$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa File: 1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa (raw, json) Hash identifier: 8yYl5apgoy+9yTcWL73HBYzumHn9eWVqQB/ZhORAZPk= Subject key identifier: 74:24:C2:8D:2C:98:44:11:11:72:01:9F:3F:A0:77:9D:A5:4B:75:9E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D61CAC5619DFCE1AD940 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.38.80.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d6:1c:ac:56:19:df:ce:1a:d9:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=34d38140-53ee-46c0-a609-de86c7f99a40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:3b:5b:e3:8f:0c:43:3e:9a:54:13:f8:cb:df: 2a:98:b7:b8:96:29:2d:3e:91:5d:d7:4f:db:dd:d9: 15:55:b9:05:76:94:6a:38:19:cf:d6:33:60:bc:a0: 82:cd:06:36:2a:4b:eb:24:3f:1e:0b:c4:55:4b:70: 78:24:65:91:a8:e0:73:31:ec:19:d4:b3:4c:e7:e7: dd:f3:50:fe:e1:c3:cb:9c:0f:53:28:cf:0f:b5:74: 66:5e:23:c2:f2:3d:b3:6a:05:74:c5:80:04:13:11: bc:57:c6:25:67:4f:2e:89:bc:a7:2a:e0:13:ed:54: 7e:46:1a:76:06:ba:c0:15:96:01:ae:64:18:7a:f0: 57:e4:78:8d:fc:b9:30:b6:62:27:9d:30:bf:3f:0f: 50:75:6f:37:ef:02:7f:82:7a:72:32:bc:e1:18:2a: a8:fb:17:b2:dc:72:64:d7:47:5c:be:23:5d:c0:ef: ae:0e:12:89:a2:89:16:94:d8:9e:2b:3c:60:f2:0f: fb:ec:a3:03:84:84:ed:74:b4:f3:2a:8b:8e:41:95: 26:c1:77:02:b2:b1:95:f4:0a:14:14:05:60:ab:f5: bc:e2:d3:d1:55:3d:bd:c0:1c:7a:50:a3:ff:e9:5d: 2d:8c:da:c5:4c:1d:50:d0:a1:7a:36:bc:36:37:56: 86:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:24:C2:8D:2C:98:44:11:11:72:01:9F:3F:A0:77:9D:A5:4B:75:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/1ff05e1f-0778-375d-b536-2aac7ca85ac1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.38.80.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:63:6c:b3:3d:00:99:aa:73:13:ff:c7:75:f7:81:8c:ab:76: a5:73:5d:23:27:41:03:d7:c4:86:3b:28:fc:44:3a:1e:f1:cc: b1:6b:92:49:a4:d2:d8:f0:dd:31:ed:f7:f0:58:96:c4:26:56: 6a:ec:ef:50:ac:e1:c7:8b:15:37:7b:f4:97:5f:f6:b2:b7:ff: ba:eb:10:0b:c9:11:28:b9:c9:ae:81:77:0b:19:9e:3c:26:82: bf:f1:8c:8b:dc:95:61:b5:20:74:10:11:a7:f3:b8:ad:7a:07: 99:3d:81:5c:37:76:9e:9e:06:3b:c1:28:a4:f4:37:a9:95:0f: ab:bb:30:f3:b1:b6:5f:09:ad:53:02:39:73:6a:2e:e1:ee:51: 2e:33:f9:70:51:c0:cc:1c:ba:6d:ba:9b:99:7b:84:f3:7e:ef: 0a:8c:7a:22:49:24:5c:1e:b2:b2:66:5b:0a:a6:35:8d:f4:a4: 5d:f2:42:df:00:0d:1e:76:3c:c8:8f:44:70:9c:02:1d:a9:6b: f0:1e:d8:8a:62:b4:66:cf:9e:dd:f1:8a:7f:d7:1c:41:ee:9f: 7a:ea:6d:a1:ed:f2:16:69:4e:80:be:cc:ed:64:e2:69:56:e3: 14:58:9b:86:39:e3:99:c6:5f:e4:50:e1:e6:ee:21:3c:9d:c3: d2:21:3a:88 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdYcrFYZ384a2UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MzRkMzgxNDAtNTNlZS00NmMwLWE2MDktZGU4NmM3Zjk5YTQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjtb448MQz6aVBP4y98qmLe4liktPpFd10/b 3dkVVbkFdpRqOBnP1jNgvKCCzQY2KkvrJD8eC8RVS3B4JGWRqOBzMewZ1LNM5+fd 81D+4cPLnA9TKM8PtXRmXiPC8j2zagV0xYAEExG8V8YlZ08uibynKuAT7VR+Rhp2 BrrAFZYBrmQYevBX5HiN/LkwtmInnTC/Pw9QdW837wJ/gnpyMrzhGCqo+xey3HJk 10dcviNdwO+uDhKJookWlNieKzxg8g/77KMDhITtdLTzKouOQZUmwXcCsrGV9AoU FAVgq/W84tPRVT29wBx6UKP/6V0tjNrFTB1Q0KF6Nrw2N1aGlQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHQkwo0smEQREXIBnz+gd52lS3WeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMWZmMDVlMWYtMDc3OC0z NzVkLWI1MzYtMmFhYzdjYTg1YWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCZQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFtjbLM9AJmqcxP/x3X3gYyrdqVzXSMnQQPXxIY7KPxEOh7xzLFrkkmk 0tjw3THt9/BYlsQmVmrs71Cs4ceLFTd79Jdf9rK3/7rrEAvJESi5ya6BdwsZnjwm gr/xjIvclWG1IHQQEafzuK16B5k9gVw3dp6eBjvBKKT0N6mVD6u7MPOxtl8JrVMC OXNqLuHuUS4z+XBRwMwcum26m5l7hPN+7wqMeiJJJFwesrJmWwqmNY30pF3yQt8A DR52PMiPRHCcAh2pa/Ae2IpitGbPnt3xin/XHEHun3rqbaHt8hZpToC+zO1k4mlW 4xRYm4Y545nGX+RQ4ebuITydw9IhOog= -----END CERTIFICATE-----Generated at Tue Apr 29 16:16:22 2025 by rpki-client