$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa File: 0be371a6-479e-3c51-a61d-3d40223861af.roa (raw, json) Hash identifier: nd7hQitKB+UWtqeBdi7sJmXIj43yp3qEhjlJY5/DIXs= Subject key identifier: BF:46:37:73:57:56:BD:0C:36:7E:0A:DF:E8:F5:12:FE:9B:41:99:27 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D36F7199D4F973B6C8B0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.38.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d3:6f:71:99:d4:f9:73:b6:c8:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=2ad076bc-395a-4fc9-bef9-032912db4a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:89:b5:71:ab:b2:d7:e0:a6:15:c5:51:71:61: b9:ba:31:ad:13:ea:19:19:9c:aa:b3:87:ac:21:b4: 6a:3c:eb:90:ec:0c:a0:ac:fb:40:d0:2b:6e:0c:65: ff:e7:34:0b:21:93:6b:d3:15:64:e3:55:4f:f3:d3: 62:c3:83:82:db:c4:bc:38:26:86:cb:7d:d8:cf:2e: db:df:d8:f9:48:d2:24:c0:30:05:5d:e2:f4:f8:87: e6:4f:27:62:4d:68:66:ad:1c:d2:4d:52:e0:a3:bb: b7:25:b3:02:ef:70:f9:b6:68:51:dd:6d:f4:aa:13: 74:2b:b5:85:1c:bc:da:7e:c7:b3:b3:ca:21:96:f9: 37:fc:f3:29:29:b8:72:de:c6:91:f4:de:31:a8:4c: 29:07:3f:20:55:84:6d:88:3d:8b:1a:83:97:7d:d3: a3:3f:d2:62:b6:5c:4f:e1:40:e8:e0:76:b2:53:ec: 44:aa:a1:87:ce:13:2a:a8:47:05:8e:bd:c5:50:9b: 47:e4:48:bd:46:44:e7:6b:9c:4b:dc:63:84:d5:f5: 4b:2a:7e:0d:b8:44:b7:1c:2e:5f:11:b3:62:5a:99: b4:bb:a5:0a:20:36:29:00:5a:ad:24:02:65:27:ff: 9f:66:bb:1f:4e:93:51:07:98:ad:fb:73:d7:ab:71: da:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:46:37:73:57:56:BD:0C:36:7E:0A:DF:E8:F5:12:FE:9B:41:99:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0be371a6-479e-3c51-a61d-3d40223861af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:fa:4d:56:d2:c6:81:75:d4:61:57:2f:be:71:eb:99:5c:aa: 55:69:08:71:7b:41:2f:62:32:76:bd:0c:cb:6a:a5:b2:85:0e: 8a:48:5b:12:16:a6:84:db:0f:89:2b:6a:e6:ef:c1:54:a3:75: 32:44:7c:a8:b5:0c:dd:6c:0a:e2:8a:ea:96:2a:89:36:87:79: 64:53:9f:04:f5:09:74:57:9d:56:a5:41:56:7f:6e:a8:0a:9f: bf:ed:51:89:87:0e:03:9f:23:32:b6:60:d9:9b:68:f3:0f:bb: 73:df:62:fb:52:f5:1a:a5:be:0b:16:1f:aa:52:57:6e:1b:95: 1e:b7:fb:a7:99:38:ee:94:95:2e:95:76:9e:63:12:fe:c4:b7: 25:4d:74:b0:66:53:d6:65:99:dd:a4:2e:e6:9c:73:66:a8:ce: 05:73:4e:56:8a:92:79:8b:52:61:a3:e3:df:d7:d4:1f:00:7b: a9:3c:87:54:7e:fd:ad:f0:56:a3:9a:e9:07:76:cc:c2:13:03: 8a:1f:33:af:b7:ce:ae:73:b7:5c:f8:60:1d:8f:d8:bd:10:f0: c1:ed:1a:e7:c5:91:fe:4e:40:60:8a:9e:a9:14:d6:1c:be:bd: ea:22:8c:b3:e0:fd:3a:08:ed:67:74:5c:da:53:74:57:d2:ef: 53:17:2e:02 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdNvcZnU+XO2yLAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MmFkMDc2YmMtMzk1YS00ZmM5LWJlZjktMDMyOTEyZGI0YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYm1cauy1+CmFcVRcWG5ujGtE+oZGZyqs4es IbRqPOuQ7AygrPtA0CtuDGX/5zQLIZNr0xVk41VP89Niw4OC28S8OCaGy33Yzy7b 39j5SNIkwDAFXeL0+IfmTydiTWhmrRzSTVLgo7u3JbMC73D5tmhR3W30qhN0K7WF HLzafsezs8ohlvk3/PMpKbhy3saR9N4xqEwpBz8gVYRtiD2LGoOXfdOjP9JitlxP 4UDo4HayU+xEqqGHzhMqqEcFjr3FUJtH5Ei9RkTna5xL3GOE1fVLKn4NuES3HC5f EbNiWpm0u6UKIDYpAFqtJAJlJ/+fZrsfTpNRB5it+3PXq3HarQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL9GN3NXVr0MNn4K3+j1Ev6bQZknMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGJlMzcxYTYtNDc5ZS0z YzUxLWE2MWQtM2Q0MDIyMzg2MWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCawMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACL6TVbSxoF11GFXL75x65lcqlVpCHF7QS9iMna9DMtqpbKFDopIWxIW poTbD4kraubvwVSjdTJEfKi1DN1sCuKK6pYqiTaHeWRTnwT1CXRXnValQVZ/bqgK n7/tUYmHDgOfIzK2YNmbaPMPu3PfYvtS9RqlvgsWH6pSV24blR63+6eZOO6UlS6V dp5jEv7EtyVNdLBmU9Zlmd2kLuacc2aozgVzTlaKknmLUmGj49/X1B8Ae6k8h1R+ /a3wVqOa6Qd2zMITA4ofM6+3zq5zt1z4YB2P2L0Q8MHtGufFkf5OQGCKnqkU1hy+ veoijLPg/ToI7Wd0XNpTdFfS71MXLgI= -----END CERTIFICATE-----Generated at Tue Apr 29 09:21:46 2025 by rpki-client