$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa File: d5af2629-6142-348d-a1e2-7787336c8706.roa (raw, json) Hash identifier: FjVORoaJEAb+dNQvMXUxUxxUpGT4oubsQVI/moIfBSo= Subject key identifier: 18:1A:26:C3:FF:07:6D:1A:1B:BE:16:21:2A:9F:4F:F6:89:B2:D0:14 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A33988B2C256B5D5E304 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa Signing time: Thu 23 Jan 2025 06:13:17 +0000 ROA not before: Thu 23 Jan 2025 06:13:17 +0000 ROA not after: Wed 23 Apr 2025 05:13:17 +0000 asID: 16591 IP address blocks: 136.35.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a3:39:88:b2:c2:56:b5:d5:e3:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:17 2025 GMT Not After : Apr 23 05:13:17 2025 GMT Subject: CN=32843533-530e-4e5e-94d0-98ef2f0974c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:68:f2:8e:3f:e8:7d:ef:79:d0:0c:f1:a5:e8: ad:e4:45:52:a1:f1:18:c4:dd:a0:5b:9f:24:3e:65: d4:d6:b6:8e:88:7d:73:80:0e:2a:da:d0:32:90:4a: 0e:60:27:2e:ec:1c:4e:8a:e7:cc:cc:f7:73:68:af: 26:d6:53:a8:05:52:4e:40:29:4e:21:6b:3d:b8:ed: 96:7a:a2:86:a3:9b:19:4e:1c:3f:3e:0a:38:29:88: ef:ba:5a:d3:ca:c3:f6:09:76:7f:7b:b4:c1:72:58: 84:9c:89:26:8f:5a:22:d6:7f:42:1b:da:e2:74:e3: a3:e1:10:61:50:12:cc:0f:5e:c3:dd:75:bb:a2:90: a9:af:96:82:f0:e3:ca:a0:a0:4f:2c:2e:25:fa:42: 84:bd:35:12:3a:10:d9:52:a9:6e:e5:42:5a:ac:f1: 69:12:dd:5f:07:08:7e:02:e1:59:2c:c7:9b:3e:f8: 16:c7:01:b4:61:07:95:cb:74:2f:50:76:92:f5:13: c2:60:7c:33:c6:d2:ec:bb:d8:f8:0f:d3:9c:bd:d1: 25:83:66:9d:5c:9c:4b:0d:46:b8:a6:71:35:b7:87: ae:ff:96:1b:95:ab:11:dc:1c:c0:7e:02:d0:d0:f6: 35:3d:9d:eb:d5:c5:36:24:77:9b:fd:db:63:8b:f1: 68:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:1A:26:C3:FF:07:6D:1A:1B:BE:16:21:2A:9F:4F:F6:89:B2:D0:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d5af2629-6142-348d-a1e2-7787336c8706.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:51:60:1b:e5:93:42:bb:06:ff:0a:cc:47:a8:a7:8c:31:5c: 55:36:09:9e:7b:52:08:21:75:dc:9d:80:3b:a3:b5:90:eb:ca: 41:75:88:da:7c:01:55:02:8e:15:36:7c:41:84:a8:fb:7c:54: 77:c3:cc:bf:29:4a:64:d3:5b:48:0f:11:93:40:5a:76:f8:f1: f4:cc:e6:08:0a:56:30:79:2c:e6:62:43:cd:d2:39:34:f5:00: 50:73:43:37:da:ef:ff:c1:55:c6:67:72:a9:9f:53:ec:40:20: c3:3d:0b:7e:c4:55:2c:f1:9d:86:8a:56:d1:96:4f:1b:34:a5: 88:5b:01:44:62:9c:fe:da:18:71:8a:03:c2:2e:c8:76:d4:34: 6b:15:57:42:41:de:c0:2a:b2:ca:fc:07:52:ad:90:ea:be:3e: b7:92:6f:f0:0d:c6:8b:07:0e:09:d1:b1:71:c4:3a:54:f7:70: 4c:d6:bf:b8:14:c1:a8:18:06:24:8f:b2:74:d4:86:d3:ae:fd: b5:e3:8f:54:b6:75:36:af:c2:e7:6d:f3:41:c9:49:bc:b9:d6: 56:29:9a:8d:ec:37:f3:a8:62:c1:7a:57:4d:e8:b3:3b:01:3d: 6f:f4:55:ee:33:79:43:a2:2b:55:61:ac:bf:dd:17:eb:42:97: 0d:2c:37:25 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKM5iLLCVrXV4wQwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxN1oXDTI1MDQyMzA1MTMxN1owLzEtMCsGA1UEAxMk MzI4NDM1MzMtNTMwZS00ZTVlLTk0ZDAtOThlZjJmMDk3NGMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGjyjj/ofe950Azxpeit5EVSofEYxN2gW58k PmXU1raOiH1zgA4q2tAykEoOYCcu7BxOiufMzPdzaK8m1lOoBVJOQClOIWs9uO2W eqKGo5sZThw/Pgo4KYjvulrTysP2CXZ/e7TBcliEnIkmj1oi1n9CG9ridOOj4RBh UBLMD17D3XW7opCpr5aC8OPKoKBPLC4l+kKEvTUSOhDZUqlu5UJarPFpEt1fBwh+ AuFZLMebPvgWxwG0YQeVy3QvUHaS9RPCYHwzxtLsu9j4D9OcvdElg2adXJxLDUa4 pnE1t4eu/5YblasR3BzAfgLQ0PY1PZ3r1cU2JHeb/dtji/FoowIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBgaJsP/B20aG74WISqfT/aJstAUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDVhZjI2MjktNjE0Mi0z NDhkLWExZTItNzc4NzMzNmM4NzA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCMgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA9RYBvlk0K7Bv8KzEeop4wxXFU2CZ57UgghddydgDujtZDrykF1iNp8 AVUCjhU2fEGEqPt8VHfDzL8pSmTTW0gPEZNAWnb48fTM5ggKVjB5LOZiQ83SOTT1 AFBzQzfa7//BVcZncqmfU+xAIMM9C37EVSzxnYaKVtGWTxs0pYhbAURinP7aGHGK A8IuyHbUNGsVV0JB3sAqssr8B1KtkOq+PreSb/ANxosHDgnRsXHEOlT3cEzWv7gU wagYBiSPsnTUhtOu/bXjj1S2dTavwudt80HJSby51lYpmo3sN/OoYsF6V03oszsB PW/0Ve4zeUOiK1VhrL/dF+tClw0sNyU= -----END CERTIFICATE-----Generated at Wed Feb 19 22:41:15 2025 by rpki-client