$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6e51f14-2129-3005-98fe-9e2eea2b9e81.roa File: d6e51f14-2129-3005-98fe-9e2eea2b9e81.roa (raw, json) Hash identifier: rDyXTM4iqMg9h0Bvrr1hhTi1dVtsQYjsw5ZdYHheaig= Subject key identifier: B2:AA:EC:9D:53:2A:79:6C:75:DB:29:65:B1:30:E0:1C:FF:43:7E:B0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AB483C87071DEDC58CC0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6e51f14-2129-3005-98fe-9e2eea2b9e81.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.37.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ab:48:3c:87:07:1d:ed:c5:8c:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=4ff71bc5-0ea5-487d-9208-90b2f4084049 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:86:00:82:b9:0a:82:b5:46:6a:3f:cc:8b:82: dc:73:b3:2b:49:ff:27:18:94:77:ed:6c:69:bb:a9: f3:0d:35:3e:2d:b6:0c:41:fa:e7:ed:05:b8:0f:57: e9:2b:d2:5e:f1:2e:31:5b:82:02:98:a7:68:2c:fa: 9e:40:13:65:aa:80:34:30:ee:47:f6:17:a4:e6:96: 61:31:87:e9:98:60:a2:7d:c4:05:b3:c7:1b:5c:b0: a9:74:d9:59:27:d4:27:7a:42:ac:f7:9e:8a:16:85: 1a:58:2b:4e:c1:6b:75:57:37:3a:a7:60:b0:bf:af: db:60:f7:62:56:e1:27:d3:71:01:c8:65:39:eb:5d: 14:f0:6c:89:ad:eb:02:18:b4:79:94:a7:88:2b:74: d4:a5:58:2d:0c:db:26:b3:6b:bc:e1:b5:42:39:2b: 64:e1:49:e9:47:66:79:a8:6d:ed:44:88:36:7a:72: 6d:f0:11:e7:f1:b1:d2:ff:14:8a:be:69:b4:de:18: 7c:b7:23:2f:ae:bd:fd:1f:e3:96:c6:83:51:b3:6f: 51:f1:e6:c4:82:d8:f2:36:ac:e1:70:ca:a4:9f:e2: 1e:78:de:42:e2:3d:29:4c:23:03:d4:fa:35:1a:93: 45:7c:61:e6:57:c0:10:e2:d3:cc:60:26:a7:13:a5: 4c:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:AA:EC:9D:53:2A:79:6C:75:DB:29:65:B1:30:E0:1C:FF:43:7E:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d6e51f14-2129-3005-98fe-9e2eea2b9e81.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:0f:4e:7f:7a:78:f1:37:db:9b:fc:c0:54:ae:92:44:83:27: 3a:47:b5:e9:c1:d7:ef:d2:9b:16:d3:a4:dc:30:9d:a1:3c:9e: bc:be:3c:ed:de:33:a5:2a:7a:e9:5d:11:d5:7a:75:6c:2c:ff: c2:88:34:ef:01:9a:24:a9:ec:86:75:af:33:ce:80:c3:16:ea: 32:23:e1:b8:3f:78:6d:e9:30:4a:a6:91:4a:fc:97:54:84:18: f6:0d:d4:87:21:a7:4f:77:8b:1d:5c:f2:84:35:dd:c4:6f:a5: 4b:34:92:6e:f2:f8:24:26:bf:2c:54:6c:3c:ae:6a:fc:18:02: ee:cb:86:67:ba:7e:77:f4:e9:f5:27:55:4e:64:fe:52:93:61: 54:61:d8:2b:dd:d7:45:00:4e:76:da:f6:10:55:c9:a0:f1:2b: 50:43:b0:f1:2b:1c:52:e1:86:53:fd:36:38:c2:9d:96:a8:bb: 2d:b6:1f:e3:f2:99:be:dc:01:18:2e:43:0c:af:fc:d8:6a:78: 62:61:33:55:4b:e7:79:2e:60:ca:b1:31:8b:21:04:09:35:04: bf:2a:49:4a:e3:62:45:33:8d:3e:5d:ff:80:47:df:6a:80:4b: a4:65:ba:d5:d2:4c:5e:ab:cb:f0:85:33:ee:ca:da:9e:8f:2f: c2:e8:f6:ab -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKtIPIcHHe3FjMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk NGZmNzFiYzUtMGVhNS00ODdkLTkyMDgtOTBiMmY0MDg0MDQ5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvYYAgrkKgrVGaj/Mi4Lcc7MrSf8nGJR37Wxp u6nzDTU+LbYMQfrn7QW4D1fpK9Je8S4xW4ICmKdoLPqeQBNlqoA0MO5H9hek5pZh MYfpmGCifcQFs8cbXLCpdNlZJ9QnekKs956KFoUaWCtOwWt1Vzc6p2Cwv6/bYPdi VuEn03EByGU5610U8GyJresCGLR5lKeIK3TUpVgtDNsms2u84bVCOStk4UnpR2Z5 qG3tRIg2enJt8BHn8bHS/xSKvmm03hh8tyMvrr39H+OWxoNRs29R8ebEgtjyNqzh cMqkn+IeeN5C4j0pTCMD1Po1GpNFfGHmV8AQ4tPMYCanE6VM4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLKq7J1TKnlsddspZbEw4Bz/Q36wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDZlNTFmMTQtMjEyOS0z MDA1LTk4ZmUtOWUyZWVhMmI5ZTgxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCVgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGUPTn96ePE325v8wFSukkSDJzpHtenB1+/SmxbTpNwwnaE8nry+PO3e M6UqeuldEdV6dWws/8KINO8BmiSp7IZ1rzPOgMMW6jIj4bg/eG3pMEqmkUr8l1SE GPYN1Ichp093ix1c8oQ13cRvpUs0km7y+CQmvyxUbDyuavwYAu7Lhme6fnf06fUn VU5k/lKTYVRh2Cvd10UATnba9hBVyaDxK1BDsPErHFLhhlP9NjjCnZaouy22H+Py mb7cARguQwyv/NhqeGJhM1VL53kuYMqxMYshBAk1BL8qSUrjYkUzjT5d/4BH32qA S6RlutXSTF6ry/CFM+7K2p6PL8Lo9qs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:34:06 2025 by rpki-client