$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa File: 1c3859cd-a379-3805-b0c7-cf92685a3438.roa (raw, json) Hash identifier: Y1+m6ais0mrFToHcNKHnx8G48DR7yh/Zbvn7EkP4M7w= Subject key identifier: D8:D3:1B:4B:B5:8C:E2:7E:DE:CC:2C:98:B0:07:E5:0C:AA:20:0F:41 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D2BFD81AEF82EFDDE280 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.52.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d2:bf:d8:1a:ef:82:ef:dd:e2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=dde499de-6275-4913-8bf1-25d0c266b6ae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:f0:2d:ff:5d:98:eb:c2:f9:c9:34:47:10:1e: 0d:68:89:4c:28:dd:ce:ac:10:f7:44:50:54:5b:7a: 01:1a:81:87:57:cc:16:15:3c:37:79:a2:ca:88:f5: e8:ec:f6:7a:bd:44:e4:ad:21:6a:8e:72:03:f9:dc: 62:02:c5:3b:75:ae:d3:f3:09:c4:8d:8e:51:59:e5: 39:62:42:a6:39:a2:41:f8:85:2d:b2:69:b7:3a:68: 87:86:75:ee:c2:d4:df:94:6b:0c:12:73:11:bc:91: a5:6a:3a:8c:81:8a:fa:b8:e2:86:46:8a:ba:f7:f2: ac:6b:db:0d:32:91:05:68:7f:d7:bc:bf:31:0d:b2: 2d:da:9a:30:51:f9:31:8b:b5:07:cd:46:fe:45:2a: dd:11:3b:87:a7:4e:86:dd:d0:b5:f6:88:5e:40:c3: 5d:25:84:9f:02:26:f2:42:83:a4:e0:2e:14:c8:cb: b3:4a:f2:a8:16:c2:db:e1:ea:6f:b9:fb:27:50:c6: 1f:01:9a:3d:9f:25:08:2a:b9:5f:72:da:69:55:c1: 5d:81:b3:c4:3d:93:8b:bb:09:0e:c6:ad:0f:21:cc: be:eb:79:58:7e:d9:b6:9f:29:15:6e:49:8a:48:ae: ea:bb:fe:61:12:c9:bb:3f:d7:6f:74:f0:73:cd:a5: 1c:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:D3:1B:4B:B5:8C:E2:7E:DE:CC:2C:98:B0:07:E5:0C:AA:20:0F:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1c3859cd-a379-3805-b0c7-cf92685a3438.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:ca:8a:3d:ca:35:f3:3f:88:9a:8d:d6:31:d4:5d:c0:4b:63: a4:75:0b:67:42:b9:30:d9:44:93:cc:ef:11:0f:6b:f0:fd:5a: 05:95:2d:48:b3:95:43:a0:2c:db:ef:8b:c8:49:0a:22:26:6c: 25:c0:47:71:01:7d:5d:f7:52:20:34:36:93:75:c3:7e:cd:ac: 22:8b:99:8c:f4:45:d1:83:77:01:37:48:2b:2f:91:b7:a8:29: eb:a7:6e:bb:a3:f7:c1:dc:f3:91:54:bf:02:a2:24:f0:9f:04: 55:d2:4e:11:f4:3a:6f:1e:a9:52:5b:b0:5c:3f:a3:b9:f7:2e: 20:90:29:07:fb:c8:f5:e1:73:21:67:9f:c7:6e:4c:04:b7:27: b4:f3:08:b7:c3:88:03:92:72:b8:e0:32:bd:df:9a:9a:3d:b9: 7d:8a:3c:af:20:51:a5:c4:2e:e9:a4:b4:0d:29:00:42:f5:f6: cd:e1:78:20:ba:19:70:66:72:6f:bd:13:92:e9:0f:ac:17:1c: 35:31:97:92:8a:c8:3b:a8:2e:3d:3e:38:2b:0f:41:bf:40:df: b4:7b:45:2d:c0:b7:af:a5:a4:79:b1:f4:4c:4d:38:2e:17:c8: 8a:c9:fe:40:09:44:60:98:cb:45:eb:d3:dd:f2:7e:fc:74:e5: 99:14:2f:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdK/2Brvgu/d4oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZGRlNDk5ZGUtNjI3NS00OTEzLThiZjEtMjVkMGMyNjZiNmFlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/At/12Y68L5yTRHEB4NaIlMKN3OrBD3RFBU W3oBGoGHV8wWFTw3eaLKiPXo7PZ6vUTkrSFqjnID+dxiAsU7da7T8wnEjY5RWeU5 YkKmOaJB+IUtsmm3OmiHhnXuwtTflGsMEnMRvJGlajqMgYr6uOKGRoq69/Ksa9sN MpEFaH/XvL8xDbIt2powUfkxi7UHzUb+RSrdETuHp06G3dC19oheQMNdJYSfAiby QoOk4C4UyMuzSvKoFsLb4epvufsnUMYfAZo9nyUIKrlfctppVcFdgbPEPZOLuwkO xq0PIcy+63lYftm2nykVbkmKSK7qu/5hEsm7P9dvdPBzzaUcWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNjTG0u1jOJ+3swsmLAH5QyqIA9BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWMzODU5Y2QtYTM3OS0z ODA1LWIwYzctY2Y5MjY4NWEzNDM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDQgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfKij3KNfM/iJqN1jHUXcBLY6R1C2dCuTDZRJPM7xEPa/D9WgWVLUiz lUOgLNvvi8hJCiImbCXAR3EBfV33UiA0NpN1w37NrCKLmYz0RdGDdwE3SCsvkbeo Keunbruj98Hc85FUvwKiJPCfBFXSThH0Om8eqVJbsFw/o7n3LiCQKQf7yPXhcyFn n8duTAS3J7TzCLfDiAOScrjgMr3fmpo9uX2KPK8gUaXELumktA0pAEL19s3heCC6 GXBmcm+9E5LpD6wXHDUxl5KKyDuoLj0+OCsPQb9A37R7RS3At6+lpHmx9ExNOC4X yIrJ/kAJRGCYy0Xr093yfvx05ZkUL8w= -----END CERTIFICATE-----Generated at Mon Apr 28 22:52:59 2025 by rpki-client