$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa File: d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa (raw, json) Hash identifier: DBfmny7Kw6K9k5Qc/IkMF8wrIpFBUXoSENGPYYS4wDw= Subject key identifier: C9:73:F6:59:9F:D4:B8:C3:9D:5B:82:D0:51:FF:6E:CD:BF:83:08:2F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A4AB44D540BB7E36A940 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa Signing time: Thu 23 Jan 2025 06:13:18 +0000 ROA not before: Thu 23 Jan 2025 06:13:18 +0000 ROA not after: Wed 23 Apr 2025 05:13:18 +0000 asID: 16591 IP address blocks: 136.53.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a4:ab:44:d5:40:bb:7e:36:a9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:18 2025 GMT Not After : Apr 23 05:13:18 2025 GMT Subject: CN=da2bed27-a004-456e-866a-737f46021770 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:b9:7c:2b:70:23:30:2f:80:48:47:32:91: f0:cb:f1:e2:17:df:4b:19:53:3a:c2:c3:15:2e:40: 75:41:15:f5:6f:18:e9:a9:20:4e:3b:e1:a1:28:85: 9b:cb:4b:93:69:ef:47:61:64:5c:60:fc:07:70:c3: 72:51:e6:95:51:03:c5:c1:e5:4a:26:a5:25:10:4b: ea:92:ef:8d:a0:5c:73:dc:85:f9:0e:e0:f0:f2:23: f4:21:b0:b7:45:cd:fa:39:3c:32:93:0e:9d:93:5e: f7:b4:d3:6c:13:5f:7a:fb:25:41:3a:10:9a:0c:2a: e7:57:79:94:33:ff:8d:ef:6e:34:a2:2b:8f:af:8f: d6:86:2b:04:af:0c:41:79:c1:d1:81:50:e7:82:bf: 34:0d:d1:ac:e1:97:c5:a4:fd:30:81:f7:72:97:d0: c2:c0:f1:85:75:5b:74:5e:2d:8f:8f:d9:e8:fa:47: f8:0b:e2:91:7c:8b:ac:25:91:f9:76:bb:2a:6d:ba: 30:ce:13:ed:2c:ec:3e:44:11:04:4c:f5:27:5a:a3: 6f:8a:cd:be:f8:75:ca:9b:1b:94:c7:92:20:5f:e2: 73:04:9f:66:b7:20:30:94:86:84:d6:cb:76:0a:fe: ae:cf:4b:d5:1f:e1:dc:1a:31:4f:05:8f:cb:b5:4d: df:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:73:F6:59:9F:D4:B8:C3:9D:5B:82:D0:51:FF:6E:CD:BF:83:08:2F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 46:1f:2a:20:d1:ea:85:7b:3c:69:1d:ed:78:37:62:8c:2a:5f: 34:cd:ee:74:b2:12:91:2b:e9:e4:2c:fd:49:00:3c:11:01:2a: 7f:3e:00:cf:7b:d3:ff:48:1f:6c:22:91:ac:f6:ec:f0:bd:f2: 10:60:74:6b:c7:1b:f7:88:61:b2:00:bc:35:26:07:10:7c:da: b4:75:2a:97:4e:71:68:2d:4f:7b:8b:cf:9f:13:78:14:1e:14: 62:db:82:56:0b:17:e9:34:2f:a4:40:b3:fb:76:eb:79:8d:bc: 77:a7:02:1a:ea:a2:43:a5:63:96:77:d5:27:e4:ee:50:fa:96: c5:ce:85:fe:3f:4e:35:07:3a:72:d5:f7:61:48:65:7f:5b:c9: ac:54:43:c4:72:09:b3:95:32:60:f8:92:8c:d3:38:b5:65:2f: f6:64:75:d6:e3:55:49:90:9d:52:13:8b:fb:a7:2d:f1:e2:1c: 2c:9a:a6:78:65:12:85:2e:39:db:55:d9:14:4b:ef:22:5c:34: 0b:41:3d:e7:4f:72:b8:e5:4f:4f:c7:57:19:cf:05:50:40:20: b6:05:74:59:c2:39:c1:a4:1c:62:09:c3:ce:55:dd:5f:14:67: a4:9d:c1:d2:33:f0:d5:31:dd:37:48:5e:b5:aa:fe:6b:88:ff: da:d9:c3:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKSrRNVAu342qUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk ZGEyYmVkMjctYTAwNC00NTZlLTg2NmEtNzM3ZjQ2MDIxNzcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApti5fCtwIzAvgEhHMpHwy/HiF99LGVM6wsMV LkB1QRX1bxjpqSBOO+GhKIWby0uTae9HYWRcYPwHcMNyUeaVUQPFweVKJqUlEEvq ku+NoFxz3IX5DuDw8iP0IbC3Rc36OTwykw6dk173tNNsE196+yVBOhCaDCrnV3mU M/+N7240oiuPr4/WhisErwxBecHRgVDngr80DdGs4ZfFpP0wgfdyl9DCwPGFdVt0 Xi2Pj9no+kf4C+KRfIusJZH5drsqbbowzhPtLOw+RBEETPUnWqNvis2++HXKmxuU x5IgX+JzBJ9mtyAwlIaE1st2Cv6uz0vVH+HcGjFPBY/LtU3fHQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMlz9lmf1LjDnVuC0FH/bs2/gwgvMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDczNGE4YWEtZDkwMC0z OWNkLTgyMzctNThhYzBkMjhlM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEYfKiDR6oV7PGkd7Xg3YowqXzTN7nSyEpEr6eQs/UkAPBEBKn8+AM97 0/9IH2wikaz27PC98hBgdGvHG/eIYbIAvDUmBxB82rR1KpdOcWgtT3uLz58TeBQe FGLbglYLF+k0L6RAs/t263mNvHenAhrqokOlY5Z31Sfk7lD6lsXOhf4/TjUHOnLV 92FIZX9byaxUQ8RyCbOVMmD4kozTOLVlL/ZkddbjVUmQnVITi/unLfHiHCyapnhl EoUuOdtV2RRL7yJcNAtBPedPcrjlT0/HVxnPBVBAILYFdFnCOcGkHGIJw85V3V8U Z6SdwdIz8NUx3TdIXrWq/muI/9rZwwM= -----END CERTIFICATE-----Generated at Wed Feb 19 22:32:38 2025 by rpki-client