$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa File: bf158f20-c503-30b9-8360-4c308164a27f.roa (raw, json) Hash identifier: PWGBm+q4RMJ9GvRLs0yPm30+5oUcUy5X1GtvwjiSGnE= Subject key identifier: A9:79:4F:1B:07:4C:90:A2:2A:17:AB:F5:53:7B:CC:B9:60:86:49:8A Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F0E0ABC1E8AF9B706D180 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 136.29.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:0e:0a:bc:1e:8a:f9:b7:06:d1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=7be572db-2bee-4f88-8048-a70fc5b67c5d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:11:44:ad:02:5a:50:4d:06:b0:fe:58:3f:d0: 2e:0e:5a:f9:6f:46:d0:47:71:17:75:0e:48:ca:6f: e5:e8:05:76:9e:85:bf:7b:b3:68:6b:67:6c:f6:c8: 24:4e:e3:7f:29:83:15:05:28:1d:09:1a:4a:ff:40: 03:92:1b:58:2c:d2:8f:23:c3:4d:8e:cb:55:9e:76: 41:8b:c7:b5:1f:84:d7:26:03:57:04:b5:ad:3c:87: c8:a5:5e:3f:b2:49:d0:5a:10:80:ca:f3:fd:74:d0: 7a:67:dc:1e:52:b1:7a:31:7d:f2:f1:27:cb:d9:a2: ac:e3:42:b1:7e:bc:75:19:5b:f2:8c:40:f5:4f:10: 03:6e:b2:b3:83:df:46:0e:da:5b:f8:25:45:aa:73: 26:bf:e0:0f:37:e8:4e:77:8d:04:38:e3:53:eb:85: 2d:03:c0:2c:80:e6:21:ab:d0:d9:06:c4:3c:35:1c: c8:01:27:4a:04:03:fc:3c:9d:e8:31:d9:31:0f:62: dc:f9:90:2e:cc:17:ba:24:5c:55:a3:e8:c3:de:4e: da:11:34:01:4d:f7:73:0e:2d:73:13:77:1e:e9:b0: b2:67:2e:15:2c:73:16:ce:ab:4b:a4:2d:28:d8:3c: ad:2c:ac:2f:bb:73:59:34:fd:d8:07:04:bb:30:9d: ce:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:79:4F:1B:07:4C:90:A2:2A:17:AB:F5:53:7B:CC:B9:60:86:49:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/bf158f20-c503-30b9-8360-4c308164a27f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:56:4b:84:e6:2f:05:c9:d6:4e:4b:97:17:c1:e9:2a:ec:61: b3:bf:ad:f6:25:4d:30:bf:b2:20:cd:fb:f4:71:38:37:af:39: 0d:3a:9a:06:9e:00:4f:88:90:90:ff:4d:bd:07:f0:64:28:6c: c3:6a:16:50:72:07:c3:6d:db:52:86:aa:f2:78:1b:dc:fe:03: 5b:f9:66:0b:d3:dc:32:05:8e:6d:94:cf:ee:20:4f:2e:36:fd: 7f:1b:7b:4a:cb:bb:4e:08:91:3a:d2:6d:26:4f:b1:e9:d0:e3: 2e:3f:33:76:33:68:36:24:08:b0:ab:44:ad:2f:62:48:7c:b6: d3:1d:c1:39:f4:3f:60:ff:be:80:ce:63:bb:65:97:02:29:90: eb:0a:91:dc:a3:8d:51:44:19:3f:f4:3f:cc:db:c4:94:c1:99: 2a:51:6b:69:58:ab:79:d9:f4:16:ba:5e:43:39:0f:3c:59:ff: f8:8e:1e:1c:7b:6d:e8:22:4b:43:b3:4e:04:b4:31:03:30:96: eb:b5:c4:5c:05:fa:ca:85:7e:db:00:34:ab:9f:f8:1b:a2:d0: 49:5a:53:01:c4:33:0b:24:6c:c5:7d:cb:5d:32:63:de:bc:e6: ca:1e:4d:af:0f:b5:73:04:11:8e:da:a3:cd:75:a3:5b:71:e4: b8:04:12:47 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbw4KvB6K+bcG0YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk N2JlNTcyZGItMmJlZS00Zjg4LTgwNDgtYTcwZmM1YjY3YzVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xFErQJaUE0GsP5YP9AuDlr5b0bQR3EXdQ5I ym/l6AV2noW/e7Noa2ds9sgkTuN/KYMVBSgdCRpK/0ADkhtYLNKPI8NNjstVnnZB i8e1H4TXJgNXBLWtPIfIpV4/sknQWhCAyvP9dNB6Z9weUrF6MX3y8SfL2aKs40Kx frx1GVvyjED1TxADbrKzg99GDtpb+CVFqnMmv+APN+hOd40EOONT64UtA8AsgOYh q9DZBsQ8NRzIASdKBAP8PJ3oMdkxD2Lc+ZAuzBe6JFxVo+jD3k7aETQBTfdzDi1z E3ce6bCyZy4VLHMWzqtLpC0o2DytLKwvu3NZNP3YBwS7MJ3OzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKl5TxsHTJCiKher9VN7zLlghkmKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvYmYxNThmMjAtYzUwMy0z MGI5LTgzNjAtNGMzMDgxNjRhMjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiB3wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAABWS4TmLwXJ1k5LlxfB6SrsYbO/rfYlTTC/siDN+/RxODevOQ06mgae AE+IkJD/Tb0H8GQobMNqFlByB8Nt21KGqvJ4G9z+A1v5ZgvT3DIFjm2Uz+4gTy42 /X8be0rLu04IkTrSbSZPsenQ4y4/M3YzaDYkCLCrRK0vYkh8ttMdwTn0P2D/voDO Y7tllwIpkOsKkdyjjVFEGT/0P8zbxJTBmSpRa2lYq3nZ9Ba6XkM5DzxZ//iOHhx7 begiS0OzTgS0MQMwluu1xFwF+sqFftsANKuf+Bui0ElaUwHEMwskbMV9y10yY968 5soeTa8PtXMEEY7ao811o1tx5LgEEkc= -----END CERTIFICATE-----Generated at Mon Apr 28 10:40:07 2025 by rpki-client