$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa File: 3d0f2f83-fcef-3336-b059-f11f1b644441.roa (raw, json) Hash identifier: LB1Eg4URtnpOqLFdSqKzjCbY4Ifq/E/zilhzasz0ElU= Subject key identifier: 90:DC:7B:04:3E:73:6D:D6:03:AB:85:E7:43:40:11:E1:C0:FC:21:80 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D3B2ADF729979B9B5300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.34.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d3:b2:ad:f7:29:97:9b:9b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=67cbb344-02d6-4644-863d-c78f321e51d5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:d7:3b:3c:03:38:ba:9b:ef:1f:fa:0b:28:12: b5:34:38:19:98:21:f2:fd:74:8a:f3:2c:f9:eb:cf: 9b:ae:37:a6:47:ef:f1:20:ca:fb:48:f6:83:fb:64: 69:7f:7e:f6:f9:f4:d7:53:20:83:1d:a9:8c:22:e6: 2a:ef:19:fd:27:3c:f1:25:85:2e:47:e4:dd:ed:84: 17:6e:e9:9e:63:5c:d2:b2:90:e6:2e:9b:bc:fe:cb: d0:ba:61:36:0b:61:dc:9b:ea:38:dd:74:84:e8:5c: 32:e4:f9:e8:92:b5:a6:10:ea:26:03:e9:5b:d8:6f: db:fa:49:51:e9:2b:71:91:b1:7c:61:8f:03:b8:b9: 1c:a6:e5:35:c1:7f:16:3b:05:7a:ff:8c:f9:3a:6b: f4:be:bc:2a:b3:1e:eb:6a:d8:16:78:8f:87:8b:8f: c5:39:71:bb:84:10:f7:53:86:e2:39:9e:fd:8d:0f: 02:cf:46:42:ec:12:64:b6:94:72:f7:29:6f:e1:fe: 3e:bc:64:e3:3d:fe:6e:05:bb:c7:5b:f9:d3:51:88: 1b:34:e9:98:6f:42:3b:f0:2a:47:8f:0a:f4:e8:78: 74:9f:41:e3:0e:87:8f:3c:d3:23:ff:ac:da:e1:7c: 80:f1:d6:87:f2:b1:2d:89:15:14:9d:25:6a:de:af: b8:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:DC:7B:04:3E:73:6D:D6:03:AB:85:E7:43:40:11:E1:C0:FC:21:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3d0f2f83-fcef-3336-b059-f11f1b644441.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:30:a0:8b:5c:5b:0b:ea:42:87:89:9f:37:eb:31:14:46:2d: c1:2d:6c:ab:92:7c:16:a9:57:67:36:d2:50:fd:fc:6c:2b:05: ee:85:36:61:69:f4:12:d7:8d:dc:03:7e:a3:59:7b:c7:3f:cc: 76:d9:37:3c:65:2c:67:40:cf:81:86:de:0a:f6:8f:a8:25:e6: d3:bb:de:05:77:de:be:a7:95:94:bc:1d:45:7d:b1:3c:62:94: 33:3e:86:d6:77:0c:90:c8:2f:8f:f1:26:d2:6b:a5:a7:a0:da: 12:93:62:de:4b:a3:81:f9:d3:77:c1:9d:9d:8d:e8:e9:a7:ac: f3:46:6b:6a:22:1d:9c:ac:d8:7d:2c:21:01:74:78:16:6e:4b: 05:12:ce:52:b4:c5:13:c1:40:75:13:70:cf:41:70:ec:29:8f: 0d:53:4e:2b:57:ee:a6:40:23:58:97:fe:7f:6b:ec:61:ce:90: 10:9b:0f:03:5f:73:f1:f4:ed:fb:63:72:75:3b:25:70:63:3b: 26:2f:da:9a:61:29:93:a3:71:f7:bd:3d:4f:a5:b0:4c:cd:df: 81:ea:8a:14:8d:af:0d:5f:76:a7:3a:af:1e:d7:a8:f7:8a:09: 73:7e:55:97:f6:ab:b7:28:d8:ec:db:37:07:a7:54:b7:9c:4b: 51:9f:6a:93 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdOyrfcpl5ubUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NjdjYmIzNDQtMDJkNi00NjQ0LTg2M2QtYzc4ZjMyMWU1MWQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj9c7PAM4upvvH/oLKBK1NDgZmCHy/XSK8yz5 68+brjemR+/xIMr7SPaD+2Rpf372+fTXUyCDHamMIuYq7xn9JzzxJYUuR+Td7YQX bumeY1zSspDmLpu8/svQumE2C2Hcm+o43XSE6Fwy5PnokrWmEOomA+lb2G/b+klR 6StxkbF8YY8DuLkcpuU1wX8WOwV6/4z5Omv0vrwqsx7ratgWeI+Hi4/FOXG7hBD3 U4biOZ79jQ8Cz0ZC7BJktpRy9ylv4f4+vGTjPf5uBbvHW/nTUYgbNOmYb0I78CpH jwr06Hh0n0HjDoePPNMj/6za4XyA8daH8rEtiRUUnSVq3q+4CQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJDcewQ+c23WA6uF50NAEeHA/CGAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2QwZjJmODMtZmNlZi0z MzM2LWIwNTktZjExZjFiNjQ0NDQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAwoItcWwvqQoeJnzfrMRRGLcEtbKuSfBapV2c20lD9/GwrBe6FNmFp 9BLXjdwDfqNZe8c/zHbZNzxlLGdAz4GG3gr2j6gl5tO73gV33r6nlZS8HUV9sTxi lDM+htZ3DJDIL4/xJtJrpaeg2hKTYt5Lo4H503fBnZ2N6OmnrPNGa2oiHZys2H0s IQF0eBZuSwUSzlK0xRPBQHUTcM9BcOwpjw1TTitX7qZAI1iX/n9r7GHOkBCbDwNf c/H07ftjcnU7JXBjOyYv2pphKZOjcfe9PU+lsEzN34HqihSNrw1fdqc6rx7XqPeK CXN+VZf2q7co2OzbNwenVLecS1GfapM= -----END CERTIFICATE-----Generated at Tue Apr 29 18:21:28 2025 by rpki-client