$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: xPH9wvNsPemNA0CfPKXz6gyNa2buQJW9Execyq3T8t0= Subject key identifier: 5B:50:E3:CF:66:BB:83:97:5F:60:43:31:FC:71:3F:5B:75:C2:6C:4C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AD19630017400FC34980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Thu 23 Jan 2025 06:13:22 +0000 ROA not before: Thu 23 Jan 2025 06:13:22 +0000 ROA not after: Wed 23 Apr 2025 05:13:22 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ad:19:63:00:17:40:0f:c3:49:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:22 2025 GMT Not After : Apr 23 05:13:22 2025 GMT Subject: CN=150ed803-be55-48ae-9826-23ec75090bae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:56:b2:93:87:a6:75:58:fb:b7:ce:d3:d7:59: 87:72:76:e1:7b:d3:01:92:89:4f:e3:0f:4a:0e:31: 04:51:e8:e5:d2:35:79:17:7a:b9:5e:aa:34:bb:a9: ae:29:7a:4c:16:46:24:e4:f2:7c:1c:2c:8f:8b:da: cc:07:93:64:cc:ec:5b:00:91:ea:e7:68:b7:70:3d: c3:c5:c6:05:06:7e:18:89:0f:c5:61:33:0d:7d:47: 61:d3:98:b2:1e:76:17:75:ea:e4:db:cf:a1:24:41: 04:08:f4:8e:3e:da:cc:a1:82:37:be:0c:5e:26:12: 6b:2c:d6:00:a1:84:ab:05:45:61:f5:fd:64:79:b0: 42:fd:46:58:22:71:6a:f1:8a:d8:a2:c2:f5:3f:b0: 08:f2:0d:f9:ee:35:b8:a5:62:f5:b3:0b:87:06:9c: 1e:45:c9:e3:33:52:5a:ed:16:1f:d4:13:ff:e6:77: ec:8d:87:bb:b3:a7:de:57:92:52:3c:7f:cb:ea:dc: 3e:2d:61:1f:4d:65:8a:f7:75:5d:03:ba:87:87:3d: f2:24:e3:db:7d:c4:8e:c5:29:83:2b:ed:5d:36:54: f8:f3:90:e9:55:21:49:ab:58:5c:5e:3e:b7:1d:30: 0b:38:ce:76:0d:77:d0:f3:df:14:69:a6:9b:85:cc: 7f:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:50:E3:CF:66:BB:83:97:5F:60:43:31:FC:71:3F:5B:75:C2:6C:4C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:54:ae:c4:67:cd:6b:b3:15:a3:18:42:54:7a:dd:4d:0c:9e: db:52:45:0f:28:eb:08:c8:98:da:4c:cc:24:b6:f4:3c:44:7f: 62:e4:bd:f2:27:d3:bc:37:d1:91:10:0c:4a:80:5f:69:18:98: 54:9a:d9:ab:a4:29:ad:ee:c7:f3:c6:93:52:12:62:c3:76:66: 61:df:8e:64:e4:9e:1f:fa:00:0a:f7:14:45:b1:db:b7:ba:27: 78:98:74:75:31:0b:e5:33:d8:b4:26:7e:70:c5:93:93:6b:57: 8c:9f:e1:ca:53:d9:2f:97:29:0d:65:cc:5f:97:5a:0a:39:ea: a4:ee:f4:37:53:1a:e5:75:f6:5f:6b:03:80:c5:c5:e3:c2:55: 3d:c6:af:17:fd:79:c8:e2:b7:68:a3:b6:31:21:a2:4d:05:8a: 45:f2:7e:8b:b3:45:1f:6a:a2:28:c9:dd:1a:b8:07:89:77:52: a3:04:bf:76:0b:61:39:30:3c:90:ab:43:ef:e2:2b:ec:70:75: 71:7c:81:4d:4b:6f:ec:a2:39:4b:65:72:7d:ae:e4:26:7a:45: 4c:ac:bc:08:bd:ee:33:41:46:91:19:cc:9c:71:b3:b9:c6:3e: 0b:61:45:e2:ca:31:d4:be:64:1a:a5:58:23:99:38:50:41:40: 27:20:0f:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK0ZYwAXQA/DSYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMloXDTI1MDQyMzA1MTMyMlowLzEtMCsGA1UEAxMk MTUwZWQ4MDMtYmU1NS00OGFlLTk4MjYtMjNlYzc1MDkwYmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1ayk4emdVj7t87T11mHcnbhe9MBkolP4w9K DjEEUejl0jV5F3q5Xqo0u6muKXpMFkYk5PJ8HCyPi9rMB5NkzOxbAJHq52i3cD3D xcYFBn4YiQ/FYTMNfUdh05iyHnYXderk28+hJEEECPSOPtrMoYI3vgxeJhJrLNYA oYSrBUVh9f1kebBC/UZYInFq8YrYosL1P7AI8g357jW4pWL1swuHBpweRcnjM1Ja 7RYf1BP/5nfsjYe7s6feV5JSPH/L6tw+LWEfTWWK93VdA7qHhz3yJOPbfcSOxSmD K+1dNlT485DpVSFJq1hcXj63HTALOM52DXfQ898Uaaabhcx/BwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtQ489mu4OXX2BDMfxxP1t1wmxMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJUrsRnzWuzFaMYQlR63U0MnttSRQ8o6wjImNpMzCS29DxEf2LkvfIn 07w30ZEQDEqAX2kYmFSa2aukKa3ux/PGk1ISYsN2ZmHfjmTknh/6AAr3FEWx27e6 J3iYdHUxC+Uz2LQmfnDFk5NrV4yf4cpT2S+XKQ1lzF+XWgo56qTu9DdTGuV19l9r A4DFxePCVT3Grxf9ecjit2ijtjEhok0FikXyfouzRR9qoijJ3Rq4B4l3UqMEv3YL YTkwPJCrQ+/iK+xwdXF8gU1Lb+yiOUtlcn2u5CZ6RUysvAi97jNBRpEZzJxxs7nG PgthReLKMdS+ZBqlWCOZOFBBQCcgD5A= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:53 2025 by rpki-client