$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa File: 037ab9d0-1dd8-31d2-86e6-df05501d0606.roa (raw, json) Hash identifier: 5P60d/YAK30VJRhaneQY8Sa+nOHuwSfR4aOZcd6bwHU= Subject key identifier: D1:5F:CB:E8:42:4F:A7:20:59:56:06:FC:91:18:90:B6:C0:C2:80:23 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D8A3ECB258369A81D9A0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.53.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d8:a3:ec:b2:58:36:9a:81:d9:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=eb5f69d4-07bf-4d0a-9db3-a13dfd55af98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:92:dd:35:e9:d2:81:dd:34:67:37:7f:dc:42: a1:16:59:e5:e3:76:fd:e1:b8:b6:eb:ad:64:55:0a: 6c:f5:3d:05:8f:40:dc:51:21:93:41:2b:4f:71:53: ea:f0:0c:3d:28:83:a2:55:6f:28:97:e7:cd:15:dd: 5d:2d:93:9b:be:8c:81:18:bc:d3:1c:b0:39:c7:18: f8:3d:b5:e9:a9:2d:08:16:fb:79:8e:02:8c:89:60: 3d:72:2c:e7:be:3b:24:13:a9:80:29:0d:d3:0e:fb: 13:f8:49:33:3a:ee:91:e9:13:84:b2:4b:bb:9f:1e: cf:f4:c0:6d:03:d9:3e:ae:79:2d:f2:83:41:12:c8: 5f:8f:86:aa:72:6a:6b:7f:13:06:4e:be:fb:db:25: 34:d7:41:cf:7c:34:d3:e7:4d:8d:f0:10:cf:1f:a7: d6:a6:15:71:aa:63:1f:af:76:49:a6:9c:cf:a8:13: da:0d:86:1b:dd:27:be:3b:71:10:c3:55:08:22:ec: 80:26:b5:02:0c:a8:0b:e6:05:af:6d:7f:64:bf:7a: e3:fb:66:c5:85:92:fe:65:ba:f5:f9:62:53:0e:be: 10:77:5a:f6:f1:5b:aa:d6:99:23:3f:c1:bb:5e:e0: 0f:1b:8f:df:28:fb:7b:50:78:62:04:8a:34:3d:5c: 51:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:5F:CB:E8:42:4F:A7:20:59:56:06:FC:91:18:90:B6:C0:C2:80:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/037ab9d0-1dd8-31d2-86e6-df05501d0606.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:9e:ab:0b:17:73:20:0a:85:38:f7:11:38:5d:13:36:60:fc: 54:53:c6:92:37:b4:0d:3d:68:a1:23:c4:41:98:20:ac:f1:d8: 6a:f5:d1:7e:3d:33:10:27:c2:1c:01:2f:d2:6d:39:53:e4:21: 5a:72:4d:95:9b:05:37:6f:a3:8e:99:61:81:51:4e:0e:ac:b2: 95:9c:f3:ed:65:91:8e:2e:8d:64:ac:14:a5:ee:c5:32:c4:19: 05:20:95:6b:f7:1f:ea:72:b9:87:18:6b:5b:11:6b:af:da:62: 3f:3e:5e:7b:fc:f5:8d:c7:9e:ca:d3:3b:4b:6d:e8:7d:b0:6f: 4f:03:24:08:c2:d3:40:b0:d4:f6:92:e2:1d:c1:b7:ec:7f:63: 71:88:48:98:be:e4:26:a2:2b:1a:a3:ba:9e:f1:80:27:78:ce: 12:72:8d:bd:ba:0c:f9:95:50:0c:70:36:df:6b:7a:36:47:80: f4:d0:c1:df:c5:f8:f2:dc:3c:04:0c:a8:62:2e:5c:59:7f:2e: 2e:74:35:98:18:3d:64:d4:b0:58:f0:cd:10:61:f9:31:75:00: a8:6d:e8:17:eb:54:8f:dc:5b:d2:4d:61:9b:a7:8c:7a:04:b1: f5:42:6a:7c:43:d2:8a:6c:04:1b:e1:0b:92:58:1a:5a:02:f4: f8:dd:42:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdij7LJYNpqB2aAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWI1ZjY5ZDQtMDdiZi00ZDBhLTlkYjMtYTEzZGZkNTVhZjk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5LdNenSgd00Zzd/3EKhFlnl43b94bi2661k VQps9T0Fj0DcUSGTQStPcVPq8Aw9KIOiVW8ol+fNFd1dLZObvoyBGLzTHLA5xxj4 PbXpqS0IFvt5jgKMiWA9ciznvjskE6mAKQ3TDvsT+EkzOu6R6ROEsku7nx7P9MBt A9k+rnkt8oNBEshfj4aqcmprfxMGTr772yU010HPfDTT502N8BDPH6fWphVxqmMf r3ZJppzPqBPaDYYb3Se+O3EQw1UIIuyAJrUCDKgL5gWvbX9kv3rj+2bFhZL+Zbr1 +WJTDr4Qd1r28Vuq1pkjP8G7XuAPG4/fKPt7UHhiBIo0PVxROQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNFfy+hCT6cgWVYG/JEYkLbAwoAjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMDM3YWI5ZDAtMWRkOC0z MWQyLTg2ZTYtZGYwNTUwMWQwNjA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACaeqwsXcyAKhTj3EThdEzZg/FRTxpI3tA09aKEjxEGYIKzx2Gr10X49 MxAnwhwBL9JtOVPkIVpyTZWbBTdvo46ZYYFRTg6sspWc8+1lkY4ujWSsFKXuxTLE GQUglWv3H+pyuYcYa1sRa6/aYj8+Xnv89Y3HnsrTO0tt6H2wb08DJAjC00Cw1PaS 4h3Bt+x/Y3GISJi+5CaiKxqjup7xgCd4zhJyjb26DPmVUAxwNt9rejZHgPTQwd/F +PLcPAQMqGIuXFl/Li50NZgYPWTUsFjwzRBh+TF1AKht6BfrVI/cW9JNYZunjHoE sfVCanxD0opsBBvhC5JYGloC9PjdQgk= -----END CERTIFICATE-----Generated at Mon Apr 28 22:27:57 2025 by rpki-client