$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa File: ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa (raw, json) Hash identifier: vFfGde/MJ+FNKo+GRl10vHzpZTHp2FjaaQigtc1fwr8= Subject key identifier: 0E:B2:01:71:36:93:D4:96:2D:B8:97:68:CD:AE:31:B2:F3:E8:8A:D9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AAAF61A172BC261EE780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.60.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:aa:af:61:a1:72:bc:26:1e:e7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=dac93b57-f3d1-49cf-9b60-fffe0eacb36e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:51:3d:d1:f8:0d:18:60:0a:ec:ad:4f:c4:9c: 26:ea:38:3b:8e:13:30:74:ea:2d:6f:dc:49:0f:f1: 7a:e7:20:49:a5:b7:34:52:30:8b:85:ef:67:cc:66: 60:bb:87:91:f9:cc:32:82:72:5d:bb:d2:22:f0:02: 7c:79:ca:7b:c2:ef:38:90:91:bb:77:7c:1d:ac:e5: a6:5a:f9:06:81:28:7b:d2:47:4d:ac:f4:ad:3b:2d: a8:5f:13:d4:3c:9c:4a:0d:57:f5:87:ce:08:18:7c: 68:a7:7f:4c:f9:41:4a:d6:dd:a5:a8:94:6b:1b:a4: 85:dc:fe:e2:3a:eb:b2:8c:dc:29:07:62:30:d4:2e: e2:26:7f:30:ca:0d:fd:63:19:2b:61:ba:82:e8:e9: 7f:1d:4c:88:da:72:94:ce:d7:1c:5f:34:0d:86:42: 63:c1:58:ce:cb:e6:79:e0:b1:79:d5:d8:33:d4:09: 1a:c9:3a:fb:d4:74:58:ec:63:b2:ab:fd:91:c2:65: 0b:5f:c9:f9:48:fd:8c:53:72:75:ce:ee:7c:7f:4b: 44:50:a1:e7:7e:f5:a6:a2:43:51:e5:65:00:d0:5e: 92:e6:c7:78:6a:40:7a:2a:72:28:33:7b:29:cf:2c: 74:0d:19:72:a6:dc:63:08:2a:fe:a8:f3:70:08:b3: 73:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:B2:01:71:36:93:D4:96:2D:B8:97:68:CD:AE:31:B2:F3:E8:8A:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:83:ba:57:b3:fb:dd:45:54:17:53:31:fb:73:ec:71:73:cf: bb:5d:7f:ed:5e:a2:77:d0:78:dc:89:32:ce:bc:11:9a:0b:ad: 9e:fb:3d:1b:58:b0:50:4c:cb:d8:47:ca:6c:81:b2:37:63:b8: 3c:7d:fa:7d:c1:d6:8e:ca:0e:3a:c8:2e:8d:31:0d:c6:f8:02: 5c:ee:90:03:9f:b2:41:29:e3:c0:3e:2b:e4:9b:c7:83:12:b3: 82:b0:61:6b:21:2b:d4:d5:34:32:2f:62:c0:f1:97:ca:f4:f2: 9e:c1:6e:8b:93:89:44:26:2e:8a:98:0a:fa:25:37:2b:04:08: 3e:30:a9:3b:29:c5:8f:11:fc:a5:1a:f2:d9:1a:6c:4e:07:5b: ab:37:56:4b:fc:47:5e:bc:c9:0c:49:fa:c5:be:c6:6f:70:2f: 66:d8:f0:00:94:35:d7:0d:7d:a9:ce:85:98:76:c4:14:a1:a6: 8a:56:af:ba:2a:0f:93:e6:fc:ec:94:74:88:48:f2:e0:78:b3: 48:f9:93:89:b8:08:da:35:77:f6:78:83:78:ff:38:5c:df:de: 23:8d:0b:f0:de:01:96:f9:ee:73:90:fc:3d:86:eb:96:f1:fb: da:c9:25:59:16:a7:0a:9c:c6:0b:c9:73:8a:3a:d3:5c:51:49: 7d:bb:8b:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKqvYaFyvCYe54AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk ZGFjOTNiNTctZjNkMS00OWNmLTliNjAtZmZmZTBlYWNiMzZlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplE90fgNGGAK7K1PxJwm6jg7jhMwdOotb9xJ D/F65yBJpbc0UjCLhe9nzGZgu4eR+cwygnJdu9Ii8AJ8ecp7wu84kJG7d3wdrOWm WvkGgSh70kdNrPStOy2oXxPUPJxKDVf1h84IGHxop39M+UFK1t2lqJRrG6SF3P7i OuuyjNwpB2Iw1C7iJn8wyg39YxkrYbqC6Ol/HUyI2nKUztccXzQNhkJjwVjOy+Z5 4LF51dgz1AkayTr71HRY7GOyq/2RwmULX8n5SP2MU3J1zu58f0tEUKHnfvWmokNR 5WUA0F6S5sd4akB6KnIoM3spzyx0DRlyptxjCCr+qPNwCLNz0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA6yAXE2k9SWLbiXaM2uMbLz6IrZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2E5YzAwYTktMGMxNC0z NTJmLThhYzktZGVmNDAzYmMzYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSDulez+91FVBdTMftz7HFzz7tdf+1eonfQeNyJMs68EZoLrZ77PRtY sFBMy9hHymyBsjdjuDx9+n3B1o7KDjrILo0xDcb4AlzukAOfskEp48A+K+Sbx4MS s4KwYWshK9TVNDIvYsDxl8r08p7BbouTiUQmLoqYCvolNysECD4wqTspxY8R/KUa 8tkabE4HW6s3Vkv8R168yQxJ+sW+xm9wL2bY8ACUNdcNfanOhZh2xBShpopWr7oq D5Pm/OyUdIhI8uB4s0j5k4m4CNo1d/Z4g3j/OFzf3iONC/DeAZb57nOQ/D2G65bx +9rJJVkWpwqcxgvJc4o601xRSX27izE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:38:41 2025 by rpki-client