$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa File: 0d35164e-0555-3d38-a332-e25e49271a03.roa (raw, json) Hash identifier: 5MN1EAVryU5t4rrDQemaJcwZPkrusvPBcTY/1kNneNc= Subject key identifier: 1C:B6:02:6F:AD:89:EA:0F:69:DF:AC:9D:D1:30:9D:F0:42:47:38:2E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D1457168C2EFD438D000 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.46.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d1:45:71:68:c2:ef:d4:38:d0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=2ec1506a-4d16-45d2-bd3e-adf1190385a8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:a9:1c:1a:50:47:5d:f7:e2:2c:db:8d:05:8e: 86:14:03:5a:05:29:f9:c4:fa:ec:b5:8f:9a:87:dd: 3a:83:68:3e:47:c7:28:74:20:f4:97:6c:5c:55:81: 33:cc:c5:09:c3:d2:84:ef:c3:cd:b0:1e:39:8d:21: 71:c5:d9:e8:4f:28:c2:48:9b:77:98:2a:77:ed:4f: aa:3f:9e:88:47:10:3c:48:16:cd:f1:e1:87:e2:36: e4:71:3a:f7:61:0a:84:dc:5a:63:66:b7:51:46:14: fc:52:fe:05:ad:fb:ef:c8:2b:3d:76:7b:39:b8:a3: b6:f7:a6:cb:4b:3b:db:e2:2e:6c:e0:92:e0:2d:b0: 41:ff:9a:23:7b:b2:2a:44:09:09:05:02:a2:e0:22: 79:dd:8b:7e:f5:86:26:c9:94:84:20:22:fd:a4:0c: d4:36:89:66:78:dd:5b:45:92:a7:18:23:43:8a:20: de:32:21:56:af:8f:f2:56:93:2b:6e:56:87:21:8b: 57:d0:63:df:2c:36:b3:31:d1:56:a9:a9:48:c7:8e: 08:14:a7:69:aa:f1:a2:50:fb:ec:71:bd:b4:f8:68: 18:0a:f8:d6:d8:0b:67:50:2a:b6:74:f2:92:e5:4d: 82:81:ea:f9:17:90:a3:b9:f9:bd:0a:8c:bb:ab:fd: 77:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:B6:02:6F:AD:89:EA:0F:69:DF:AC:9D:D1:30:9D:F0:42:47:38:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0d35164e-0555-3d38-a332-e25e49271a03.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.46.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:ec:17:cb:0d:16:7e:1f:5b:58:aa:ef:66:16:b9:a7:b3:94: 29:38:19:7c:e6:43:89:dc:95:13:44:e5:c3:45:dc:86:99:f6: c1:08:e1:6d:91:8f:51:9f:b2:5c:69:09:15:68:62:a8:f6:b1: 56:3b:5d:ad:09:5c:3e:2d:10:de:ef:d7:ce:a6:65:fd:85:ef: 59:29:17:20:95:fd:2a:a8:45:cc:ca:c9:79:aa:e6:11:c3:32: 31:3c:7b:dd:de:72:0a:d4:c8:63:9f:9d:a9:7c:7a:bf:36:32: df:46:9c:70:f4:4f:c9:99:b1:db:9c:0f:fc:04:19:54:b9:24: 1a:36:bf:e9:3b:06:11:94:eb:74:fe:75:b7:fc:0e:20:a9:31: 78:43:b1:d9:63:96:27:d8:8f:d4:1c:a4:cd:8e:44:24:3d:2f: 9c:61:71:43:15:c1:fe:23:ec:1f:dd:5b:b6:66:53:eb:aa:a2: 2b:7d:f5:14:11:2b:df:3b:0b:23:f6:07:7e:42:80:b8:70:1f: a3:62:bd:2c:e0:aa:d4:60:19:83:e2:91:e4:d8:ad:92:b1:2a: 66:a7:95:9a:c6:cf:bd:f1:b2:07:37:04:59:05:ba:bb:8f:03: db:ed:f8:99:e7:d0:05:d2:95:ae:77:e7:37:97:db:84:f5:9c: 87:60:4c:38 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdFFcWjC79Q40AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MmVjMTUwNmEtNGQxNi00NWQyLWJkM2UtYWRmMTE5MDM4NWE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxakcGlBHXffiLNuNBY6GFANaBSn5xPrstY+a h906g2g+R8codCD0l2xcVYEzzMUJw9KE78PNsB45jSFxxdnoTyjCSJt3mCp37U+q P56IRxA8SBbN8eGH4jbkcTr3YQqE3FpjZrdRRhT8Uv4FrfvvyCs9dns5uKO296bL Szvb4i5s4JLgLbBB/5oje7IqRAkJBQKi4CJ53Yt+9YYmyZSEICL9pAzUNolmeN1b RZKnGCNDiiDeMiFWr4/yVpMrblaHIYtX0GPfLDazMdFWqalIx44IFKdpqvGiUPvs cb20+GgYCvjW2AtnUCq2dPKS5U2Cger5F5Cjufm9Coy7q/13qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBy2Am+tieoPad+sndEwnfBCRzguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGQzNTE2NGUtMDU1NS0z ZDM4LWEzMzItZTI1ZTQ5MjcxYTAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC6AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG3sF8sNFn4fW1iq72YWuaezlCk4GXzmQ4nclRNE5cNF3IaZ9sEI4W2R j1GfslxpCRVoYqj2sVY7Xa0JXD4tEN7v186mZf2F71kpFyCV/SqoRczKyXmq5hHD MjE8e93ecgrUyGOfnal8er82Mt9GnHD0T8mZsducD/wEGVS5JBo2v+k7BhGU63T+ dbf8DiCpMXhDsdljlifYj9QcpM2ORCQ9L5xhcUMVwf4j7B/dW7ZmU+uqoit99RQR K987CyP2B35CgLhwH6NivSzgqtRgGYPikeTYrZKxKmanlZrGz73xsgc3BFkFuruP A9vt+Jnn0AXSla535zeX24T1nIdgTDg= -----END CERTIFICATE-----Generated at Wed Apr 30 03:37:16 2025 by rpki-client