$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa File: f5240dbf-e67a-3452-a378-c17350bcab35.roa (raw, json) Hash identifier: nUJatrZ6oC+W9Eki4U1MAsfH6q6BUxnqw87SW3N0lf0= Subject key identifier: 36:B2:5E:2E:1A:E0:C4:30:73:13:8B:3E:63:91:20:65:3D:11:AE:37 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A3189FEACBD4E7633FA6CE40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa Signing time: Thu 23 Jan 2025 06:13:16 +0000 ROA not before: Thu 23 Jan 2025 06:13:16 +0000 ROA not after: Wed 23 Apr 2025 05:13:16 +0000 asID: 16591 IP address blocks: 136.35.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:9f:ea:cb:d4:e7:63:3f:a6:ce:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:16 2025 GMT Not After : Apr 23 05:13:16 2025 GMT Subject: CN=c0342999-7d34-4969-882c-83d43a4d5a8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:08:85:80:97:56:36:35:b8:31:a6:b3:58:6d: 5c:8d:74:19:9b:ee:8e:48:e5:da:cc:4c:37:2b:68: dc:8b:b0:f2:ab:29:97:e7:d2:b6:6d:57:d3:4a:f9: 99:29:98:b9:d4:fb:4b:a7:65:7c:48:f9:ab:e9:ab: a7:b6:7d:fd:90:6f:45:76:87:2e:3b:b1:24:a6:c8: 23:38:0c:30:19:02:7c:70:09:f9:69:0f:e6:9b:31: d3:78:41:ae:9c:45:97:14:75:d8:36:d9:bf:9a:05: e8:94:a4:26:1b:21:6c:ff:d9:fe:85:fc:63:cb:dc: 27:76:1d:ae:26:0a:74:fe:df:9f:a8:1a:2b:a8:c1: 13:22:bd:0b:c3:3b:76:7d:78:d2:d2:f9:71:54:52: aa:4f:06:74:c5:84:8b:66:f7:27:59:75:3a:89:fd: a3:75:8a:2d:cf:c8:a1:5c:61:14:e4:cb:55:07:9f: 00:48:23:56:08:98:f3:c1:e9:85:81:9c:89:ee:12: 29:b3:c0:87:93:3c:16:24:bf:71:a4:b0:c9:c5:5f: 55:b1:db:51:95:aa:62:23:39:d4:0a:ea:e9:7e:cd: 7b:9d:e6:3f:13:d1:88:3a:71:cf:8d:76:37:79:27: c6:2c:7d:3e:f1:3f:b3:9a:fe:4d:3e:1d:8d:1c:a4: 4f:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:B2:5E:2E:1A:E0:C4:30:73:13:8B:3E:63:91:20:65:3D:11:AE:37 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f5240dbf-e67a-3452-a378-c17350bcab35.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:46:59:ff:f2:5d:91:f8:4d:ae:21:1b:fb:28:1a:3a:9d:3c: 85:ce:e6:f3:08:eb:65:b6:99:24:40:3b:a0:15:f0:f5:c5:c7: 79:1f:e1:10:a6:94:14:b0:f0:4b:29:cc:8f:f4:16:6e:a2:3c: 3e:66:b9:92:0e:6c:6f:ac:38:db:14:d7:55:23:98:09:8c:91: 26:4a:e6:27:7f:2a:e5:41:ca:29:ee:4e:b4:d0:64:e9:21:1e: d5:5f:6d:b5:65:e7:40:b0:0c:c0:2e:22:46:08:46:76:09:a7: 84:94:c2:94:89:ff:7f:dc:b4:d6:ed:e2:7d:25:a2:5a:14:ed: 5e:8e:96:b2:a2:59:c3:d4:ee:b1:e2:58:37:5c:4a:95:1d:eb: 0d:28:be:03:c4:10:5a:7e:ff:46:1f:d5:bf:98:9c:2a:87:bd: bd:a2:8c:7f:ee:cc:57:52:8b:91:42:6f:42:68:55:6a:ab:66: 35:fd:0e:91:29:a4:b1:a6:3b:d4:4a:51:5b:a6:0f:6b:c7:ec: ac:5a:30:57:c2:be:60:9d:9b:59:aa:31:8e:e1:7d:3a:28:a1: a3:fa:b4:98:bc:8f:da:67:d6:4c:3c:44:91:3d:11:8a:a3:b5: 10:7f:d9:ec:86:aa:66:aa:23:b2:50:c0:02:32:74:8f:97:fd: 10:37:d3:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGJ/qy9TnYz+mzkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxNloXDTI1MDQyMzA1MTMxNlowLzEtMCsGA1UEAxMk YzAzNDI5OTktN2QzNC00OTY5LTg4MmMtODNkNDNhNGQ1YThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5giFgJdWNjW4MaazWG1cjXQZm+6OSOXazEw3 K2jci7DyqymX59K2bVfTSvmZKZi51PtLp2V8SPmr6auntn39kG9FdocuO7Ekpsgj OAwwGQJ8cAn5aQ/mmzHTeEGunEWXFHXYNtm/mgXolKQmGyFs/9n+hfxjy9wndh2u Jgp0/t+fqBorqMETIr0Lwzt2fXjS0vlxVFKqTwZ0xYSLZvcnWXU6if2jdYotz8ih XGEU5MtVB58ASCNWCJjzwemFgZyJ7hIps8CHkzwWJL9xpLDJxV9VsdtRlapiIznU Curpfs17neY/E9GIOnHPjXY3eSfGLH0+8T+zmv5NPh2NHKRPdQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDayXi4a4MQwcxOLPmORIGU9Ea43MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjUyNDBkYmYtZTY3YS0z NDUyLWEzNzgtYzE3MzUwYmNhYjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCOwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIhGWf/yXZH4Ta4hG/soGjqdPIXO5vMI62W2mSRAO6AV8PXFx3kf4RCm lBSw8EspzI/0Fm6iPD5muZIObG+sONsU11UjmAmMkSZK5id/KuVByinuTrTQZOkh HtVfbbVl50CwDMAuIkYIRnYJp4SUwpSJ/3/ctNbt4n0loloU7V6OlrKiWcPU7rHi WDdcSpUd6w0ovgPEEFp+/0Yf1b+YnCqHvb2ijH/uzFdSi5FCb0JoVWqrZjX9DpEp pLGmO9RKUVumD2vH7KxaMFfCvmCdm1mqMY7hfToooaP6tJi8j9pn1kw8RJE9EYqj tRB/2eyGqmaqI7JQwAIydI+X/RA30zE= -----END CERTIFICATE-----Generated at Wed Feb 19 22:42:03 2025 by rpki-client