$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa File: 299bcb5b-09bf-3065-927b-7c024222515a.roa (raw, json) Hash identifier: uTlUNRy5ZxSuGLotPhk3tgtf/AcaCat6FFgAVRYSqNQ= Subject key identifier: EC:42:A3:09:4D:DA:DD:4E:F7:C4:14:09:0C:CD:9D:F2:2B:FF:A1:06 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DDD16911B032CB116300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.53.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dd:d1:69:11:b0:32:cb:11:63:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=ed5b2ff9-cf56-47fb-a407-1269732e8f41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:9f:a1:a7:dc:1f:72:e7:0e:11:04:e0:09:c5: 44:e5:e2:39:9d:f3:aa:82:c8:75:ca:4b:56:b8:e6: 8d:1b:45:fa:15:76:d6:00:b7:89:ee:c6:2c:95:a4: af:30:82:27:02:e7:f1:bb:06:b1:dd:94:ad:55:40: fb:3d:79:6c:d7:58:a1:9e:c3:c8:56:c0:6a:f3:e6: 54:25:6d:90:dd:10:58:a6:e9:2a:58:c8:94:5c:eb: aa:7b:4c:19:ea:a3:35:52:28:22:0f:c7:e1:57:1b: 82:7f:07:c0:e8:7d:6b:a6:ab:bc:6b:5d:f2:8c:7b: 34:db:93:87:da:bb:d0:84:13:37:b3:09:f6:3a:3b: 1a:6b:50:ce:20:96:bf:72:d8:62:ee:cd:0c:86:88: 54:b3:9a:b7:10:c3:1b:cf:3e:16:60:f0:39:32:45: cf:07:f8:79:a4:08:f2:00:1a:fe:70:76:bc:5e:11: e1:76:22:ba:cd:28:7a:72:5f:f3:50:cd:6e:93:19: bb:b1:45:8f:df:25:33:54:a8:e0:86:8f:15:65:ed: c9:51:8a:35:6d:cd:ad:ad:20:7d:34:99:11:7d:d2: fc:aa:5b:42:76:60:eb:9a:39:6a:32:2d:13:d0:10: 0a:9a:b9:e8:5e:7d:5e:91:96:e3:60:0b:ea:8b:5c: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:42:A3:09:4D:DA:DD:4E:F7:C4:14:09:0C:CD:9D:F2:2B:FF:A1:06 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/299bcb5b-09bf-3065-927b-7c024222515a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1b:37:09:de:ff:e3:30:67:70:45:c8:1f:c4:c7:04:bc:c8:7e: 62:be:d5:58:66:56:9c:a6:08:4a:1b:79:f9:11:c0:43:11:dc: d4:a8:36:8e:d9:2f:73:dc:07:74:ec:8f:82:eb:9f:00:89:7d: e0:0c:3f:e9:64:0c:76:99:17:40:ec:aa:26:c4:a9:2d:bd:f3: 3a:57:81:b7:05:39:88:58:74:2f:19:65:9d:49:de:ad:e1:ab: ee:8f:28:b5:b2:18:ea:eb:7c:39:b5:cb:f4:02:95:2e:7d:58: cc:1a:88:4e:ef:3c:5b:a5:6a:41:b1:ae:be:93:01:78:e9:ce: 91:ed:4b:1e:5a:08:a0:f0:f0:8b:54:53:60:8b:1e:db:a6:72: cf:cc:65:ea:b6:71:d7:73:85:7c:a7:7a:e2:9a:41:99:07:bf: 3e:9e:2d:65:77:b0:52:a4:14:a4:42:15:a9:e0:be:5a:25:82: 34:eb:2b:32:35:5a:37:89:b9:92:71:72:70:54:0b:20:97:14: 9a:be:51:07:ae:c5:3e:d3:46:e6:63:41:17:a3:3b:ca:8b:56: 43:ed:7e:9f:d4:1b:46:25:04:a4:85:ea:73:7b:83:5f:c0:51: 0c:43:34:94:cd:b9:3b:1b:7e:24:15:29:06:e1:70:c1:16:ad: a1:e3:2b:7a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd3RaRGwMssRYwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWQ1YjJmZjktY2Y1Ni00N2ZiLWE0MDctMTI2OTczMmU4ZjQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZ+hp9wfcucOEQTgCcVE5eI5nfOqgsh1yktW uOaNG0X6FXbWALeJ7sYslaSvMIInAufxuwax3ZStVUD7PXls11ihnsPIVsBq8+ZU JW2Q3RBYpukqWMiUXOuqe0wZ6qM1UigiD8fhVxuCfwfA6H1rpqu8a13yjHs025OH 2rvQhBM3swn2Ojsaa1DOIJa/cthi7s0MhohUs5q3EMMbzz4WYPA5MkXPB/h5pAjy ABr+cHa8XhHhdiK6zSh6cl/zUM1ukxm7sUWP3yUzVKjgho8VZe3JUYo1bc2trSB9 NJkRfdL8qltCdmDrmjlqMi0T0BAKmrnoXn1ekZbjYAvqi1zGQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOxCowlN2t1O98QUCQzNnfIr/6EGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMjk5YmNiNWItMDliZi0z MDY1LTkyN2ItN2MwMjQyMjI1MTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABs3Cd7/4zBncEXIH8THBLzIfmK+1VhmVpymCEobefkRwEMR3NSoNo7Z L3PcB3Tsj4LrnwCJfeAMP+lkDHaZF0DsqibEqS298zpXgbcFOYhYdC8ZZZ1J3q3h q+6PKLWyGOrrfDm1y/QClS59WMwaiE7vPFulakGxrr6TAXjpzpHtSx5aCKDw8ItU U2CLHtumcs/MZeq2cddzhXyneuKaQZkHvz6eLWV3sFKkFKRCFangvlolgjTrKzI1 WjeJuZJxcnBUCyCXFJq+UQeuxT7TRuZjQRejO8qLVkPtfp/UG0YlBKSF6nN7g1/A UQxDNJTNuTsbfiQVKQbhcMEWraHjK3o= -----END CERTIFICATE-----Generated at Tue Apr 29 08:30:38 2025 by rpki-client