$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/13c83bea-2aaa-38c1-a04a-e3c36d01c784.roa File: 13c83bea-2aaa-38c1-a04a-e3c36d01c784.roa (raw, json) Hash identifier: BQDK4sVkwoKh9ZmpD4DQojJ/r+/jsChmc+RGS6TEDY8= Subject key identifier: 6C:68:1F:94:9F:A9:52:DF:62:DD:37:7D:3E:5B:BF:2E:65:1F:0D:E0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D2D3E26074D4D6C00580 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/13c83bea-2aaa-38c1-a04a-e3c36d01c784.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.33.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d2:d3:e2:60:74:d4:d6:c0:05:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=bce4c859-2e52-48de-a058-cf74c97c9ab6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:fa:ea:db:b6:ac:28:c3:65:c1:05:2f:b1:d5: 6f:61:c6:c2:b9:d6:48:92:76:4e:38:31:79:5d:ea: 96:ee:d2:81:de:41:f4:95:b0:80:5b:c9:61:86:0f: a4:c8:99:40:69:45:19:55:0f:05:8f:cb:d7:d3:c2: 3a:52:71:ea:81:c0:4f:6a:ad:bd:42:96:4b:7b:54: c9:57:36:e6:0a:b9:b2:95:19:24:cc:87:e9:7d:22: b7:bf:33:66:a3:7a:f2:60:a6:78:72:63:32:f4:fd: 98:4b:20:ee:de:d7:fe:6a:a2:f4:05:dc:7d:d9:79: 62:39:12:bc:8b:b9:66:8d:52:8e:ab:d1:35:26:e2: 2e:fb:3c:f9:b1:81:3f:9d:f8:5a:89:09:9c:c8:ae: bb:53:1b:a4:21:c6:48:72:18:31:48:bf:73:6e:e0: 04:ba:87:2b:62:8a:05:55:c7:4f:07:e6:3c:5c:2e: 84:60:b9:09:b0:2c:52:5f:70:af:28:78:52:93:7c: c6:fe:3e:e1:8a:0a:5c:8c:61:69:f6:89:6b:21:97: 26:ab:cf:64:9c:d2:0d:ef:9f:bf:71:b4:a9:d3:52: b2:a5:6c:b3:2f:ef:ae:f6:33:f5:8b:91:6e:66:6c: 55:02:fe:20:a8:05:e3:b5:2e:7b:32:c0:c8:07:35: 62:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:68:1F:94:9F:A9:52:DF:62:DD:37:7D:3E:5B:BF:2E:65:1F:0D:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/13c83bea-2aaa-38c1-a04a-e3c36d01c784.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:cc:78:6a:0c:28:12:75:b7:bb:d1:cd:1f:36:f7:8c:59:89: 08:55:38:ad:66:fd:d0:1c:a6:7f:47:4b:3e:81:3c:09:53:ad: 63:80:8c:40:6f:2d:bf:7d:a4:56:4e:cd:3d:b8:b3:62:ba:d8: d0:cc:b6:a3:f4:79:e9:b3:da:a9:11:32:4e:f8:3b:40:58:9f: 49:27:05:f4:a7:07:79:64:a8:f0:4c:25:22:e7:04:ca:9c:cc: a1:b5:d5:47:3c:95:1b:3f:1b:9d:0c:c2:d6:a1:b7:3a:63:8f: 80:51:5a:0f:5c:f7:4b:f2:e3:95:60:59:69:e5:40:8b:3d:ee: ca:29:73:b6:83:bd:ce:24:c6:df:48:db:85:d1:85:5d:d8:f1: 83:93:4f:54:57:58:b1:7f:71:11:70:8b:a1:d9:03:49:63:9c: 04:a2:07:fd:6f:c3:76:be:d2:49:8c:2c:7c:5c:db:7d:82:37: 55:d2:3c:ea:e2:9c:56:28:f2:2e:5d:13:8b:26:b0:e1:87:87: 33:6b:f0:40:48:4f:a2:5b:78:db:5a:19:eb:31:47:5d:17:33: 8c:3f:db:c4:8c:68:7e:f8:1c:a0:67:7c:ed:f3:6e:1e:67:e0: d7:2d:64:7a:e1:fe:a4:7d:5a:e2:d7:09:c4:3e:2f:87:04:61: 5d:f8:67:46 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdLT4mB01NbABYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YmNlNGM4NTktMmU1Mi00OGRlLWEwNTgtY2Y3NGM5N2M5YWI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivrq27asKMNlwQUvsdVvYcbCudZIknZOODF5 XeqW7tKB3kH0lbCAW8lhhg+kyJlAaUUZVQ8Fj8vX08I6UnHqgcBPaq29QpZLe1TJ VzbmCrmylRkkzIfpfSK3vzNmo3ryYKZ4cmMy9P2YSyDu3tf+aqL0Bdx92XliORK8 i7lmjVKOq9E1JuIu+zz5sYE/nfhaiQmcyK67UxukIcZIchgxSL9zbuAEuocrYooF VcdPB+Y8XC6EYLkJsCxSX3CvKHhSk3zG/j7higpcjGFp9olrIZcmq89knNIN75+/ cbSp01KypWyzL++u9jP1i5FuZmxVAv4gqAXjtS57MsDIBzVitQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGxoH5SfqVLfYt03fT5bvy5lHw3gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMTNjODNiZWEtMmFhYS0z OGMxLWEwNGEtZTNjMzZkMDFjNzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKDMeGoMKBJ1t7vRzR8294xZiQhVOK1m/dAcpn9HSz6BPAlTrWOAjEBv Lb99pFZOzT24s2K62NDMtqP0eemz2qkRMk74O0BYn0knBfSnB3lkqPBMJSLnBMqc zKG11Uc8lRs/G50Mwtahtzpjj4BRWg9c90vy45VgWWnlQIs97sopc7aDvc4kxt9I 24XRhV3Y8YOTT1RXWLF/cRFwi6HZA0ljnASiB/1vw3a+0kmMLHxc232CN1XSPOri nFYo8i5dE4smsOGHhzNr8EBIT6JbeNtaGesxR10XM4w/28SMaH74HKBnfO3zbh5n 4NctZHrh/qR9WuLXCcQ+L4cEYV34Z0Y= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:12 2025 by rpki-client