$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa File: 4ab1410e-c41d-3b63-9e9b-64651e424f74.roa (raw, json) Hash identifier: Mj9foccQufolg9yaBVvWGyXj/LjjpeI4mEt4aQCutpE= Subject key identifier: 33:3C:B2:ED:63:E4:50:59:B8:74:82:0E:AE:69:49:9D:3E:11:0B:3F Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CB4C28C71EBA3CAE57C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.47.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cb:4c:28:c7:1e:ba:3c:ae:57:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=fb6aafbb-ee77-4c13-a72c-ad33829e30be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:32:44:7d:3a:d0:da:da:cc:ce:ea:9e:db:10: 30:dc:5d:b2:5c:c1:7c:5f:b7:91:7b:dd:78:c3:5b: 37:47:b5:5a:cf:48:a6:24:c8:0d:9e:55:c0:58:92: 78:50:27:bd:24:63:bd:90:93:d7:c2:11:84:e4:7c: 8f:e4:be:48:07:39:af:08:ec:3e:f3:d9:03:d2:3d: ff:8e:44:e5:7d:a6:45:44:d2:69:6d:8d:ec:f1:15: 8a:02:88:15:4e:f4:32:5d:06:a0:85:db:6c:ef:17: c5:af:fb:86:ef:98:ff:16:e9:cd:54:25:06:e2:56: f6:15:af:0e:7d:c9:d3:18:83:7a:7e:27:53:5a:15: d5:d2:69:70:a5:a6:65:00:b7:75:af:d4:c6:36:b3: 72:e1:94:45:27:41:e7:54:90:4a:cd:bc:6d:f5:e9: ff:10:ba:a6:cd:e2:8a:c3:bb:14:eb:3e:34:11:ad: 48:e8:f2:11:f3:89:fb:fc:04:2e:13:f5:45:12:9e: 80:97:37:e3:9f:b2:45:6b:da:2f:3a:78:77:22:26: 0d:d4:48:25:c9:0f:0b:56:af:5e:c1:73:f5:f2:b5: 73:ba:1e:f6:da:38:1b:87:2b:65:e4:39:73:b0:31: 4a:34:ee:eb:5c:dd:fe:75:e3:e1:0b:a0:3d:fd:f6: 03:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:3C:B2:ED:63:E4:50:59:B8:74:82:0E:AE:69:49:9D:3E:11:0B:3F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/4ab1410e-c41d-3b63-9e9b-64651e424f74.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a4:84:67:85:06:78:e2:55:d4:1d:61:c1:94:ee:ef:f0:15: ac:5a:46:fa:a8:2d:21:49:bb:5f:3e:2a:13:aa:83:fd:ad:b6: 79:76:35:e7:0b:ee:fc:5b:79:35:ee:61:8c:db:b2:e1:a4:e9: 7c:9b:ca:4e:ae:b9:26:22:ce:af:29:0b:be:d1:5b:91:7a:58: ae:10:3c:b5:65:49:07:ea:73:c2:ad:0d:13:53:bc:3f:ae:c4: 84:a0:3d:5d:be:d8:7e:5d:b4:a0:31:60:bb:f2:3d:04:58:4f: 84:24:ae:6b:4d:23:4b:54:2c:ff:0c:fa:75:ce:52:b4:3e:c1: 7d:82:06:5d:ab:91:cc:80:45:dd:d1:4b:b8:41:20:bd:ce:cf: 44:a4:37:98:8a:11:9e:c0:d0:1d:81:b5:f2:00:7d:da:62:58: ae:c4:38:b3:0d:07:dc:f9:fd:22:bf:31:19:46:d5:e4:4a:16: 13:0b:54:44:0b:45:32:d3:de:3e:54:64:87:97:d9:b1:78:7f: 71:b4:7f:48:89:a2:9a:cb:30:a6:70:e8:e8:dd:4f:5f:aa:e3: 7f:95:c9:73:fe:4e:9d:7e:35:ef:07:d2:3e:cf:df:30:1e:fd: 7b:26:66:07:1f:70:39:f5:70:08:b7:33:44:3d:a1:e8:14:eb: a0:84:db:1a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOctMKMceujyuV8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmI2YWFmYmItZWU3Ny00YzEzLWE3MmMtYWQzMzgyOWUzMGJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jJEfTrQ2trMzuqe2xAw3F2yXMF8X7eRe914 w1s3R7Vaz0imJMgNnlXAWJJ4UCe9JGO9kJPXwhGE5HyP5L5IBzmvCOw+89kD0j3/ jkTlfaZFRNJpbY3s8RWKAogVTvQyXQaghdts7xfFr/uG75j/FunNVCUG4lb2Fa8O fcnTGIN6fidTWhXV0mlwpaZlALd1r9TGNrNy4ZRFJ0HnVJBKzbxt9en/ELqmzeKK w7sU6z40Ea1I6PIR84n7/AQuE/VFEp6Alzfjn7JFa9ovOnh3IiYN1EglyQ8LVq9e wXP18rVzuh722jgbhytl5DlzsDFKNO7rXN3+dePhC6A9/fYDSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDM8su1j5FBZuHSCDq5pSZ0+EQs/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNGFiMTQxMGUtYzQxZC0z YjYzLTllOWItNjQ2NTFlNDI0Zjc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC/wMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESkhGeFBnjiVdQdYcGU7u/wFaxaRvqoLSFJu18+KhOqg/2ttnl2NecL 7vxbeTXuYYzbsuGk6Xybyk6uuSYizq8pC77RW5F6WK4QPLVlSQfqc8KtDRNTvD+u xISgPV2+2H5dtKAxYLvyPQRYT4QkrmtNI0tULP8M+nXOUrQ+wX2CBl2rkcyARd3R S7hBIL3Oz0SkN5iKEZ7A0B2BtfIAfdpiWK7EOLMNB9z5/SK/MRlG1eRKFhMLVEQL RTLT3j5UZIeX2bF4f3G0f0iJoprLMKZw6OjdT1+q43+VyXP+Tp1+Ne8H0j7P3zAe /XsmZgcfcDn1cAi3M0Q9oegU66CE2xo= -----END CERTIFICATE-----Generated at Tue Apr 29 09:23:07 2025 by rpki-client