$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbc98c28-04bc-317a-9f76-761bc1b986e8.roa File: cbc98c28-04bc-317a-9f76-761bc1b986e8.roa (raw, json) Hash identifier: 87R598BYd+Q8UK1AOGPNE69o8DCcI46g6A/bjQ7scpw= Subject key identifier: 84:13:05:14:50:C5:84:06:45:F6:9A:5B:1E:18:DE:1B:15:CD:62:07 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A4D9E3626B85730CC640 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbc98c28-04bc-317a-9f76-761bc1b986e8.roa Signing time: Thu 23 Jan 2025 06:13:18 +0000 ROA not before: Thu 23 Jan 2025 06:13:18 +0000 ROA not after: Wed 23 Apr 2025 05:13:18 +0000 asID: 16591 IP address blocks: 136.62.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a4:d9:e3:62:6b:85:73:0c:c6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:18 2025 GMT Not After : Apr 23 05:13:18 2025 GMT Subject: CN=b2640b2e-950d-411e-b0c4-a9261752ac47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:b2:95:af:17:99:c1:06:f1:73:9c:f7:b0:00: fd:47:49:96:3a:96:b1:18:bf:d2:30:dd:72:76:92: 67:0c:ac:0c:ae:e9:97:f4:25:c0:97:6e:7a:62:ee: f7:76:07:f1:f3:3c:16:7a:e3:da:d2:d3:84:4a:7e: 20:23:05:99:0c:4e:1f:e5:13:3f:32:05:93:f0:40: 90:8e:1b:d7:96:3c:99:6b:fd:ad:e1:e5:9c:77:33: 70:01:0f:dd:49:08:23:2d:21:d1:f8:60:03:85:a5: 47:8b:78:1d:e0:0e:f2:e1:d9:c0:b6:da:5c:4d:fd: 18:59:06:20:96:8a:df:57:52:b4:7c:a0:13:fe:7e: 9d:38:08:6a:f6:6c:14:7b:46:5a:0f:e2:cb:c0:85: 79:6d:28:0a:01:e2:f0:9a:9c:1a:b4:5f:5d:db:10: f2:10:8c:f5:eb:b7:91:18:aa:81:49:9c:57:b3:e1: 5d:63:d2:36:0a:96:b3:37:8c:7e:63:32:b0:e5:69: 54:0c:e9:1a:68:0a:47:93:a7:82:90:23:55:21:a2: 81:fa:f9:0d:02:b2:5b:1b:38:63:60:09:d9:bf:3c: 34:8a:a4:b2:65:53:e6:14:be:6c:2f:9d:50:59:f9: 29:fe:7d:69:5f:d2:d0:51:57:fd:96:08:50:06:bc: d4:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:13:05:14:50:C5:84:06:45:F6:9A:5B:1E:18:DE:1B:15:CD:62:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cbc98c28-04bc-317a-9f76-761bc1b986e8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:b2:ea:bd:63:08:a2:40:61:a0:15:57:45:7d:b1:ff:02:ce: 17:48:11:00:4b:2e:71:03:3a:4c:62:77:0e:df:e2:de:5c:e5: 04:e9:c2:83:1c:fa:d6:61:fb:1a:c8:1a:35:f7:54:b5:6b:3f: c3:24:3e:6e:62:6d:4a:d5:7d:c4:55:a3:e3:ef:39:4c:32:67: ba:fa:f4:43:c8:48:b7:16:e7:11:6e:1a:da:07:04:6d:ec:be: 07:83:4f:54:40:7a:0d:92:db:c8:6e:fc:c5:78:99:0b:9b:ff: 53:07:8d:ae:cb:cc:75:7d:29:20:d4:51:12:ba:0b:7b:a8:7f: ec:9d:f4:ed:67:72:11:ea:7c:14:2c:63:bb:e4:72:09:d8:c4: fd:41:3e:c4:9f:d2:26:db:d0:ab:44:47:8e:31:be:b0:d8:2f: 60:57:ed:c4:f6:53:be:12:b4:2e:97:e1:4c:b2:05:a5:40:4e: 0c:38:44:8f:57:48:f4:40:b5:a4:22:12:68:b4:58:55:be:f3: 40:e8:7e:47:5b:75:6a:b7:0e:07:8a:22:87:2a:44:5b:0c:f6: b3:a3:11:0c:7f:96:43:59:92:b6:2e:b2:00:fa:be:a1:b3:8e: a9:4d:f4:cf:23:f1:59:de:f9:a5:c7:37:6c:04:02:4c:e6:5a: 24:d1:4b:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKTZ42JrhXMMxkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk YjI2NDBiMmUtOTUwZC00MTFlLWIwYzQtYTkyNjE3NTJhYzQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg7KVrxeZwQbxc5z3sAD9R0mWOpaxGL/SMN1y dpJnDKwMrumX9CXAl256Yu73dgfx8zwWeuPa0tOESn4gIwWZDE4f5RM/MgWT8ECQ jhvXljyZa/2t4eWcdzNwAQ/dSQgjLSHR+GADhaVHi3gd4A7y4dnAttpcTf0YWQYg lorfV1K0fKAT/n6dOAhq9mwUe0ZaD+LLwIV5bSgKAeLwmpwatF9d2xDyEIz167eR GKqBSZxXs+FdY9I2CpazN4x+YzKw5WlUDOkaaApHk6eCkCNVIaKB+vkNArJbGzhj YAnZvzw0iqSyZVPmFL5sL51QWfkp/n1pX9LQUVf9lghQBrzU1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIQTBRRQxYQGRfaaWx4Y3hsVzWIHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2JjOThjMjgtMDRiYy0z MTdhLTlmNzYtNzYxYmMxYjk4NmU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD4QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJGy6r1jCKJAYaAVV0V9sf8CzhdIEQBLLnEDOkxidw7f4t5c5QTpwoMc +tZh+xrIGjX3VLVrP8MkPm5ibUrVfcRVo+PvOUwyZ7r69EPISLcW5xFuGtoHBG3s vgeDT1RAeg2S28hu/MV4mQub/1MHja7LzHV9KSDUURK6C3uof+yd9O1nchHqfBQs Y7vkcgnYxP1BPsSf0ibb0KtER44xvrDYL2BX7cT2U74StC6X4UyyBaVATgw4RI9X SPRAtaQiEmi0WFW+80DofkdbdWq3DgeKIocqRFsM9rOjEQx/lkNZkrYusgD6vqGz jqlN9M8j8Vne+aXHN2wEAkzmWiTRS/o= -----END CERTIFICATE-----Generated at Wed Feb 19 22:33:06 2025 by rpki-client