$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa File: 437c7491-acf1-3988-ad8f-3d1717c41cc3.roa (raw, json) Hash identifier: PxGBuSTNf+8IPzvx+q78+8MTj2fqrjkge05KajDfWKo= Subject key identifier: 86:D7:FD:AE:67:64:AD:99:18:77:B5:48:4D:91:EF:72:AA:8A:68:45 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D16340FBF88D2C5BE3C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.53.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d1:63:40:fb:f8:8d:2c:5b:e3:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=71dfb667-d5da-47bd-981a-210f22c6eb73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:40:19:2b:b6:39:ca:63:84:6c:ac:44:b1:22: 7a:9a:f0:bb:86:0d:84:54:f7:70:16:f3:a2:24:ba: 59:c5:43:d0:fb:36:f9:bc:f6:91:e0:69:32:b3:7c: 21:b9:9f:31:bb:39:90:8d:4b:ab:82:1e:c1:0c:90: 97:7c:60:fc:89:43:b6:cd:57:46:a5:a6:df:1e:ca: c0:16:b7:23:e6:76:df:ea:03:ef:0b:6b:f0:5d:89: 9d:06:fb:2d:5d:4e:ce:75:79:ff:60:8b:75:ed:0e: 96:62:61:f2:16:a5:24:8b:fd:d2:9e:be:c4:84:8c: 7e:ae:1e:bc:36:19:ab:47:33:8d:c8:ca:0f:13:57: 5a:89:84:e7:db:af:f8:ef:a5:96:a3:99:0c:ee:69: 3e:96:07:b3:f0:79:e0:99:6f:d1:44:0c:3a:16:3f: 0c:39:b2:2b:bd:18:f4:c2:10:8f:a5:27:21:75:fb: 68:de:68:77:de:4a:7d:aa:8a:77:6d:06:d0:16:9e: 9e:51:ae:c9:99:89:a6:af:bc:48:2d:a4:31:d7:1f: 8d:bc:f1:f5:ad:f8:98:cb:19:59:5b:24:08:e4:23: e1:01:54:33:9a:95:0d:36:8d:39:a4:0c:49:79:b1: bb:e6:7e:9a:bb:35:ed:d1:87:0f:64:d6:99:2f:5b: ec:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:D7:FD:AE:67:64:AD:99:18:77:B5:48:4D:91:EF:72:AA:8A:68:45 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/437c7491-acf1-3988-ad8f-3d1717c41cc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:52:10:94:bd:5c:39:f5:bd:d2:f4:7a:7e:44:dc:e4:07:d6: 68:d4:1d:35:73:41:93:bd:0c:dd:ab:66:49:85:ea:f2:76:2f: ff:88:97:9d:15:f8:a5:72:cb:c6:2e:af:14:e7:78:cd:bf:8e: ba:77:35:0b:7f:de:c4:b5:48:d2:9c:16:35:c2:b5:05:ea:a7: 63:9f:2f:94:74:d9:ff:2f:3d:e7:ba:15:48:59:d5:3c:50:e7: 14:3f:70:35:9a:c3:4b:1e:b6:42:d8:19:2a:fa:73:2e:e0:b1: 68:06:fd:80:84:0d:81:76:af:d4:d5:6a:28:74:ba:bb:ce:69: 76:94:4c:9c:24:48:cf:38:f9:38:a1:e0:78:c3:61:43:96:11: a1:e8:9c:0b:1f:7e:22:6e:dc:38:cf:98:1d:a7:2c:0c:f6:43: b1:84:f0:5e:f9:6e:f5:c5:9b:1b:54:32:ba:f6:27:b2:4b:fa: e2:cb:a9:78:29:f1:2a:88:ae:51:c8:39:f7:1e:c0:0f:c5:61: fd:a3:b1:78:2d:0c:f1:da:7a:53:c3:16:c4:ba:d0:08:48:00: 20:bd:e9:84:be:a5:f1:4d:59:dc:d3:81:94:0e:a4:db:29:0e: 1a:1a:be:e5:1c:c4:d8:fa:a8:d3:f9:07:9a:85:20:f8:5a:8a: 53:d6:9a:b5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdFjQPv4jSxb48AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NzFkZmI2NjctZDVkYS00N2JkLTk4MWEtMjEwZjIyYzZlYjczMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkAZK7Y5ymOEbKxEsSJ6mvC7hg2EVPdwFvOi JLpZxUPQ+zb5vPaR4Gkys3whuZ8xuzmQjUurgh7BDJCXfGD8iUO2zVdGpabfHsrA Frcj5nbf6gPvC2vwXYmdBvstXU7OdXn/YIt17Q6WYmHyFqUki/3Snr7EhIx+rh68 NhmrRzONyMoPE1daiYTn26/476WWo5kM7mk+lgez8HngmW/RRAw6Fj8MObIrvRj0 whCPpSchdfto3mh33kp9qop3bQbQFp6eUa7JmYmmr7xILaQx1x+NvPH1rfiYyxlZ WyQI5CPhAVQzmpUNNo05pAxJebG75n6auzXt0YcPZNaZL1vsUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIbX/a5nZK2ZGHe1SE2R73KqimhFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNDM3Yzc0OTEtYWNmMS0z OTg4LWFkOGYtM2QxNzE3YzQxY2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDWAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhSEJS9XDn1vdL0en5E3OQH1mjUHTVzQZO9DN2rZkmF6vJ2L/+Il50V +KVyy8YurxTneM2/jrp3NQt/3sS1SNKcFjXCtQXqp2OfL5R02f8vPee6FUhZ1TxQ 5xQ/cDWaw0setkLYGSr6cy7gsWgG/YCEDYF2r9TVaih0urvOaXaUTJwkSM84+Tih 4HjDYUOWEaHonAsffiJu3DjPmB2nLAz2Q7GE8F75bvXFmxtUMrr2J7JL+uLLqXgp 8SqIrlHIOfcewA/FYf2jsXgtDPHaelPDFsS60AhIACC96YS+pfFNWdzTgZQOpNsp DhoavuUcxNj6qNP5B5qFIPhailPWmrU= -----END CERTIFICATE-----Generated at Tue Apr 29 09:24:09 2025 by rpki-client