$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa File: e4427f2e-8c0b-3316-9550-f264211ff023.roa (raw, json) Hash identifier: vBsRXPAtc2ga+Z7+9C1iFguUrx/VpEw0SSY0PR2PBAI= Subject key identifier: 44:50:FE:80:67:C6:A6:10:19:FE:37:B7:FF:08:D8:33:5D:47:C7:36 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AF01CE8251605DC0D080 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa Signing time: Thu 23 Jan 2025 06:13:23 +0000 ROA not before: Thu 23 Jan 2025 06:13:23 +0000 ROA not after: Wed 23 Apr 2025 05:13:23 +0000 asID: 16591 IP address blocks: 136.38.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:af:01:ce:82:51:60:5d:c0:d0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:23 2025 GMT Not After : Apr 23 05:13:23 2025 GMT Subject: CN=ac78d531-e398-4c3f-a42c-c926b602b981 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8f:83:29:46:27:0c:a0:0f:db:af:62:e1:40: fb:12:90:ca:0f:fd:89:fa:7b:09:9f:b4:22:00:36: 7f:61:1b:2c:18:ab:07:47:3e:e2:83:c8:3a:50:46: 92:79:db:8e:b9:73:14:53:8a:21:d7:07:87:50:23: ea:ac:e5:01:ac:78:d9:8d:ce:8d:5d:7f:31:ee:b0: 56:a2:7c:9c:f8:e7:94:90:91:2a:e9:86:b7:60:ae: de:e3:a7:01:50:61:8a:f2:a0:21:1f:83:98:b0:7e: 2f:37:f6:f7:ed:9d:5f:d7:65:b7:8a:eb:5a:2d:5a: 69:45:00:5f:db:fe:9f:42:26:ff:2c:44:2f:bf:81: 24:5d:79:25:44:38:88:0c:35:cb:be:2d:05:f8:93: 2b:08:f2:da:c5:ec:87:86:58:39:0a:0e:d2:e7:2c: ec:fa:c0:b0:41:c5:9d:0b:0a:cf:35:4d:28:85:83: 55:2b:8f:96:9d:af:d4:69:6e:f7:7f:0e:ba:30:b4: 15:7c:6d:0e:2c:51:f5:9b:f8:ee:40:e3:79:2c:de: 63:2d:d3:56:88:04:a8:46:97:d1:ad:87:86:5d:44: 33:18:7f:8f:1a:dd:d9:97:30:3e:3d:bd:9f:59:71: 34:94:aa:96:24:8f:a0:28:03:9d:3c:ed:19:f4:e7: d9:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:50:FE:80:67:C6:A6:10:19:FE:37:B7:FF:08:D8:33:5D:47:C7:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e4427f2e-8c0b-3316-9550-f264211ff023.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2b:d5:98:da:cb:bd:96:44:20:ad:56:d2:c2:08:c5:5c:01:c2: b6:6f:41:7c:12:33:a2:a1:2b:aa:e2:29:a9:93:b4:62:45:36: d4:a2:e9:0f:4c:b9:ce:ac:e8:7f:b1:37:33:0e:12:88:90:e1: 94:f3:59:2d:98:4e:23:4a:91:1d:02:2a:94:ef:23:fa:40:d7: a2:8d:65:1a:37:35:d6:bf:15:4c:e7:72:85:6f:6f:8d:88:a4: 76:3e:16:88:a5:8b:b7:71:fe:6b:3f:3b:30:e7:6f:99:69:d8: 45:6c:4e:29:35:7c:6a:95:6d:e9:48:86:9f:1a:ae:97:99:65: 38:a0:c9:8b:d8:f6:f5:66:5c:c1:9a:e3:bb:88:56:94:53:6e: 2e:07:0d:59:b4:b4:9a:c2:a9:e2:c2:37:b6:27:83:bb:45:78: 90:2c:d7:80:0f:90:54:e7:36:37:31:4b:65:7a:58:3e:c7:ff: 93:d2:66:95:fe:0c:32:a9:b8:c2:49:0d:c5:e1:0b:f0:79:8d: 22:73:2d:62:19:19:f9:1f:07:49:92:9e:ba:89:6c:d1:17:36: 88:1f:d7:16:ed:39:7f:04:80:9d:e8:fd:af:5c:7f:01:f5:52: e0:97:be:e0:4f:a8:7d:40:fc:90:c3:e9:63:74:f2:a5:3f:2c: 60:1a:31:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK8BzoJRYF3A0IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk YWM3OGQ1MzEtZTM5OC00YzNmLWE0MmMtYzkyNmI2MDJiOTgxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY+DKUYnDKAP269i4UD7EpDKD/2J+nsJn7Qi ADZ/YRssGKsHRz7ig8g6UEaSeduOuXMUU4oh1weHUCPqrOUBrHjZjc6NXX8x7rBW onyc+OeUkJEq6Ya3YK7e46cBUGGK8qAhH4OYsH4vN/b37Z1f12W3iutaLVppRQBf 2/6fQib/LEQvv4EkXXklRDiIDDXLvi0F+JMrCPLaxeyHhlg5Cg7S5yzs+sCwQcWd CwrPNU0ohYNVK4+Wna/UaW73fw66MLQVfG0OLFH1m/juQON5LN5jLdNWiASoRpfR rYeGXUQzGH+PGt3ZlzA+Pb2fWXE0lKqWJI+gKAOdPO0Z9OfZ2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFERQ/oBnxqYQGf43t/8I2DNdR8c2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTQ0MjdmMmUtOGMwYi0z MzE2LTk1NTAtZjI2NDIxMWZmMDIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCYQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACvVmNrLvZZEIK1W0sIIxVwBwrZvQXwSM6KhK6riKamTtGJFNtSi6Q9M uc6s6H+xNzMOEoiQ4ZTzWS2YTiNKkR0CKpTvI/pA16KNZRo3Nda/FUzncoVvb42I pHY+Foili7dx/ms/OzDnb5lp2EVsTik1fGqVbelIhp8arpeZZTigyYvY9vVmXMGa 47uIVpRTbi4HDVm0tJrCqeLCN7Yng7tFeJAs14APkFTnNjcxS2V6WD7H/5PSZpX+ DDKpuMJJDcXhC/B5jSJzLWIZGfkfB0mSnrqJbNEXNogf1xbtOX8EgJ3o/a9cfwH1 UuCXvuBPqH1A/JDD6WN08qU/LGAaMa0= -----END CERTIFICATE-----Generated at Wed Feb 19 22:39:53 2025 by rpki-client