$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa File: 1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa (raw, json) Hash identifier: FgQiNfOfbFOcQEp4mM/zot5TcHIVRvt+FrQpjpxhcw8= Subject key identifier: CF:30:96:C6:F5:AB:52:03:BE:A8:CD:C7:A0:1F:BD:68:10:F3:29:69 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CD50CCE9B4DE7AC5CB00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.37.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cd:50:cc:e9:b4:de:7a:c5:cb:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=409e5bf8-d5ed-4d98-aa4f-98e84dea2be0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:37:bb:e0:b0:f4:ac:78:51:dd:af:3f:9f:15: 68:7e:c4:b1:68:a7:b8:0c:2e:b1:b4:6e:24:eb:b3: 08:51:93:b9:85:76:7c:1e:e3:ae:b2:e5:4f:9c:65: 48:94:5c:54:e1:f2:bd:bd:8d:ed:9f:1b:42:f8:97: bb:8e:15:ca:63:9c:6d:63:31:5e:98:a1:51:f1:db: cb:4e:89:88:3a:19:38:e7:8a:58:41:7f:62:5c:f1: ea:15:f4:6d:b1:e9:af:e8:62:bd:d2:f4:f6:8c:4b: 9c:8e:01:4d:5a:bc:f7:8a:10:a4:ae:b1:24:e4:05: fa:27:dd:9e:8f:d3:c0:81:be:01:ce:c7:d2:20:25: fe:7c:a3:af:eb:dd:eb:49:02:1f:c7:22:16:21:68: 74:fc:10:6f:1b:89:d1:8c:59:25:dc:10:d0:fe:43: c2:a7:d1:05:ec:fa:58:4a:a2:f3:3b:a5:f5:ba:1c: 4d:90:e3:45:00:6c:85:d6:d3:19:1c:2d:08:c8:e3: f0:9d:2d:99:5c:c6:18:72:9b:87:4e:54:42:d3:34: 20:4d:8c:00:41:da:3d:43:cc:1e:d2:43:18:fa:7c: 6f:da:0e:bc:24:3e:51:29:27:45:44:e1:ab:6e:e8: 1b:79:45:97:9f:07:cf:10:d6:4e:fa:ff:59:f9:f7: 23:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:30:96:C6:F5:AB:52:03:BE:A8:CD:C7:A0:1F:BD:68:10:F3:29:69 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1a08e8cd-4f6e-3190-8e11-17e4d98e9a8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c4:f1:95:6b:d2:6e:fd:e1:56:8a:ac:55:74:85:fb:cc:41: cb:c6:84:51:a8:5c:05:c2:7f:2c:c9:39:83:77:41:e9:9d:45: e7:8c:8d:57:ee:10:2f:3f:bc:cf:16:fd:8e:4b:4a:9f:57:03: 66:de:d3:21:b5:a6:8e:fc:13:71:b5:22:92:c5:94:5d:a4:11: 16:af:8f:99:81:08:99:4a:ea:87:93:42:7b:b7:56:6b:02:d8: 5e:ec:4c:2b:7f:64:3c:e5:2a:c7:86:cf:0a:3b:6d:f7:90:ab: 5c:07:96:ab:00:f5:79:e5:a2:e7:cc:26:36:96:4d:67:b2:fb: 76:d5:98:43:bd:5e:28:16:92:e0:6d:c8:2c:1d:3c:b6:d2:43: 06:08:c2:4e:38:5a:cd:c0:52:da:ae:fd:20:59:b6:c9:38:83: c1:84:40:46:56:8d:23:1e:2d:a6:68:88:84:ee:03:2a:60:fd: 30:2e:84:b0:02:70:a0:db:ba:e6:d1:1a:b4:1c:32:c4:b2:af: 87:a1:34:e8:67:f9:d5:af:21:27:26:e4:26:0f:92:d7:1f:81: e8:cc:22:3d:9e:8c:a5:da:df:b4:0c:51:31:2f:26:12:75:54: 2b:74:9f:8a:5f:e4:cb:14:2b:e0:29:c8:32:ac:b7:48:70:e1: ef:ce:9b:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc1QzOm03nrFywAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NDA5ZTViZjgtZDVlZC00ZDk4LWFhNGYtOThlODRkZWEyYmUwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlze74LD0rHhR3a8/nxVofsSxaKe4DC6xtG4k 67MIUZO5hXZ8HuOusuVPnGVIlFxU4fK9vY3tnxtC+Je7jhXKY5xtYzFemKFR8dvL TomIOhk454pYQX9iXPHqFfRtsemv6GK90vT2jEucjgFNWrz3ihCkrrEk5AX6J92e j9PAgb4BzsfSICX+fKOv693rSQIfxyIWIWh0/BBvG4nRjFkl3BDQ/kPCp9EF7PpY SqLzO6X1uhxNkONFAGyF1tMZHC0IyOPwnS2ZXMYYcpuHTlRC0zQgTYwAQdo9Q8we 0kMY+nxv2g68JD5RKSdFROGrbugbeUWXnwfPENZO+v9Z+fcj9QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM8wlsb1q1IDvqjNx6AfvWgQ8ylpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWEwOGU4Y2QtNGY2ZS0z MTkwLThlMTEtMTdlNGQ5OGU5YThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCXQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzE8ZVr0m794VaKrFV0hfvMQcvGhFGoXAXCfyzJOYN3QemdReeMjVfu EC8/vM8W/Y5LSp9XA2be0yG1po78E3G1IpLFlF2kERavj5mBCJlK6oeTQnu3VmsC 2F7sTCt/ZDzlKseGzwo7bfeQq1wHlqsA9XnloufMJjaWTWey+3bVmEO9XigWkuBt yCwdPLbSQwYIwk44Ws3AUtqu/SBZtsk4g8GEQEZWjSMeLaZoiITuAypg/TAuhLAC cKDbuubRGrQcMsSyr4ehNOhn+dWvIScm5CYPktcfgejMIj2ejKXa37QMUTEvJhJ1 VCt0n4pf5MsUK+ApyDKst0hw4e/Om0s= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:25 2025 by rpki-client