$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa File: d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa (raw, json) Hash identifier: XD4y1ejIxGhH77vjDIW/MMuOQOW1Ub7/xTtKIo46+Uo= Subject key identifier: 6D:B2:40:00:B8:53:A2:72:6A:C0:11:63:41:A4:50:82:B3:A2:3C:E2 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A7800F65E3D3C0DD8DC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa Signing time: Thu 23 Jan 2025 06:13:19 +0000 ROA not before: Thu 23 Jan 2025 06:13:19 +0000 ROA not after: Wed 23 Apr 2025 05:13:19 +0000 asID: 16591 IP address blocks: 136.53.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a7:80:0f:65:e3:d3:c0:dd:8d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:19 2025 GMT Not After : Apr 23 05:13:19 2025 GMT Subject: CN=da3874fd-0d54-4684-b4d9-3b1dc62f3949 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:00:b7:d5:6d:30:cd:97:8b:d5:b8:aa:d7:67: a2:fe:d4:34:03:06:cb:b9:b0:11:72:bb:fa:6a:bf: 32:ba:ac:0a:3b:59:ce:7e:4f:a2:e0:a4:d9:c7:c8: 5d:3e:08:bd:fa:bf:b8:d3:c5:97:7d:c4:d9:cf:12: 94:d9:6b:c0:a0:b9:45:d1:38:10:c6:7f:01:63:ca: a3:8b:23:87:16:8d:f3:9b:dc:e8:53:1c:a3:03:ed: 62:43:7d:77:c3:94:fd:8f:1a:bf:a7:d4:c5:64:e3: 9e:3b:22:1f:50:45:9b:76:62:9e:aa:60:5c:c3:be: af:6e:8e:2b:e0:44:5f:9d:f6:b0:92:a8:43:60:61: b8:6c:f0:4c:9d:4a:14:ff:1f:f2:a7:00:a0:89:85: 33:2c:99:af:df:4f:15:f6:68:f8:ab:fc:fe:43:c2: d2:ae:4e:b1:21:c2:3b:f5:94:45:b8:e6:5d:7e:6b: 31:9f:9b:25:c4:f6:f1:48:12:28:28:37:1c:38:33: 50:56:05:29:f6:b5:4d:ef:53:b0:dc:59:47:d4:c8: 6b:55:60:20:8e:d3:a5:cc:30:ba:1e:6d:a3:48:01: 85:da:aa:da:d5:a9:36:d2:cd:79:b0:35:5d:3e:62: 85:3d:84:88:04:1a:6b:0a:2b:81:fa:b8:ab:d9:5f: bb:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:B2:40:00:B8:53:A2:72:6A:C0:11:63:41:A4:50:82:B3:A2:3C:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d158e54d-cfa2-307c-95d0-4e82f644ecfb.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:c2:3a:23:a7:27:0a:ae:18:37:3f:ec:da:27:90:80:c5:fa: 5e:1b:62:9d:37:0f:3c:cd:51:fb:ec:89:5f:21:da:aa:ee:15: 9f:1b:37:37:a9:c0:95:a5:36:c3:09:e0:55:e4:ef:13:68:18: bd:97:15:1a:ac:25:1d:36:75:a3:9e:c7:65:07:c2:4b:cc:d1: a5:2a:26:10:80:58:31:8d:60:f7:6f:87:3c:43:1a:a8:e7:d2: 6b:1b:88:7f:93:ad:ab:6a:03:00:40:69:5d:c6:b0:d1:0b:6e: 9c:56:18:1c:10:23:cd:f9:3a:da:54:51:21:7e:2b:42:87:fb: 70:b5:87:f8:8f:d5:85:21:af:34:e5:bc:57:31:3a:fe:c7:4d: 57:2a:11:bc:f2:81:72:00:d1:99:03:b7:30:0f:9a:da:95:af: 33:78:b6:dd:bf:87:42:3f:15:97:8d:60:3a:76:47:00:6e:f7: 3f:c8:38:60:bb:da:b1:e8:18:02:38:ee:13:df:f4:39:72:39: 21:d4:41:73:fc:2c:c0:10:5c:0b:28:de:e7:49:55:5e:76:a3: b6:f8:68:25:5a:af:7f:e6:2d:09:59:ef:1e:48:c1:54:63:a6: 03:5b:2f:f4:84:c6:e6:ec:8f:12:ec:1c:56:84:4b:77:b0:77: e6:61:8c:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKeAD2Xj08DdjcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOVoXDTI1MDQyMzA1MTMxOVowLzEtMCsGA1UEAxMk ZGEzODc0ZmQtMGQ1NC00Njg0LWI0ZDktM2IxZGM2MmYzOTQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogC31W0wzZeL1biq12ei/tQ0AwbLubARcrv6 ar8yuqwKO1nOfk+i4KTZx8hdPgi9+r+408WXfcTZzxKU2WvAoLlF0TgQxn8BY8qj iyOHFo3zm9zoUxyjA+1iQ313w5T9jxq/p9TFZOOeOyIfUEWbdmKeqmBcw76vbo4r 4ERfnfawkqhDYGG4bPBMnUoU/x/ypwCgiYUzLJmv308V9mj4q/z+Q8LSrk6xIcI7 9ZRFuOZdfmsxn5slxPbxSBIoKDccODNQVgUp9rVN71Ow3FlH1MhrVWAgjtOlzDC6 Hm2jSAGF2qra1ak20s15sDVdPmKFPYSIBBprCiuB+rir2V+77QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG2yQAC4U6JyasARY0GkUIKzojziMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDE1OGU1NGQtY2ZhMi0z MDdjLTk1ZDAtNGU4MmY2NDRlY2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADrCOiOnJwquGDc/7NonkIDF+l4bYp03DzzNUfvsiV8h2qruFZ8bNzep wJWlNsMJ4FXk7xNoGL2XFRqsJR02daOex2UHwkvM0aUqJhCAWDGNYPdvhzxDGqjn 0msbiH+TratqAwBAaV3GsNELbpxWGBwQI835OtpUUSF+K0KH+3C1h/iP1YUhrzTl vFcxOv7HTVcqEbzygXIA0ZkDtzAPmtqVrzN4tt2/h0I/FZeNYDp2RwBu9z/IOGC7 2rHoGAI47hPf9DlyOSHUQXP8LMAQXAso3udJVV52o7b4aCVar3/mLQlZ7x5IwVRj pgNbL/SExubsjxLsHFaES3ewd+ZhjMs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:16 2025 by rpki-client