$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa File: a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa (raw, json) Hash identifier: qRo2uQ2/iQL1Lpwvlx27Tt4beTXmlD9luAQ04uTefAU= Subject key identifier: 07:D6:A2:D6:04:C3:52:A8:A4:50:2D:BF:A6:43:83:74:C9:00:05:33 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F0D8AC8E6B0DA75292100 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 136.25.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:0d:8a:c8:e6:b0:da:75:29:21:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=0a491123-813c-4c84-a9f3-e2ff5ba95f5c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:81:22:c3:13:db:13:17:10:18:17:d6:18:86: 44:46:bf:87:5e:a6:8b:5f:d0:72:fe:1c:33:a8:78: ec:d1:76:93:75:c9:6d:f1:7d:85:73:fe:65:44:5e: 2b:06:5a:7b:06:df:4d:90:90:6a:c4:3b:49:8b:16: 30:56:23:d5:ce:aa:e9:90:e8:c2:b9:c1:6c:e1:c4: e8:ab:c0:72:1f:f1:02:3c:92:f4:16:96:9f:48:e8: b2:6d:54:a0:c0:47:ec:a5:58:c4:46:e7:c6:1f:bd: 55:25:89:93:54:62:d7:61:00:af:ab:90:d9:76:c7: 6e:6f:ec:01:a9:8a:17:91:bc:6d:be:c2:0e:7b:ad: cc:f1:dc:3b:dc:8d:66:1e:93:de:76:c7:28:4d:bb: 8d:4e:2a:86:12:bf:f9:92:89:e9:d2:f1:80:ae:f2: fa:a9:f2:25:a0:a9:9e:db:2b:fa:be:18:d7:b3:a3: 4f:e5:7c:94:9c:57:5a:a5:e8:1f:11:03:77:d2:68: 41:3b:de:b8:00:a3:9e:52:6c:ec:0d:15:5e:a7:25: cb:4a:29:b6:94:98:ee:20:cb:2c:d7:5f:5c:d4:e2: 45:33:e2:04:95:87:ef:bb:48:37:24:0d:2f:5b:c3: 09:79:a1:69:90:51:38:d3:1d:cb:a0:f7:ab:01:e9: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:D6:A2:D6:04:C3:52:A8:A4:50:2D:BF:A6:43:83:74:C9:00:05:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/a08b5b0f-1e27-3c9e-8820-ec7b649e5473.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.25.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:f1:a6:06:ce:d0:e5:f2:c6:85:79:19:26:79:d0:ab:a4:b7: a0:88:42:73:ec:71:e7:63:fa:84:ec:5a:9f:f3:29:f1:d8:3b: 54:97:59:b7:f0:69:2a:39:2e:c1:d8:dd:8a:69:67:dd:a0:01: 71:95:21:75:74:15:ce:ef:8e:09:c4:f3:0a:3b:55:49:a4:6c: fa:78:48:9d:3a:94:bd:12:1a:2a:64:ee:85:6a:01:50:f4:1d: f1:e4:e0:57:f9:50:bd:ed:89:88:97:b7:d2:7b:f5:bb:bb:3c: 77:3b:fe:55:2f:0a:90:c8:64:ad:eb:35:b6:bb:d6:e0:ce:d6: af:0f:4f:6a:7c:26:f3:7f:34:96:17:6f:7d:5f:15:82:49:36: 55:6e:a2:0b:5a:ff:84:58:e4:d6:48:43:b6:1c:7e:aa:f1:db: a5:d1:f3:25:9a:9a:b9:de:fc:cb:8f:fd:99:ab:5d:d9:f8:f3: 2b:7b:71:f7:77:e2:59:15:7e:09:57:bc:10:0d:56:e5:0b:aa: 08:30:01:59:81:cb:4f:e6:4d:1d:83:eb:2b:eb:21:d1:d2:d3: 55:93:01:5f:de:46:c7:8d:22:a2:5d:27:9a:f6:0e:85:0f:f4: 4f:79:37:6f:b6:da:da:fb:2e:a7:62:75:b9:f1:10:aa:75:ff: c1:26:1e:ba -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbw2KyOaw2nUpIQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk MGE0OTExMjMtODEzYy00Yzg0LWE5ZjMtZTJmZjViYTk1ZjVjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzIEiwxPbExcQGBfWGIZERr+HXqaLX9By/hwz qHjs0XaTdclt8X2Fc/5lRF4rBlp7Bt9NkJBqxDtJixYwViPVzqrpkOjCucFs4cTo q8ByH/ECPJL0FpafSOiybVSgwEfspVjERufGH71VJYmTVGLXYQCvq5DZdsdub+wB qYoXkbxtvsIOe63M8dw73I1mHpPedscoTbuNTiqGEr/5konp0vGArvL6qfIloKme 2yv6vhjXs6NP5XyUnFdapegfEQN30mhBO964AKOeUmzsDRVepyXLSim2lJjuIMss 119c1OJFM+IElYfvu0g3JA0vW8MJeaFpkFE40x3LoPerAekGJQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAfWotYEw1KopFAtv6ZDg3TJAAUzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYTA4YjViMGYtMWUyNy0z YzllLTg4MjAtZWM3YjY0OWU1NDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiBmAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFPxpgbO0OXyxoV5GSZ50Kukt6CIQnPscedj+oTsWp/zKfHYO1SXWbfw aSo5LsHY3YppZ92gAXGVIXV0Fc7vjgnE8wo7VUmkbPp4SJ06lL0SGipk7oVqAVD0 HfHk4Ff5UL3tiYiXt9J79bu7PHc7/lUvCpDIZK3rNba71uDO1q8PT2p8JvN/NJYX b31fFYJJNlVuogta/4RY5NZIQ7Ycfqrx26XR8yWamrne/MuP/ZmrXdn48yt7cfd3 4lkVfglXvBANVuULqggwAVmBy0/mTR2D6yvrIdHS01WTAV/eRseNIqJdJ5r2DoUP 9E95N2+22tr7LqdidbnxEKp1/8EmHro= -----END CERTIFICATE-----Generated at Mon Apr 28 15:05:09 2025 by rpki-client