$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa File: e7428bc5-158c-3dda-8acc-403a9b9b59be.roa (raw, json) Hash identifier: sBtweWIklRRD/YHxfCm33fkmnYfQCSHpHGiRGoG73M8= Subject key identifier: 91:BB:C0:F2:21:6B:80:DB:9C:51:69:6C:A2:23:74:16:22:32:69:D2 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318AB7BC0975FF4664F3E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa Signing time: Thu 23 Jan 2025 06:13:21 +0000 ROA not before: Thu 23 Jan 2025 06:13:21 +0000 ROA not after: Wed 23 Apr 2025 05:13:21 +0000 asID: 16591 IP address blocks: 136.53.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:ab:7b:c0:97:5f:f4:66:4f:3e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:21 2025 GMT Not After : Apr 23 05:13:21 2025 GMT Subject: CN=9944a447-4711-4bb7-9caa-149e4e8603b7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b8:ee:87:d2:1c:83:c0:84:ab:c7:c0:ff:11: 78:53:08:54:93:73:1a:8f:8f:e5:37:fe:d1:7a:ab: f1:ce:3d:9e:21:e5:df:48:6f:64:36:23:34:b2:cf: e7:65:10:e6:4a:29:95:cb:e2:75:f6:b7:8a:b5:49: 98:87:7b:b7:3a:dc:45:2f:2e:fa:7b:23:9f:99:01: a8:26:b2:68:4c:d7:3d:9b:1b:ce:74:35:59:37:8a: 65:77:ed:b2:3c:22:54:3f:86:e0:c2:48:9d:10:8c: 40:04:10:c4:da:0b:a7:11:5d:bf:27:53:91:65:5e: d9:84:b6:24:17:9c:23:35:0b:e2:e8:bb:49:e8:bd: f0:2e:c9:be:23:61:57:97:44:75:ba:c6:77:3d:00: c5:1d:bd:e6:1d:f2:3e:6c:fb:54:40:71:8f:b0:a8: 0c:57:07:b4:14:2a:b3:75:e2:60:42:db:65:6c:2c: 8b:03:70:92:2e:67:f4:48:34:d9:2d:b2:c6:ba:16: 75:27:84:83:54:72:08:8f:03:62:00:e0:4c:20:51: 90:04:f5:cb:a9:71:12:fd:0d:d8:71:2e:42:19:07: 0b:df:34:4c:a3:c0:23:e8:7b:8c:d7:b1:0f:ba:0c: 03:9c:82:56:b4:7f:80:43:82:95:c1:10:f6:cb:aa: e9:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:BB:C0:F2:21:6B:80:DB:9C:51:69:6C:A2:23:74:16:22:32:69:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7428bc5-158c-3dda-8acc-403a9b9b59be.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 86:dd:38:b3:a9:ed:3d:59:20:b6:ad:33:3b:14:5e:db:63:99: 40:e9:6f:99:a0:82:dc:80:ad:81:ed:f4:5c:a0:a1:07:43:5d: 2d:20:e1:22:ad:68:a1:95:00:f1:f3:40:a1:fc:61:fd:69:c0: 4f:86:76:94:f7:c0:83:25:0d:8f:bc:a0:2c:41:45:33:b7:3d: e7:bd:f6:4f:60:08:b8:d1:ce:eb:b7:d5:0e:4b:84:f7:16:a7: f8:14:c0:96:c5:19:26:8d:b4:21:8a:30:82:9b:10:2a:1e:2f: 9b:09:f9:ab:df:48:63:9b:19:66:eb:df:b6:b5:02:73:9c:d4: 33:b4:0f:1a:e7:96:54:9c:4f:09:5a:53:a4:59:99:44:ae:05: 94:0d:65:e1:70:d8:67:6d:3c:60:99:0b:15:56:07:24:e4:6f: 96:a5:e0:26:8c:16:be:39:4d:a1:10:07:47:91:60:4a:b0:c4: 01:f6:1d:6d:63:4b:24:60:ab:d2:58:e1:7c:85:24:14:45:23: 96:64:8f:c4:ca:a3:4f:b2:74:6a:39:8b:d6:9c:25:3b:4c:97: 32:b2:d9:0b:57:86:a6:d5:4b:1c:a6:66:cb:11:22:3b:cc:49: 4a:ea:9c:72:c4:23:70:08:c4:dc:8f:ca:55:16:99:a6:c0:43: 9c:55:88:2b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKt7wJdf9GZPPgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk OTk0NGE0NDctNDcxMS00YmI3LTljYWEtMTQ5ZTRlODYwM2I3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrjuh9Icg8CEq8fA/xF4UwhUk3Maj4/lN/7R eqvxzj2eIeXfSG9kNiM0ss/nZRDmSimVy+J19reKtUmYh3u3OtxFLy76eyOfmQGo JrJoTNc9mxvOdDVZN4pld+2yPCJUP4bgwkidEIxABBDE2gunEV2/J1ORZV7ZhLYk F5wjNQvi6LtJ6L3wLsm+I2FXl0R1usZ3PQDFHb3mHfI+bPtUQHGPsKgMVwe0FCqz deJgQttlbCyLA3CSLmf0SDTZLbLGuhZ1J4SDVHIIjwNiAOBMIFGQBPXLqXES/Q3Y cS5CGQcL3zRMo8Aj6HuM17EPugwDnIJWtH+AQ4KVwRD2y6rpSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJG7wPIha4DbnFFpbKIjdBYiMmnSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTc0MjhiYzUtMTU4Yy0z ZGRhLThhY2MtNDAzYTliOWI1OWJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIbdOLOp7T1ZILatMzsUXttjmUDpb5mggtyArYHt9FygoQdDXS0g4SKt aKGVAPHzQKH8Yf1pwE+GdpT3wIMlDY+8oCxBRTO3Pee99k9gCLjRzuu31Q5LhPcW p/gUwJbFGSaNtCGKMIKbECoeL5sJ+avfSGObGWbr37a1AnOc1DO0DxrnllScTwla U6RZmUSuBZQNZeFw2GdtPGCZCxVWByTkb5al4CaMFr45TaEQB0eRYEqwxAH2HW1j SyRgq9JY4XyFJBRFI5Zkj8TKo0+ydGo5i9acJTtMlzKy2QtXhqbVSxymZssRIjvM SUrqnHLEI3AIxNyPylUWmabAQ5xViCs= -----END CERTIFICATE-----Generated at Wed Feb 19 22:45:56 2025 by rpki-client