$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa File: ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa (raw, json) Hash identifier: Rc4mTV6tHjykFnR4bPG5b36V5s7qDeIMTtVRZVuhHi8= Subject key identifier: 23:82:0E:62:87:46:C6:0A:43:22:E1:24:1E:1A:F7:27:4D:A6:DC:E4 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A720A57D3A1BBF2C6D00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.35.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a7:20:a5:7d:3a:1b:bf:2c:6d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=a0793b3c-3634-4143-b746-cdb690b953dd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:8d:07:b2:06:80:ac:c4:25:b6:58:29:4e:02: d2:a5:f1:55:1a:a2:7f:3d:01:0f:97:af:38:24:18: 2b:6d:47:3c:9a:c0:1a:e2:77:ca:d4:5b:85:f0:f7: 1c:42:47:4d:07:43:01:c5:eb:fc:f2:7f:32:bd:a3: 0f:7b:e8:b9:36:39:aa:02:4a:77:a4:7d:bb:af:b6: dd:51:25:20:4e:da:bd:97:e9:e3:24:9f:ce:64:07: c6:c4:e6:22:2e:aa:0a:49:ea:f2:98:0e:57:ac:d1: 0a:4b:4d:22:78:57:e6:32:a1:86:3b:32:a8:23:fa: b3:6e:9c:74:88:14:62:d0:4c:15:4e:b0:92:14:57: 29:87:4a:ce:a2:fb:53:8f:90:41:ac:5f:22:4a:b2: 43:2e:b2:dc:df:cf:26:ca:fa:68:1b:28:81:20:95: ad:fa:43:86:98:31:96:32:98:a4:dc:53:a3:f4:c5: 81:01:27:34:ee:a8:2a:52:3c:42:39:f7:f9:97:11: 69:9e:f8:ba:92:14:13:2c:7e:6a:96:d4:1f:0d:03: c8:24:11:1c:18:20:de:66:24:ab:3e:c2:d5:dc:a5: f2:d9:ce:39:c3:4e:69:93:49:a0:59:20:46:e0:92: df:ca:59:29:60:2a:a7:28:41:70:d9:28:c6:53:6f: e5:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:82:0E:62:87:46:C6:0A:43:22:E1:24:1E:1A:F7:27:4D:A6:DC:E4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca6bdb6c-a22e-3805-87b8-55a8f7a83dff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:27:c3:2a:c6:23:ed:80:41:a4:29:d7:a6:39:76:ca:2e:3f: 3d:67:bf:a7:31:9f:85:dc:9c:a3:d5:10:b6:ed:15:58:0b:1c: 12:d2:5b:26:d2:2d:66:f4:02:4d:a3:ce:bd:8d:55:73:03:61: 71:b2:0e:4b:1a:a4:ca:b9:db:5e:02:19:c0:5c:0b:02:93:d1: 61:49:6c:16:25:ea:cb:48:a6:52:ae:00:f7:83:c7:ce:f3:b4: dc:be:3d:7b:6d:95:d8:54:05:2d:46:40:9a:6c:6f:72:dc:46: 55:b7:f8:64:ff:38:90:4b:0e:08:9f:f1:93:d9:6b:cb:25:74: f1:2e:f8:26:52:fe:18:d2:db:0d:43:9d:b4:83:7d:07:8f:6f: f3:b9:43:99:ca:50:41:61:df:5e:ac:82:d9:16:c9:5b:7e:13: ed:97:c0:34:68:0a:e4:63:26:d4:e1:1c:9b:2f:96:29:bf:42: ff:09:de:90:7d:00:7a:59:d7:27:10:45:17:49:4a:49:61:9f: 6e:b5:ba:8b:af:04:58:60:5e:43:cc:b7:ba:5e:dd:16:d4:5e: f1:10:70:c5:57:e3:15:5e:da:3e:ac:8c:bd:04:c0:70:78:a1: d6:27:26:59:df:e7:e1:f5:36:0e:0d:b6:55:a4:f3:93:47:14: 13:58:27:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKcgpX06G78sbQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk YTA3OTNiM2MtMzYzNC00MTQzLWI3NDYtY2RiNjkwYjk1M2RkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnI0HsgaArMQltlgpTgLSpfFVGqJ/PQEPl684 JBgrbUc8msAa4nfK1FuF8PccQkdNB0MBxev88n8yvaMPe+i5NjmqAkp3pH27r7bd USUgTtq9l+njJJ/OZAfGxOYiLqoKSerymA5XrNEKS00ieFfmMqGGOzKoI/qzbpx0 iBRi0EwVTrCSFFcph0rOovtTj5BBrF8iSrJDLrLc388myvpoGyiBIJWt+kOGmDGW Mpik3FOj9MWBASc07qgqUjxCOff5lxFpnvi6khQTLH5qltQfDQPIJBEcGCDeZiSr PsLV3KXy2c45w05pk0mgWSBG4JLfylkpYCqnKEFw2SjGU2/lsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCOCDmKHRsYKQyLhJB4a9ydNptzkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2E2YmRiNmMtYTIyZS0z ODA1LTg3YjgtNTVhOGY3YTgzZGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4nwyrGI+2AQaQp16Y5dsouPz1nv6cxn4XcnKPVELbtFVgLHBLSWybS LWb0Ak2jzr2NVXMDYXGyDksapMq5214CGcBcCwKT0WFJbBYl6stIplKuAPeDx87z tNy+PXttldhUBS1GQJpsb3LcRlW3+GT/OJBLDgif8ZPZa8sldPEu+CZS/hjS2w1D nbSDfQePb/O5Q5nKUEFh316sgtkWyVt+E+2XwDRoCuRjJtThHJsvlim/Qv8J3pB9 AHpZ1ycQRRdJSklhn261uouvBFhgXkPMt7pe3RbUXvEQcMVX4xVe2j6sjL0EwHB4 odYnJlnf5+H1Ng4NtlWk85NHFBNYJ14= -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:50 2025 by rpki-client