$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa File: 3f54756d-92cf-32d2-9d67-667c450979c0.roa (raw, json) Hash identifier: PnKz+F3wPW8myQNsE49KowDwO+u1JKO70wiRpP/QVCM= Subject key identifier: 06:94:13:39:BE:BC:EB:B1:39:A1:CA:FA:5C:A8:87:50:9D:21:68:9E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D833341129C9F1728D80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.36.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d8:33:34:11:29:c9:f1:72:8d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=3b6d13fa-d941-4197-b268-58a5a186dc69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:81:8d:76:80:4f:21:fc:46:f2:e8:0e:ee:97: c9:a6:e7:0a:0d:a1:86:f8:9a:b7:c5:2f:3f:7a:e5: 59:50:c8:45:37:95:57:1d:10:b1:38:a8:86:05:ee: 00:f3:9e:ba:0e:32:f9:b2:47:79:81:58:f5:ba:a7: 82:cb:d8:80:78:a3:0f:af:5e:fb:6e:56:60:5b:40: 4d:a4:09:5f:df:22:ff:5a:90:de:38:50:a1:d2:4f: 8b:0c:53:94:e4:cc:99:2d:fd:16:12:71:dc:f4:cd: 7c:ed:25:61:dd:41:48:78:5f:8a:9a:f1:d3:ef:74: 22:cc:b3:5b:89:7f:7e:e0:14:db:67:2d:44:f9:3f: 14:07:69:3f:a6:b2:31:fe:73:e1:43:d4:f3:b7:53: 10:3f:7b:92:03:e9:26:e5:2f:e0:cf:e3:5f:b4:87: e4:28:a7:a2:e9:ed:09:a0:64:e4:40:18:ac:e4:1b: 9e:22:a4:e3:93:80:9d:69:4a:53:79:06:ee:36:86: 6f:ed:64:81:19:c1:27:cb:b0:d2:f1:7b:75:7e:9e: 30:6f:26:cc:9a:0a:3c:3d:3b:a1:cb:76:f8:a4:db: 9d:3d:8f:16:b3:aa:6e:ca:44:4c:62:be:52:d5:75: 6b:bb:3f:a0:db:9a:43:e3:ef:b9:cd:72:bd:8a:9f: 98:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:94:13:39:BE:BC:EB:B1:39:A1:CA:FA:5C:A8:87:50:9D:21:68:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/3f54756d-92cf-32d2-9d67-667c450979c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 59:eb:1a:7c:86:0b:ab:88:f1:8b:98:5d:73:59:d0:90:c0:b5: cb:c6:a8:ff:bd:cd:db:40:4f:af:b4:8c:71:ad:da:7d:b1:f3: de:7c:70:63:df:43:b6:91:48:1d:eb:20:cd:ef:0e:a6:65:e8: 13:56:c1:14:33:7f:11:5c:1f:73:3d:58:d0:48:ed:db:f8:94: b2:48:f1:4f:d3:13:34:d9:93:69:a5:a1:23:9c:fa:74:3a:68: c3:4a:00:31:67:d0:d1:39:a3:e0:c4:6d:1b:79:0e:ce:89:de: e1:da:c8:44:cc:4c:da:4f:60:85:b5:30:a3:ee:a9:9b:e0:4e: 9a:bc:ef:6a:a0:0c:7c:38:8c:2a:4d:3a:e8:54:0a:16:0e:8e: 7e:0a:34:21:66:c2:ec:56:22:27:50:32:ab:0f:72:d2:8f:52: 89:18:5b:58:69:25:c0:ea:aa:9f:00:4b:06:23:2b:5d:0b:a8: af:ff:da:60:88:72:d4:ac:97:66:e3:41:73:60:1f:05:4d:08: 56:76:f4:53:e1:e2:34:b5:0d:7f:19:d5:d2:75:56:6f:6b:5b: d3:33:b0:ea:2a:0c:8d:71:bb:39:b0:7b:17:fb:28:3a:8a:9e: 27:29:5c:53:d3:e1:46:ab:ad:86:48:89:7d:58:38:e8:99:02: 53:2e:f5:e9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdgzNBEpyfFyjYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk M2I2ZDEzZmEtZDk0MS00MTk3LWIyNjgtNThhNWExODZkYzY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwoGNdoBPIfxG8ugO7pfJpucKDaGG+Jq3xS8/ euVZUMhFN5VXHRCxOKiGBe4A8566DjL5skd5gVj1uqeCy9iAeKMPr177blZgW0BN pAlf3yL/WpDeOFCh0k+LDFOU5MyZLf0WEnHc9M187SVh3UFIeF+KmvHT73QizLNb iX9+4BTbZy1E+T8UB2k/prIx/nPhQ9Tzt1MQP3uSA+km5S/gz+NftIfkKKei6e0J oGTkQBis5BueIqTjk4CdaUpTeQbuNoZv7WSBGcEny7DS8Xt1fp4wbybMmgo8PTuh y3b4pNudPY8Ws6puykRMYr5S1XVruz+g25pD4++5zXK9ip+YsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAaUEzm+vOuxOaHK+lyoh1CdIWieMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvM2Y1NDc1NmQtOTJjZi0z MmQyLTlkNjctNjY3YzQ1MDk3OWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFnrGnyGC6uI8YuYXXNZ0JDAtcvGqP+9zdtAT6+0jHGt2n2x8958cGPf Q7aRSB3rIM3vDqZl6BNWwRQzfxFcH3M9WNBI7dv4lLJI8U/TEzTZk2mloSOc+nQ6 aMNKADFn0NE5o+DEbRt5Ds6J3uHayETMTNpPYIW1MKPuqZvgTpq872qgDHw4jCpN OuhUChYOjn4KNCFmwuxWIidQMqsPctKPUokYW1hpJcDqqp8ASwYjK10LqK//2mCI ctSsl2bjQXNgHwVNCFZ29FPh4jS1DX8Z1dJ1Vm9rW9MzsOoqDI1xuzmwexf7KDqK nicpXFPT4UarrYZIiX1YOOiZAlMu9ek= -----END CERTIFICATE-----Generated at Wed Apr 30 03:36:04 2025 by rpki-client