b8-5ab844459bb0.roa (raw, json) Hash identifier: vkSNWv2kLfSHYp+BqqVokp09uKXoRB6BSZnEm8ffRYg= Subject key identifier: AE:24:F6:44:76:6F:A3:54:8A:2F:4F:78:4A:2F:C9:4B:9D:62:01:5F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AF80235B0DCA0E4DB300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc9f1d6c-8750-3085-82b8-5ab844459bb0.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.56.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:af:80:23:5b:0d:ca:0e:4d:b3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=df5f9290-612c-4219-8bb9-3774ac3ea0a2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:3b:a5:22:78:a2:a8:1f:ba:64:8a:fc:73:a7: 8d:75:4b:69:62:9a:fc:11:bf:41:ef:f8:69:55:91: 2f:c3:7d:55:2b:64:02:af:fc:54:96:7f:21:3b:e0: cc:80:1b:96:72:a5:b4:b2:53:c3:a1:22:e7:aa:a1: 00:f4:32:89:ab:5f:a7:43:73:0c:03:52:03:7a:76: 3e:47:43:b4:00:9d:a3:53:ea:54:21:69:d1:43:04: 65:97:94:e2:7f:f4:2c:3a:bd:e9:db:49:9c:dd:97: bf:91:d7:c9:09:96:8a:16:56:5e:13:36:7c:4c:01: d0:bf:9a:69:b0:b9:0b:09:c2:16:75:2a:9f:c0:fa: 8e:e2:d7:ba:56:6a:22:0b:a0:86:a2:9c:3d:53:98: 11:76:da:59:66:d6:ba:2a:f8:c7:7c:b5:e6:d2:79: 23:cd:81:fb:87:24:9e:4c:a4:a7:4a:a3:56:b6:35: 97:01:80:79:b0:04:3c:41:ec:7d:3b:e7:e6:03:72: 87:96:08:63:b7:ac:07:ca:62:7b:30:4b:f6:6e:ae: 08:19:55:52:8e:02:8b:fc:61:d7:9e:c1:c8:f1:76: 19:1d:e1:b2:a8:11:d7:61:79:67:5a:30:dd:96:1b: b0:04:dd:f7:7a:9d:bb:34:81:76:3f:67:7c:33:56: bd:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:24:F6:44:76:6F:A3:54:8A:2F:4F:78:4A:2F:C9:4B:9D:62:01:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc9f1d6c-8750-3085-82b8-5ab844459bb0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.56.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:69:44:15:e7:a0:bc:6d:40:69:44:0c:f8:6c:f0:a6:34:fb: fd:61:ea:6c:c4:aa:0d:d7:6c:f7:03:cc:b0:3b:59:03:ce:e5: 0a:85:2a:51:aa:82:36:15:9b:64:e5:bb:c8:28:6e:f7:87:26: 3e:f3:4d:ca:2d:d3:d0:a2:85:54:ff:d5:e1:92:ea:13:68:33: 70:49:65:81:99:20:46:e9:66:66:f5:3c:8e:4c:63:97:30:f8: 71:3d:a2:59:f7:84:8a:6b:a1:66:05:66:97:ef:c8:1b:8c:af: 25:55:55:44:0e:26:1b:c1:f4:31:44:19:ef:f2:87:e8:9e:62: df:4d:81:5a:f7:f3:a8:ca:2d:47:ff:54:42:6a:29:4f:da:43: a4:5a:29:f5:4a:73:c8:59:f6:fe:69:37:09:4e:8c:4f:54:8f: 03:89:e4:48:ce:94:ad:e7:d7:26:00:b0:df:b3:f9:6f:ac:2f: a3:a8:8c:30:b2:dc:0f:92:3f:ee:4b:a7:cc:6b:f8:b9:6d:89: 90:89:23:ba:d5:9a:20:d7:da:70:75:e1:a9:0d:be:b4:66:16: d7:b1:1b:99:b0:b6:de:e9:fe:11:11:9c:d9:d9:1c:83:90:0c: d1:3e:06:37:32:ca:68:5f:f8:77:bd:17:be:5b:3e:ea:53:3b: e0:52:d1:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK+AI1sNyg5NswAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk ZGY1ZjkyOTAtNjEyYy00MjE5LThiYjktMzc3NGFjM2VhMGEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkzulIniiqB+6ZIr8c6eNdUtpYpr8Eb9B7/hp VZEvw31VK2QCr/xUln8hO+DMgBuWcqW0slPDoSLnqqEA9DKJq1+nQ3MMA1IDenY+ R0O0AJ2jU+pUIWnRQwRll5Tif/QsOr3p20mc3Ze/kdfJCZaKFlZeEzZ8TAHQv5pp sLkLCcIWdSqfwPqO4te6VmoiC6CGopw9U5gRdtpZZta6KvjHfLXm0nkjzYH7hySe TKSnSqNWtjWXAYB5sAQ8Qex9O+fmA3KHlghjt6wHymJ7MEv2bq4IGVVSjgKL/GHX nsHI8XYZHeGyqBHXYXlnWjDdlhuwBN33ep27NIF2P2d8M1a9WQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK4k9kR2b6NUii9PeEovyUudYgFfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmM5ZjFkNmMtODc1MC0z MDg1LTgyYjgtNWFiODQ0NDU5YmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDhAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtpRBXnoLxtQGlEDPhs8KY0+/1h6mzEqg3XbPcDzLA7WQPO5QqFKlGq gjYVm2Tlu8gobveHJj7zTcot09CihVT/1eGS6hNoM3BJZYGZIEbpZmb1PI5MY5cw +HE9oln3hIproWYFZpfvyBuMryVVVUQOJhvB9DFEGe/yh+ieYt9NgVr386jKLUf/ VEJqKU/aQ6RaKfVKc8hZ9v5pNwlOjE9UjwOJ5EjOlK3n1yYAsN+z+W+sL6OojDCy 3A+SP+5Lp8xr+LltiZCJI7rVmiDX2nB14akNvrRmFtexG5mwtt7p/hERnNnZHIOQ DNE+Bjcyymhf+He9F75bPupTO+BS0dA= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:50 2025 by rpki-client