$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa File: 0da807cf-9bad-3510-a605-b990813b5a9f.roa (raw, json) Hash identifier: q3Yng6j/IPg1eYQaw63kUQOyP28PInrAv3Taoamqq2Q= Subject key identifier: 32:19:14:65:D3:2E:AA:15:A7:9B:1A:6C:BC:24:25:84:BA:37:56:2D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D8B326704916A61B5F00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.49.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d8:b3:26:70:49:16:a6:1b:5f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=0508a582-b11a-4b0b-b6d8-fc88dcc2d68f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:6c:44:a1:17:89:0c:e0:88:a5:0a:0f:44:e4: 5a:30:a1:0f:df:c4:82:2e:b1:6f:f8:8c:57:da:1b: 24:61:b6:2e:03:24:c2:fa:25:4d:10:a5:db:30:e3: 62:22:81:49:41:0c:3f:d5:f3:45:26:c2:40:6e:e2: d3:34:32:7d:5f:43:e0:15:7e:cf:6d:29:e1:8a:b1: 95:44:ef:09:9f:f8:bd:23:d2:76:41:02:46:44:45: 9a:dc:b8:31:95:7c:86:45:29:38:6c:24:6d:46:c5: 4e:eb:94:41:51:05:c7:9e:c1:7d:2f:ea:f9:36:b1: 11:8e:3c:f8:c8:90:ea:f7:38:47:6c:fb:8c:f3:2e: d0:ef:dd:b4:30:60:41:54:60:1e:e3:90:3b:7b:30: 4d:de:1b:73:11:18:72:4c:25:cc:40:c2:73:ac:3a: 84:95:41:76:83:5b:8c:11:8a:1e:9a:10:07:b3:82: eb:fe:22:62:23:53:42:5a:30:a8:9d:5b:e0:58:30: 57:da:a9:8b:d7:d9:85:ef:31:44:38:a6:7d:3e:6e: d6:c8:fd:36:75:42:93:58:b4:96:5e:61:96:29:2b: a8:c0:1b:d5:13:ed:f8:36:2d:f3:28:01:55:b3:75: 87:b9:19:7d:fa:4e:7d:16:3f:ab:13:58:56:5d:05: a8:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:19:14:65:D3:2E:AA:15:A7:9B:1A:6C:BC:24:25:84:BA:37:56:2D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/0da807cf-9bad-3510-a605-b990813b5a9f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3a:c9:8b:df:27:da:7b:a9:d2:9b:1e:9f:19:9e:ee:bb:4b: 20:10:ca:90:27:3e:c2:a7:d2:5c:d3:77:68:ec:f8:71:27:6a: 0e:59:f5:04:94:e5:68:d9:a0:00:a1:3e:c1:8f:ad:8c:36:cf: e2:3d:ab:a5:20:a8:de:33:f5:b9:43:02:21:f5:75:15:c9:7b: 66:da:87:25:ba:7b:18:b6:7f:dc:99:43:10:b0:bf:08:c6:65: c4:a2:48:aa:d6:06:f4:de:83:e3:ff:8f:f2:0c:86:82:70:b8: e0:bb:91:dd:f6:58:ec:d0:a5:c6:e1:4a:cf:0b:d4:60:bc:8a: 26:b1:51:43:59:49:7a:ca:75:fc:8e:7c:e5:9a:aa:e6:48:da: fa:d8:e1:9e:0b:6a:d1:e9:35:34:4a:f9:ef:bc:8a:1a:df:d6: c2:bc:b4:d1:10:8a:08:8c:65:0d:ea:f5:38:90:83:cf:ee:49: 10:0f:4c:d8:39:70:11:42:d2:83:17:56:7e:08:84:e0:43:72: 4e:81:8c:4a:f8:05:4a:ef:d4:b2:5a:3c:41:99:22:50:27:c1: 41:64:af:bd:aa:1c:6c:98:bf:e5:2e:fc:72:60:93:0c:e7:4c: de:71:f3:87:4c:6c:a9:f5:e7:55:d2:2e:9c:a7:ab:a2:a3:f8: 98:d9:bb:62 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdizJnBJFqYbXwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MDUwOGE1ODItYjExYS00YjBiLWI2ZDgtZmM4OGRjYzJkNjhmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtmxEoReJDOCIpQoPRORaMKEP38SCLrFv+IxX 2hskYbYuAyTC+iVNEKXbMONiIoFJQQw/1fNFJsJAbuLTNDJ9X0PgFX7PbSnhirGV RO8Jn/i9I9J2QQJGREWa3LgxlXyGRSk4bCRtRsVO65RBUQXHnsF9L+r5NrERjjz4 yJDq9zhHbPuM8y7Q7920MGBBVGAe45A7ezBN3htzERhyTCXMQMJzrDqElUF2g1uM EYoemhAHs4Lr/iJiI1NCWjConVvgWDBX2qmL19mF7zFEOKZ9Pm7WyP02dUKTWLSW XmGWKSuowBvVE+34Ni3zKAFVs3WHuRl9+k59Fj+rE1hWXQWonQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDIZFGXTLqoVp5sabLwkJYS6N1YtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMGRhODA3Y2YtOWJhZC0z NTEwLWE2MDUtYjk5MDgxM2I1YTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg6yYvfJ9p7qdKbHp8Znu67SyAQypAnPsKn0lzTd2js+HEnag5Z9QSU 5WjZoAChPsGPrYw2z+I9q6UgqN4z9blDAiH1dRXJe2bahyW6exi2f9yZQxCwvwjG ZcSiSKrWBvTeg+P/j/IMhoJwuOC7kd32WOzQpcbhSs8L1GC8iiaxUUNZSXrKdfyO fOWaquZI2vrY4Z4LatHpNTRK+e+8ihrf1sK8tNEQigiMZQ3q9TiQg8/uSRAPTNg5 cBFC0oMXVn4IhOBDck6BjEr4BUrv1LJaPEGZIlAnwUFkr72qHGyYv+Uu/HJgkwzn TN5x84dMbKn151XSLpynq6Kj+JjZu2I= -----END CERTIFICATE-----Generated at Tue Apr 29 09:28:47 2025 by rpki-client