$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa File: 257de336-1c6c-3005-959d-52f3e18c305d.roa (raw, json) Hash identifier: VDrKePcQBABqsfesnanf2Y+dtdSMV9HRm3fM8JXiRs8= Subject key identifier: 05:44:5E:20:5A:7E:05:79:35:6B:25:8B:9C:23:3D:7D:B1:CF:D0:31 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D9E79980F6093A5CA680 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.33.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:e7:99:80:f6:09:3a:5c:a6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=b1f6ef97-072e-4f29-a7a1-7cb460e31e69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:31:22:bd:38:74:c6:0b:92:88:92:ed:69:b4: 7a:fa:ad:6e:85:16:7e:7a:46:90:0d:68:be:cb:90: c0:d5:f0:ea:95:ad:c1:71:7e:26:70:43:05:00:69: 2b:22:62:8f:ca:5b:c8:85:d9:12:7b:8f:7a:76:09: 36:b2:65:3a:c9:9a:aa:e6:fe:36:e6:81:6c:e9:93: 98:ab:13:22:ec:07:9d:27:d1:ca:b7:c1:9f:b6:8c: 8f:90:c5:24:37:bb:34:a7:26:5e:b8:a5:99:15:5b: ed:4e:61:b8:95:21:bb:fc:c5:7c:2f:57:9c:3f:3b: 8f:8e:68:5c:39:0b:9c:b3:32:cd:36:11:fd:d8:4a: 68:c9:21:93:a3:b3:40:11:0e:13:22:48:9a:4b:7d: 91:ba:f0:bc:62:53:32:9d:c0:55:b2:79:cf:40:82: 0c:7c:ed:ca:e2:08:f3:ef:05:f2:54:8e:aa:55:66: 0c:0a:ad:fd:5a:c7:17:62:70:9e:9e:c1:74:2d:23: 06:52:b2:be:8a:c2:20:43:4f:5e:25:00:4e:71:b6: 05:0b:5e:1d:cd:36:33:d5:20:1c:1b:c1:c3:6a:7c: 43:5d:dd:f1:7e:98:fc:5b:48:cb:ac:12:5a:80:b3: 6e:f4:3c:0f:d0:8b:82:1d:a1:34:50:32:35:4c:2a: 55:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:44:5E:20:5A:7E:05:79:35:6B:25:8B:9C:23:3D:7D:B1:CF:D0:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/257de336-1c6c-3005-959d-52f3e18c305d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.33.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:8a:62:28:23:a6:b4:58:ef:14:e9:f1:38:f6:72:66:c1:f2: b3:cd:5e:26:cc:12:b8:ab:8e:4c:2c:4a:de:fa:d4:4f:b4:c5: 79:91:80:53:61:52:85:12:bc:8d:6d:50:17:af:bc:24:ff:8d: 06:86:94:1d:c8:ef:3a:a6:32:24:e8:29:64:54:d9:2a:22:cf: d9:1d:8d:2f:f0:19:a1:50:14:91:1e:0f:ba:f2:a0:6b:5e:65: d3:ba:d1:73:11:db:3b:9c:df:18:45:44:9e:dd:c0:15:f5:78: 9b:6e:a8:68:32:6b:49:0e:21:56:e6:b7:c1:a2:cb:13:f1:a7: 05:93:e8:a9:eb:ba:94:91:f7:8c:4e:39:d7:a5:0d:49:83:a7: 28:cd:3b:d3:3c:dc:c6:f8:c0:46:6e:36:77:8f:a0:40:1c:d3: 27:ae:90:fa:72:88:87:e2:da:52:21:1e:f1:ac:8c:5f:c6:39: 6b:08:13:dc:f9:1b:98:ba:b8:58:4b:d4:b0:0b:7c:cd:c9:6e: 1e:fa:ad:8f:ba:e5:e2:ad:4b:25:f0:59:ad:a4:0f:40:e7:da: 2e:50:32:a4:95:18:50:29:65:5b:1c:3f:92:92:2a:9f:30:6c: b7:9a:c7:f3:c4:51:25:b9:70:6d:6c:d7:c0:b2:3d:bc:d0:54: 1d:03:f7:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdnnmYD2CTpcpoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YjFmNmVmOTctMDcyZS00ZjI5LWE3YTEtN2NiNDYwZTMxZTY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjEivTh0xguSiJLtabR6+q1uhRZ+ekaQDWi+ y5DA1fDqla3BcX4mcEMFAGkrImKPylvIhdkSe496dgk2smU6yZqq5v425oFs6ZOY qxMi7AedJ9HKt8GftoyPkMUkN7s0pyZeuKWZFVvtTmG4lSG7/MV8L1ecPzuPjmhc OQucszLNNhH92EpoySGTo7NAEQ4TIkiaS32RuvC8YlMyncBVsnnPQIIMfO3K4gjz 7wXyVI6qVWYMCq39WscXYnCensF0LSMGUrK+isIgQ09eJQBOcbYFC14dzTYz1SAc G8HDanxDXd3xfpj8W0jLrBJagLNu9DwP0IuCHaE0UDI1TCpVgQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVEXiBafgV5NWsli5wjPX2xz9AxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjU3ZGUzMzYtMWM2Yy0z MDA1LTk1OWQtNTJmM2UxOGMzMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuKYigjprRY7xTp8Tj2cmbB8rPNXibMErirjkwsSt761E+0xXmRgFNh UoUSvI1tUBevvCT/jQaGlB3I7zqmMiToKWRU2Soiz9kdjS/wGaFQFJEeD7ryoGte ZdO60XMR2zuc3xhFRJ7dwBX1eJtuqGgya0kOIVbmt8GiyxPxpwWT6KnrupSR94xO OdelDUmDpyjNO9M83Mb4wEZuNnePoEAc0yeukPpyiIfi2lIhHvGsjF/GOWsIE9z5 G5i6uFhL1LALfM3Jbh76rY+65eKtSyXwWa2kD0Dn2i5QMqSVGFApZVscP5KSKp8w bLeax/PEUSW5cG1s18CyPbzQVB0D94k= -----END CERTIFICATE-----Generated at Mon Jun 16 20:53:56 2025 by rpki-client