$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa File: f8c8223c-bd4f-350e-af6b-a0e241edab57.roa (raw, json) Hash identifier: F8YDwXQngxigILIXfpmLCqbti9TwGTBcU3XECAE121o= Subject key identifier: 0A:83:3B:21:BA:17:E2:3C:7A:9A:51:9E:97:9D:41:E8:9B:59:72:D9 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285848A318A4CA310BA83F886FD980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa Signing time: Thu 23 Jan 2025 06:13:18 +0000 ROA not before: Thu 23 Jan 2025 06:13:18 +0000 ROA not after: Wed 23 Apr 2025 05:13:18 +0000 asID: 16591 IP address blocks: 136.50.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 21 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:a3:18:a4:ca:31:0b:a8:3f:88:6f:d9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Jan 23 06:13:18 2025 GMT Not After : Apr 23 05:13:18 2025 GMT Subject: CN=4492ae10-25f4-488d-808f-23bebe1ce67d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:9c:91:62:c9:a4:d7:56:fa:0a:8c:3e:bb:0b: e4:2f:e9:90:2e:3d:74:c5:52:bf:67:77:ae:1e:e8: 20:ad:f7:7c:85:31:a0:7b:c6:45:8f:7c:d0:68:21: 22:3a:62:d3:d3:d0:1f:d5:c0:cd:41:4b:60:09:fb: f1:24:b9:7d:ce:5c:4d:1a:4c:0c:7c:6e:1b:7e:42: 7c:b4:4c:45:fa:ed:03:6c:74:38:ae:bc:16:81:a7: 4a:5f:ba:d2:40:e7:28:b3:12:d9:99:2d:42:5c:b8: 95:69:78:8b:b7:8f:21:fa:5b:80:2f:a6:33:a9:c5: 2a:68:61:a0:80:37:1c:9e:83:6a:1a:64:2c:0a:7f: 39:aa:0b:2d:5d:49:2b:5e:ed:dc:e0:6c:6d:ba:d8: 49:c0:68:12:ef:9f:15:d1:86:ce:df:35:f2:0b:2c: e2:4c:71:4c:8b:cf:12:c2:78:ba:d3:b5:5a:8b:14: 8e:06:70:57:49:0c:f6:7f:33:cf:c9:94:5a:f0:62: ab:4f:a6:e3:62:a6:aa:08:01:a8:35:7b:b5:1b:aa: 56:98:87:a8:43:b3:b6:c3:dc:9e:92:40:ba:4c:cb: 48:50:c8:16:ac:7d:98:be:a3:8a:c1:1f:7a:55:9b: 6d:8e:e2:79:5e:8b:31:90:b9:7c:07:31:68:d2:96: 70:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:83:3B:21:BA:17:E2:3C:7A:9A:51:9E:97:9D:41:E8:9B:59:72:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 79:ed:59:3e:e6:33:9d:95:a6:0c:53:28:e5:16:76:57:fe:4f: 67:76:50:29:21:7d:69:86:2b:19:10:7c:c3:29:09:82:87:75: 27:7d:c0:d1:14:d1:9f:f5:58:b0:b5:81:81:14:7b:af:3b:d7: de:89:8b:9f:2b:5e:f9:3f:8d:41:92:b3:d2:94:75:47:f9:8c: 4a:68:22:6e:df:88:b1:11:63:5d:da:b3:57:c1:57:ea:71:5e: 10:51:f2:9a:1d:62:19:df:e8:88:9a:35:ea:8b:c5:b8:43:03: cd:0f:b6:c2:be:ea:1a:30:37:0a:9c:5e:ac:b7:de:c3:cd:27: 6c:11:2e:23:77:15:19:63:35:49:d6:21:3b:86:bf:09:68:b9: 69:36:5b:df:1a:d0:34:54:39:f7:a6:51:a9:86:7b:e9:48:00: c8:d7:40:c3:e0:e0:d9:21:f1:07:8a:8e:f6:80:6f:50:e2:47: 1c:3b:ee:74:2b:90:23:f9:08:97:11:ba:4f:a9:5d:2e:97:25: 80:14:07:37:77:67:1e:2d:20:31:8a:11:23:80:d2:bc:43:b9: ad:ff:48:89:1a:ba:93:bc:d0:d7:fa:29:b2:5f:ba:0c:2f:c4: aa:e6:4b:b4:ec:3a:49:d4:be:e8:42:6c:8e:d3:73:d4:55:19: 13:38:56:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKTKMQuoP4hv2YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDEyMzA2MTMxOFoXDTI1MDQyMzA1MTMxOFowLzEtMCsGA1UEAxMk NDQ5MmFlMTAtMjVmNC00ODhkLTgwOGYtMjNiZWJlMWNlNjdkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZyRYsmk11b6Cow+uwvkL+mQLj10xVK/Z3eu Huggrfd8hTGge8ZFj3zQaCEiOmLT09Af1cDNQUtgCfvxJLl9zlxNGkwMfG4bfkJ8 tExF+u0DbHQ4rrwWgadKX7rSQOcosxLZmS1CXLiVaXiLt48h+luAL6YzqcUqaGGg gDccnoNqGmQsCn85qgstXUkrXu3c4GxtuthJwGgS758V0YbO3zXyCyziTHFMi88S wni607VaixSOBnBXSQz2fzPPyZRa8GKrT6bjYqaqCAGoNXu1G6pWmIeoQ7O2w9ye kkC6TMtIUMgWrH2YvqOKwR96VZttjuJ5XosxkLl8BzFo0pZwYwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAqDOyG6F+I8eppRnpedQeibWXLZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjhjODIyM2MtYmQ0Zi0z NTBlLWFmNmItYTBlMjQxZWRhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHntWT7mM52VpgxTKOUWdlf+T2d2UCkhfWmGKxkQfMMpCYKHdSd9wNEU 0Z/1WLC1gYEUe687196Ji58rXvk/jUGSs9KUdUf5jEpoIm7fiLERY13as1fBV+px XhBR8podYhnf6IiaNeqLxbhDA80PtsK+6howNwqcXqy33sPNJ2wRLiN3FRljNUnW ITuGvwlouWk2W98a0DRUOfemUamGe+lIAMjXQMPg4Nkh8QeKjvaAb1DiRxw77nQr kCP5CJcRuk+pXS6XJYAUBzd3Zx4tIDGKESOA0rxDua3/SIkaupO80Nf6KbJfugwv xKrmS7TsOknUvuhCbI7Tc9RVGRM4Vgc= -----END CERTIFICATE-----Generated at Wed Feb 19 22:29:44 2025 by rpki-client