$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa File: c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa (raw, json) Hash identifier: +qJ8Hud9AQdbugMSagxFApcbOOL1eQ7Jb13JsIkx49g= Subject key identifier: 27:2A:A0:50:79:DE:CB:19:10:ED:BE:BA:8F:81:1B:EA:F2:45:12:CC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A065D3E32F262CD61DC6 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.32.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a0:65:d3:e3:2f:26:2c:d6:1d:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=09770b3c-fa6a-489c-9f64-67d88e11a4aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:63:07:66:4a:c1:ac:d2:6e:c1:f1:53:9a:09: 25:c0:79:cc:0a:c6:c7:1c:4a:10:9b:8d:f9:11:a1: 5f:1f:ff:31:c9:22:a4:ec:ba:ff:eb:42:a3:2e:17: ef:d0:14:53:c9:bc:40:ec:e3:5c:ee:43:ab:7f:6a: ca:ab:6b:d6:af:0d:7d:f4:ac:8c:58:85:fd:87:ed: ff:4b:8f:1c:22:90:1d:94:73:1f:97:ac:ed:80:f7: 9f:32:ea:3f:cc:e5:c6:f7:56:68:36:25:2b:d0:56: fc:f0:bb:24:cd:e3:5e:a2:d8:6a:0e:cf:97:5e:0f: 61:a7:d7:e6:e7:7f:15:ee:94:98:94:d6:a0:13:a0: d7:c5:41:57:89:44:0c:84:34:3e:a6:1d:48:5f:ba: bc:9a:b1:7c:b5:d1:6f:1d:6e:ec:c4:69:70:3f:2d: 39:82:b8:49:2b:7e:dd:40:90:6a:da:21:ea:9b:81: ef:1a:f2:72:ee:e1:34:f7:12:0c:5f:59:c3:bc:d2: ad:89:dc:ed:3c:a2:b1:db:14:50:a5:c5:b6:14:95: 38:0c:08:f7:e4:fa:9e:3c:50:25:aa:a4:8f:ae:63: 86:f1:fb:78:c3:48:04:d0:ab:1e:10:58:9a:41:ba: cb:8b:f0:a8:cb:4e:97:05:11:4f:0f:80:57:18:21: a9:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:2A:A0:50:79:DE:CB:19:10:ED:BE:BA:8F:81:1B:EA:F2:45:12:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:16:8d:4a:e8:59:a3:78:13:f9:4f:b9:b9:cd:bd:ae:97:50: 61:4a:69:94:01:0b:6b:d5:34:38:33:95:c4:84:57:29:7e:0e: 24:3e:6e:c2:97:26:d4:01:01:b9:1e:5d:4e:cd:c2:9e:44:d1: 12:d4:b8:c9:ad:c1:bd:94:b6:03:d8:0a:fb:1a:90:bf:ee:01: b9:6b:92:ed:eb:0b:ac:3a:0b:d5:f3:1a:23:dd:af:01:ec:07: 53:5e:41:d4:96:3e:fc:8d:ec:7a:dd:93:ea:26:05:45:bd:cc: c6:77:62:6c:76:07:72:35:5d:3a:c8:d4:23:d4:be:66:ec:9f: 0e:87:e2:b9:45:56:18:b6:ac:b0:9f:d1:c8:e6:29:2c:ba:de: a9:4e:92:d4:90:d6:f2:b6:0e:66:cc:ae:ba:5c:93:58:16:7a: dc:62:e0:56:9e:af:7a:e0:ab:1e:fa:d3:2e:d2:62:85:22:8a: ee:f9:d1:34:32:d6:a9:34:61:94:c4:ed:1a:b2:8f:f5:63:25: 97:68:a0:32:04:65:f2:a2:08:94:99:8c:f6:ad:bd:72:37:2c: 80:5c:0e:cd:db:86:ff:bc:17:cc:36:b6:5f:7c:00:7b:a0:7e: 7c:1f:7e:73:4c:6c:3f:05:c5:87:c6:b5:5b:09:69:52:8a:e2: d3:5b:d2:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKBl0+MvJizWHcYwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk MDk3NzBiM2MtZmE2YS00ODljLTlmNjQtNjdkODhlMTFhNGFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmMHZkrBrNJuwfFTmgklwHnMCsbHHEoQm435 EaFfH/8xySKk7Lr/60KjLhfv0BRTybxA7ONc7kOrf2rKq2vWrw199KyMWIX9h+3/ S48cIpAdlHMfl6ztgPefMuo/zOXG91ZoNiUr0Fb88LskzeNeothqDs+XXg9hp9fm 538V7pSYlNagE6DXxUFXiUQMhDQ+ph1IX7q8mrF8tdFvHW7sxGlwPy05grhJK37d QJBq2iHqm4HvGvJy7uE09xIMX1nDvNKtidztPKKx2xRQpcW2FJU4DAj35PqePFAl qqSPrmOG8ft4w0gE0KseEFiaQbrLi/Coy06XBRFPD4BXGCGpTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCcqoFB53ssZEO2+uo+BG+ryRRLMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzQ5YTkyOGEtY2I0My0z OTJlLThkNmQtNjhlOWRjNzNiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAwWjUroWaN4E/lPubnNva6XUGFKaZQBC2vVNDgzlcSEVyl+DiQ+bsKX JtQBAbkeXU7Nwp5E0RLUuMmtwb2UtgPYCvsakL/uAblrku3rC6w6C9XzGiPdrwHs B1NeQdSWPvyN7Hrdk+omBUW9zMZ3Ymx2B3I1XTrI1CPUvmbsnw6H4rlFVhi2rLCf 0cjmKSy63qlOktSQ1vK2DmbMrrpck1gWetxi4Faer3rgqx760y7SYoUiiu750TQy 1qk0YZTE7Rqyj/VjJZdooDIEZfKiCJSZjPatvXI3LIBcDs3bhv+8F8w2tl98AHug fnwffnNMbD8FxYfGtVsJaVKK4tNb0gg= -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:56 2025 by rpki-client