$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa File: dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa (raw, json) Hash identifier: rdgCLbDYaPl4P1oeF1M7KpNI9bVvGrYsWfwdsDJJERs= Subject key identifier: F2:89:95:16:EA:62:61:41:EE:D9:7B:5C:A4:D8:61:CB:26:A0:CC:53 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AE12BA263E63FDE027E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.55.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ae:12:ba:26:3e:63:fd:e0:27:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=92d9f189-41f9-4fd5-acb1-80c1aad6dfb0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:24:52:00:d4:06:f1:b2:62:a0:0a:c1:46:6e: 26:2d:eb:4e:a2:64:26:23:56:f8:38:09:07:4a:0b: 97:47:13:9a:f6:63:a1:9a:41:0f:75:ff:70:4c:75: 6f:e9:f8:05:3e:b5:05:e0:83:52:a6:96:7e:91:95: a1:c5:3b:1c:ef:dc:43:29:c0:40:38:45:a9:9b:e5: 1d:84:47:80:00:df:2e:b7:70:f4:b4:e7:79:9f:33: 3a:87:ec:eb:6e:7b:6b:01:a7:71:35:1d:6a:d7:49: e6:87:eb:7c:be:c2:f6:68:30:6f:06:73:c0:97:af: 0f:b3:7d:3e:07:88:57:75:e7:00:f5:2c:01:4b:7e: 3b:bb:d7:2b:5e:51:3b:0c:d3:aa:68:10:b2:0f:24: 18:a3:65:b3:b5:26:22:d1:b8:87:17:65:81:97:ac: bc:0f:db:e8:4e:34:53:ba:4e:c5:e3:9f:43:53:bf: ee:fb:e0:78:46:ab:31:a2:b1:03:6c:4b:b4:9f:39: 97:8c:be:58:e3:d1:ac:d3:8e:35:7f:b3:a4:f2:1d: 43:37:62:99:13:3e:a8:d6:8e:2b:63:81:53:c2:61: 64:4d:52:f5:c6:d0:2f:cd:61:a9:79:09:9f:a3:39: ae:9c:6f:e1:e0:9c:01:63:5b:a4:d4:5f:1f:b3:21: f6:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:89:95:16:EA:62:61:41:EE:D9:7B:5C:A4:D8:61:CB:26:A0:CC:53 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.55.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:b8:64:e5:0a:48:e2:ea:80:3e:f1:fe:ee:d9:b9:86:44:49: b6:71:b3:4c:69:b9:c6:7a:09:8a:f0:76:d2:79:8c:79:a4:1f: df:fc:74:43:87:8f:80:82:f8:6e:f9:28:ee:19:80:ab:6c:23: b4:5e:a3:7f:35:c0:a7:d8:27:83:fb:ca:45:02:35:81:99:f1: 2a:c8:65:fd:84:24:4f:c1:54:6f:6a:bd:af:a0:c8:92:54:20: c7:2d:10:3a:09:84:0d:6b:c1:94:5b:b0:8f:c5:b6:3a:7d:9f: cb:45:30:55:2c:90:9b:ea:fb:cc:b6:3c:ae:ca:71:1f:1f:c5: ac:2b:69:d5:e6:e3:b5:09:99:93:c8:bf:37:86:3b:4e:78:90: 34:f5:5d:c0:42:5d:0b:ea:4f:1f:65:a9:50:78:a7:7a:85:80: a0:2b:76:a7:20:3a:28:83:5f:9e:22:8e:f9:7b:58:c4:80:6f: 6d:b5:93:68:2e:a8:9f:13:23:36:dd:98:e6:5f:c9:c3:9a:7a: b5:24:16:48:69:01:e9:70:00:0d:01:3d:f7:f6:1b:13:27:66: e4:0f:58:33:7e:45:8e:38:ef:83:98:ae:20:21:31:d3:86:81: d8:24:5f:ff:f2:58:74:17:a1:d0:84:46:8e:cf:31:2d:ad:97: 93:67:d5:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK4SuiY+Y/3gJ+AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk OTJkOWYxODktNDFmOS00ZmQ1LWFjYjEtODBjMWFhZDZkZmIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiRSANQG8bJioArBRm4mLetOomQmI1b4OAkH SguXRxOa9mOhmkEPdf9wTHVv6fgFPrUF4INSppZ+kZWhxTsc79xDKcBAOEWpm+Ud hEeAAN8ut3D0tOd5nzM6h+zrbntrAadxNR1q10nmh+t8vsL2aDBvBnPAl68Ps30+ B4hXdecA9SwBS347u9crXlE7DNOqaBCyDyQYo2WztSYi0biHF2WBl6y8D9voTjRT uk7F459DU7/u++B4RqsxorEDbEu0nzmXjL5Y49Gs0441f7Ok8h1DN2KZEz6o1o4r Y4FTwmFkTVL1xtAvzWGpeQmfozmunG/h4JwBY1uk1F8fsyH2owIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPKJlRbqYmFB7tl7XKTYYcsmoMxTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGM4ZTk5YTctN2VjNy0z OGJiLWE1MzktYjM4M2I2MmJmM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ24ZOUKSOLqgD7x/u7ZuYZESbZxs0xpucZ6CYrwdtJ5jHmkH9/8dEOH j4CC+G75KO4ZgKtsI7Reo381wKfYJ4P7ykUCNYGZ8SrIZf2EJE/BVG9qva+gyJJU IMctEDoJhA1rwZRbsI/Ftjp9n8tFMFUskJvq+8y2PK7KcR8fxawradXm47UJmZPI vzeGO054kDT1XcBCXQvqTx9lqVB4p3qFgKArdqcgOiiDX54ijvl7WMSAb221k2gu qJ8TIzbdmOZfycOaerUkFkhpAelwAA0BPff2GxMnZuQPWDN+RY4474OYriAhMdOG gdgkX//yWHQXodCERo7PMS2tl5Nn1Tw= -----END CERTIFICATE-----Generated at Wed Feb 19 22:31:33 2025 by rpki-client