$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa File: 7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa (raw, json) Hash identifier: 8rVoQGfjZczX1aowhTP45cmt69MJPC0byQky87zi2Lw= Subject key identifier: 80:C6:FB:8F:24:8B:BC:A5:BC:0B:D1:44:2F:8A:1F:94:F6:E4:D0:12 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F11AC63DE4658F1077620 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 136.31.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:11:ac:63:de:46:58:f1:07:76:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=fdc5ce1e-d7ac-4a8d-a0a7-7e550c713e40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:83:d5:32:34:38:29:ef:f8:31:e3:d7:13:78: 1e:9e:87:8c:06:91:9e:bd:60:d7:e7:98:2b:ba:53: c6:27:59:17:35:44:ea:28:c8:ed:8d:09:f6:57:20: 0f:c5:ac:1a:93:2e:ea:97:6d:57:e4:96:24:1b:ea: e4:a2:65:cd:5d:04:ab:14:9c:2b:41:1c:2f:ad:ea: 9a:f9:10:d9:d4:0c:14:69:2f:61:1f:4c:f8:71:4a: 31:5d:11:92:38:6c:d1:b7:d7:d5:96:d2:ad:00:50: 6d:f8:0b:7e:f2:7b:68:0b:fb:3b:a3:b8:a6:6a:d0: 7f:a2:6a:63:00:48:b7:21:d7:50:d6:8e:af:a4:83: 33:8e:69:aa:c8:82:f7:fd:b6:d7:07:03:21:b9:15: ad:a8:8a:9b:98:4d:0e:a3:9c:97:fe:c6:91:ba:5c: 85:d0:7c:fd:64:e1:23:12:8b:17:18:f5:e1:b4:f1: 09:07:d4:45:c5:35:23:61:00:70:6e:be:e6:55:c7: ec:03:7f:7e:9f:37:62:fa:62:59:6b:ba:74:d6:dc: 8b:4c:1f:ba:dd:15:98:72:e2:29:ed:2c:15:01:2e: fa:07:13:54:21:49:29:e1:ed:14:05:99:fa:e8:8f: 86:3f:38:65:10:b8:1d:0e:aa:16:dc:02:c3:24:04: d7:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:C6:FB:8F:24:8B:BC:A5:BC:0B:D1:44:2F:8A:1F:94:F6:E4:D0:12 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/7abb6196-82b7-3de2-a96b-fd2955f4c90a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.31.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:38:82:44:2c:9e:6a:2c:c3:de:ac:49:22:b7:37:64:cc:80: 17:92:57:fc:68:a6:54:34:d7:89:a9:ac:96:2e:a9:a5:a6:0a: a4:60:2d:29:33:57:69:5c:91:7b:c5:74:4d:92:5d:4a:57:e4: bb:0b:7a:5f:91:23:e8:85:fd:ae:b2:32:02:1a:db:b3:79:b5: b9:bb:46:da:9f:d7:e5:02:c7:15:95:24:cb:17:aa:d6:6d:01: eb:2d:65:31:dd:e0:ac:d4:e8:73:85:63:71:ee:13:f8:34:00: 2a:02:0f:d4:74:7b:b2:8d:61:e0:78:15:eb:96:80:23:bd:53: 1f:2a:e6:5d:b4:6d:e5:fd:18:c6:92:64:3d:62:d8:13:df:b7: 20:6a:cf:62:43:13:f4:4d:ff:08:7e:39:c4:50:03:72:87:6f: 1c:cb:f8:68:45:40:cd:83:66:b9:f0:47:2c:54:37:b1:ee:c6: 9b:f0:c6:a3:f4:22:ce:61:98:7b:6b:68:6f:b3:60:b3:6f:fb: 5c:0d:b1:10:36:60:25:3b:e3:3e:66:92:5f:fa:bb:56:65:fb: c7:10:f8:5a:b1:af:16:61:ee:03:9c:1a:b3:8e:ef:cc:bf:58: 91:12:be:5e:32:d6:a5:6a:19:a1:0b:41:5d:bc:52:93:72:88: c5:67:9b:e5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxGsY95GWPEHdiAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk ZmRjNWNlMWUtZDdhYy00YThkLWEwYTctN2U1NTBjNzEzZTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4PVMjQ4Ke/4MePXE3genoeMBpGevWDX55gr ulPGJ1kXNUTqKMjtjQn2VyAPxawaky7ql21X5JYkG+rkomXNXQSrFJwrQRwvreqa +RDZ1AwUaS9hH0z4cUoxXRGSOGzRt9fVltKtAFBt+At+8ntoC/s7o7imatB/ompj AEi3IddQ1o6vpIMzjmmqyIL3/bbXBwMhuRWtqIqbmE0Oo5yX/saRulyF0Hz9ZOEj EosXGPXhtPEJB9RFxTUjYQBwbr7mVcfsA39+nzdi+mJZa7p01tyLTB+63RWYcuIp 7SwVAS76BxNUIUkp4e0UBZn66I+GPzhlELgdDqoW3ALDJATX+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIDG+48ki7ylvAvRRC+KH5T25NASMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvN2FiYjYxOTYtODJiNy0z ZGUyLWE5NmItZmQyOTU1ZjRjOTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH44gkQsnmosw96sSSK3N2TMgBeSV/xoplQ014mprJYuqaWmCqRgLSkz V2lckXvFdE2SXUpX5LsLel+RI+iF/a6yMgIa27N5tbm7Rtqf1+UCxxWVJMsXqtZt AestZTHd4KzU6HOFY3HuE/g0ACoCD9R0e7KNYeB4FeuWgCO9Ux8q5l20beX9GMaS ZD1i2BPftyBqz2JDE/RN/wh+OcRQA3KHbxzL+GhFQM2DZrnwRyxUN7HuxpvwxqP0 Is5hmHtraG+zYLNv+1wNsRA2YCU74z5mkl/6u1Zl+8cQ+FqxrxZh7gOcGrOO78y/ WJESvl4y1qVqGaELQV28UpNyiMVnm+U= -----END CERTIFICATE-----Generated at Mon Apr 28 15:04:46 2025 by rpki-client