$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa File: c6274218-8329-3cd3-8939-6c250a64b22e.roa (raw, json) Hash identifier: FcGaKGDvYmKkaTTZ11oePtEKGm4JC/7oSeJR6v2ovLo= Subject key identifier: AF:DD:8A:6C:DD:31:E5:85:60:39:EA:3D:C0:5E:21:45:CA:A0:2A:2F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AF25063EDFB8253AAF30 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.62.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:af:25:06:3e:df:b8:25:3a:af:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=754421a3-6af3-4876-8a27-6c825121a910 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:a5:d5:d8:97:c9:fb:a2:9c:24:51:f0:08:01: 2b:7b:f3:06:fb:8e:a8:e9:b8:4a:ab:4c:2f:dd:50: 4e:bb:09:14:65:b0:3d:9a:38:90:19:59:0c:c5:bc: 25:84:7c:9b:1b:76:8f:be:3c:2d:79:f6:ef:d9:c1: fe:ce:c9:93:a9:a7:b0:f4:4e:c2:b9:7c:b0:f3:e9: b3:08:78:e6:e8:76:1e:d7:73:64:7b:a2:47:1c:73: e0:46:08:a5:2a:1d:bf:0f:6e:66:88:71:78:46:1b: c4:29:11:26:7e:d4:3b:d6:c2:ab:29:51:05:23:8f: 27:20:d0:a5:3b:ca:3d:7c:c1:8d:51:8e:ca:36:2a: b8:b8:86:23:45:12:d9:52:9e:0a:d4:92:89:f6:f3: 3c:83:2f:80:7e:ae:c3:ae:f6:31:c8:5b:1f:48:7b: c1:62:b5:ec:ed:63:71:cd:14:3f:fb:2f:f8:b7:2b: e7:c4:d7:e1:f1:f5:1b:d4:61:68:a3:8a:e3:b5:c1: d2:fa:5f:7f:15:8c:47:e7:5d:36:b0:fb:9a:bf:c5: 3d:0d:ec:97:f7:83:b1:82:90:ad:a6:11:a7:2b:3d: 57:dc:b3:8d:e8:8b:cf:b0:f1:e2:65:ea:73:8e:01: c6:de:b8:e5:c0:d9:6b:5b:a1:11:e3:d6:ce:67:13: 32:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:DD:8A:6C:DD:31:E5:85:60:39:EA:3D:C0:5E:21:45:CA:A0:2A:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c6274218-8329-3cd3-8939-6c250a64b22e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:c0:09:f3:cf:79:70:9c:0f:24:fa:0d:98:12:e9:5c:89:4d: 20:86:cc:9a:67:29:17:6c:c2:95:e0:93:f1:f3:b1:ae:11:51: 85:0a:72:ee:fc:ae:1b:af:79:ee:a2:97:26:40:5c:6f:82:d7: 3f:2c:a1:3e:51:81:3f:92:fe:d7:60:c6:a4:82:84:9e:68:d9: aa:ac:b2:af:d3:25:32:cb:3e:29:4f:3a:6f:b4:03:ad:56:81: ba:cd:9f:74:af:97:fc:19:43:8b:7a:f0:2b:7c:11:8f:10:45: 1d:af:01:77:7e:9d:61:bf:dc:17:be:91:5c:00:43:11:88:83: 20:2d:97:13:0f:d1:ef:4f:93:b3:45:a3:c1:e7:d8:28:83:a8: 52:23:09:f3:e5:7e:f8:60:37:6d:c1:e5:da:fd:77:54:8d:be: cb:90:0d:b3:81:1a:6e:6c:e8:1c:51:7d:59:a4:47:85:bf:db: 52:4a:15:15:17:cb:99:49:67:a8:f5:bb:1a:76:ab:80:26:be: 7f:eb:0f:89:2d:7a:55:b2:81:da:53:24:52:01:34:d7:47:d5: 3d:2e:00:ff:2b:9c:ce:05:85:35:a9:1f:11:5d:be:d4:86:b9: ef:0c:4f:c9:37:d1:76:52:22:dd:f6:96:9d:19:bc:fe:32:bc: 10:de:67:69 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK8lBj7fuCU6rzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk NzU0NDIxYTMtNmFmMy00ODc2LThhMjctNmM4MjUxMjFhOTEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8aXV2JfJ+6KcJFHwCAEre/MG+46o6bhKq0wv 3VBOuwkUZbA9mjiQGVkMxbwlhHybG3aPvjwtefbv2cH+zsmTqaew9E7CuXyw8+mz CHjm6HYe13Nke6JHHHPgRgilKh2/D25miHF4RhvEKREmftQ71sKrKVEFI48nINCl O8o9fMGNUY7KNiq4uIYjRRLZUp4K1JKJ9vM8gy+Afq7DrvYxyFsfSHvBYrXs7WNx zRQ/+y/4tyvnxNfh8fUb1GFoo4rjtcHS+l9/FYxH5102sPuav8U9DeyX94OxgpCt phGnKz1X3LON6IvPsPHiZepzjgHG3rjlwNlrW6ER49bOZxMyxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK/dimzdMeWFYDnqPcBeIUXKoCovMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzYyNzQyMTgtODMyOS0z Y2QzLTg5MzktNmMyNTBhNjRiMjJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD5gMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEfACfPPeXCcDyT6DZgS6VyJTSCGzJpnKRdswpXgk/Hzsa4RUYUKcu78 rhuvee6ilyZAXG+C1z8soT5RgT+S/tdgxqSChJ5o2aqssq/TJTLLPilPOm+0A61W gbrNn3Svl/wZQ4t68Ct8EY8QRR2vAXd+nWG/3Be+kVwAQxGIgyAtlxMP0e9Pk7NF o8Hn2CiDqFIjCfPlfvhgN23B5dr9d1SNvsuQDbOBGm5s6BxRfVmkR4W/21JKFRUX y5lJZ6j1uxp2q4Amvn/rD4ktelWygdpTJFIBNNdH1T0uAP8rnM4FhTWpHxFdvtSG ue8MT8k30XZSIt32lp0ZvP4yvBDeZ2k= -----END CERTIFICATE-----Generated at Wed Feb 19 22:40:37 2025 by rpki-client