$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa File: d3d979b2-eb71-3f42-924a-35effff21c73.roa (raw, json) Hash identifier: DNAnxjs2CgjUX1e4chvLRQ2QiFDK/nMOcxN8epjtvOo= Subject key identifier: C5:50:F2:7D:EB:82:22:89:67:44:23:03:72:C3:3A:7E:F0:0A:3A:C4 Certificate issuer: /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Certificate serial: 010D0C9F43285849806F11821D9F0B389DE344E0 Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa Signing time: Sat 12 Apr 2025 13:01:01 +0000 ROA not before: Sat 12 Apr 2025 13:01:01 +0000 ROA not after: Fri 11 Jul 2025 13:01:01 +0000 asID: 19165 IP address blocks: 136.29.128.0/18 maxlen: 18 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 21:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:80:6f:11:82:1d:9f:0b:38:9d:e3:44:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404 Validity Not Before: Apr 12 13:01:01 2025 GMT Not After : Jul 11 13:01:01 2025 GMT Subject: CN=7ca9bccf-78f4-45a1-8771-30f9aa84dc60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:c0:c6:19:51:16:21:32:7d:09:77:eb:98:b5: b5:30:0f:6d:4e:30:58:eb:12:be:fb:c6:aa:c1:ac: 81:54:9d:64:37:42:e5:f7:ca:3d:73:e7:1f:8b:ee: d7:be:aa:66:ec:de:3e:9c:40:cf:99:62:bc:92:73: 4d:39:ee:42:e6:19:d5:4c:be:a5:7f:24:4c:81:07: 33:f3:7d:d0:0e:2a:22:21:14:78:1e:92:0b:1f:70: 95:dd:ce:0d:ac:2c:37:9d:fa:eb:e2:ee:47:7c:0c: 40:ef:21:4c:27:7a:2c:34:5c:90:b8:09:e0:eb:b8: cd:f7:49:cb:76:eb:8a:52:b0:d5:09:73:23:0b:19: 66:f8:05:28:f5:a2:08:4d:2c:6b:e2:bf:52:d8:99: a8:b8:52:e3:3c:96:b3:13:c2:8e:ad:96:0a:be:cb: cf:d4:e9:98:bf:82:76:fd:f2:ca:88:78:7d:f9:58: c1:58:34:69:21:d0:d7:20:0f:d2:5c:c5:c7:f0:07: bd:1d:35:b6:7d:f4:23:e0:6e:03:bc:f6:fb:53:c3: f5:01:f2:cd:3f:4f:58:f1:81:0c:59:1b:a6:6a:b1: 79:9b:83:d1:2f:c0:a9:24:07:01:ea:1a:9b:c1:7f: 46:b2:67:7e:00:c0:f9:cc:8c:1a:7b:c8:ea:d2:95: 50:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:50:F2:7D:EB:82:22:89:67:44:23:03:72:C3:3A:7E:F0:0A:3A:C4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d3d979b2-eb71-3f42-924a-35effff21c73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl X509v3 Authority Key Identifier: keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer sbgp-ipAddrBlock: critical IPv4: 136.29.128.0/18 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:5d:8f:12:9a:0e:b8:6e:d9:ac:47:d0:c9:d6:79:c0:bb:c7: 11:83:13:01:57:b7:3a:aa:e0:2e:fe:b9:29:c7:93:7b:b9:56: 7c:41:fd:d8:ea:44:b1:91:38:ed:4c:ae:0b:9d:45:34:2e:84: 79:77:69:88:2a:b2:be:74:02:7a:a0:3e:56:e7:64:92:d3:07: 66:b4:cc:82:02:27:55:90:5b:6f:d7:60:46:fd:3b:c3:26:ff: 09:79:f4:90:24:c3:eb:bb:31:a5:2c:bc:9a:c8:ab:a3:ab:45: e1:18:d1:ce:d6:12:95:13:03:5c:bb:59:07:8b:1c:06:71:30: 00:c1:25:2b:d7:4d:8a:9b:4b:02:36:2e:91:e6:fb:87:43:74: 40:77:e6:e4:cc:3a:4d:41:f1:ac:2f:1b:28:e0:55:88:5a:22: 59:49:b2:15:99:cb:35:22:e4:d7:1b:b3:c5:54:58:15:b4:52: 39:c0:b1:35:ed:b5:83:2a:d1:0b:04:93:89:f8:f6:f5:63:e5: 52:f0:1b:1b:8b:a0:56:1f:5a:f9:bc:50:00:e7:fc:08:a4:e3: 40:5c:ef:52:c9:0f:f9:bc:ad:87:41:c2:a8:43:a2:8c:05:bc: d2:19:6c:c2:b1:bf:ed:a9:70:d3:57:ad:c5:d5:a8:71:1e:f6: d6:19:e2:a9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbxGCHZ8LOJ3jROAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2 NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk N2NhOWJjY2YtNzhmNC00NWExLTg3NzEtMzBmOWFhODRkYzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm8DGGVEWITJ9CXfrmLW1MA9tTjBY6xK++8aq wayBVJ1kN0Ll98o9c+cfi+7Xvqpm7N4+nEDPmWK8knNNOe5C5hnVTL6lfyRMgQcz 833QDioiIRR4HpILH3CV3c4NrCw3nfrr4u5HfAxA7yFMJ3osNFyQuAng67jN90nL duuKUrDVCXMjCxlm+AUo9aIITSxr4r9S2JmouFLjPJazE8KOrZYKvsvP1OmYv4J2 /fLKiHh9+VjBWDRpIdDXIA/SXMXH8Ae9HTW2ffQj4G4DvPb7U8P1AfLNP09Y8YEM WRumarF5m4PRL8CpJAcB6hqbwX9Gsmd+AMD5zIwae8jq0pVQ3wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMVQ8n3rgiKJZ0QjA3LDOn7wCjrEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDNkOTc5YjItZWI3MS0z ZjQyLTkyNGEtMzVlZmZmZjIxYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGiB2AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZdjxKaDrhu2axH0MnWecC7xxGDEwFXtzqq4C7+uSnHk3u5VnxB/djq RLGROO1MrgudRTQuhHl3aYgqsr50AnqgPlbnZJLTB2a0zIICJ1WQW2/XYEb9O8Mm /wl59JAkw+u7MaUsvJrIq6OrReEY0c7WEpUTA1y7WQeLHAZxMADBJSvXTYqbSwI2 LpHm+4dDdEB35uTMOk1B8awvGyjgVYhaIllJshWZyzUi5Ncbs8VUWBW0UjnAsTXt tYMq0QsEk4n49vVj5VLwGxuLoFYfWvm8UADn/Aik40Bc71LJD/m8rYdBwqhDoowF vNIZbMKxv+2pcNNXrcXVqHEe9tYZ4qk= -----END CERTIFICATE-----Generated at Mon Apr 28 19:53:30 2025 by rpki-client