$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa File: 700f2905-7d1e-32d0-b5ea-3f478b44d476.roa (raw, json) Hash identifier: RaZ3+w/56kgIwT5kWvAXGEFD8S0jIuIGA6+xt5HwUAE= Subject key identifier: 24:88:BA:78:DB:9C:9E:70:C2:D0:D6:67:AB:1C:50:98:6A:FF:42:CC Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CF674C0A229255D8CD40 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.60.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cf:67:4c:0a:22:92:55:d8:cd:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=e7cf729f-c8d8-4c7a-befe-53e6698b672b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:56:35:80:3e:d7:8b:d0:8e:f6:96:1d:95:86: c0:c6:19:f2:58:71:64:85:c6:d5:ad:b2:84:99:90: 42:32:5c:19:53:ba:80:89:b4:70:48:49:0f:3a:23: bd:39:f4:05:da:ec:eb:be:91:d9:a0:a8:fb:f9:50: 82:f1:3b:4f:ed:91:09:4e:18:6e:f7:a7:77:52:d1: c4:d4:4a:3a:cc:67:c4:ed:62:c7:96:0f:7d:8a:7f: 37:35:b9:88:38:fe:ee:c6:2d:e0:34:9c:9e:b1:3f: 26:88:3c:58:28:82:9a:20:12:81:4b:fe:57:d0:e8: 9c:35:f1:30:0b:73:ab:72:ac:cc:9c:c1:cd:c6:01: 70:82:fe:1e:7f:f6:54:c9:81:e6:09:c5:1e:bf:39: 7e:5f:63:fa:a8:64:10:44:75:37:aa:00:6e:2c:0e: 02:7c:b9:bc:21:6d:a7:36:c7:5c:5a:e5:66:70:1a: 00:c8:a9:06:ba:30:f5:45:95:c4:6a:4d:15:23:cd: 6d:ab:2a:48:58:df:df:83:1a:b7:42:2e:24:0d:a1: a2:1f:d9:c7:cc:c7:ce:84:11:76:ce:d4:1e:41:8c: 41:66:55:0b:0e:2a:c0:37:df:0e:c7:be:78:dd:a3: 08:9b:ce:61:9c:58:06:5d:a1:b4:1a:6b:77:70:46: 4b:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:88:BA:78:DB:9C:9E:70:C2:D0:D6:67:AB:1C:50:98:6A:FF:42:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/700f2905-7d1e-32d0-b5ea-3f478b44d476.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 66:ad:7b:d9:c8:52:87:b6:56:bb:cc:69:05:22:c6:f8:6f:2d: c1:bc:f9:36:d4:05:d4:4d:71:09:5a:36:cb:b3:93:ef:94:cf: c0:a4:eb:9d:ef:e2:68:bd:1c:bf:e9:94:68:78:b4:04:a8:ab: 44:e9:87:eb:8d:c4:2d:70:d7:40:45:01:86:ee:81:a2:42:e7: 21:5e:8e:ff:66:0e:6f:98:a9:a5:df:c5:21:ce:29:08:71:f4: ef:f0:90:fd:d7:9f:b5:9b:6b:f6:3d:bb:e4:b9:7c:58:d4:d5: 96:9c:61:93:84:76:3e:2f:a9:7f:2b:7b:25:b9:65:4f:6f:66: 95:50:a4:d9:34:fa:e8:84:39:8b:f8:b4:ed:91:15:90:08:2a: 96:55:f6:b4:6f:90:3b:01:3d:51:c6:c4:5f:97:7a:a6:f2:dd: 47:c7:78:7a:fd:08:b8:e7:da:a0:bf:e2:ed:47:3e:51:b2:5c: 81:a1:bc:fb:22:ea:a7:16:3e:0b:a5:80:37:e8:59:4c:c1:f3: 05:f7:29:ad:a7:38:06:b0:8e:9e:46:bb:9b:85:1c:d0:88:56: 01:c8:16:31:54:74:da:cb:c5:eb:2d:f6:9c:3d:13:6e:ea:6d: 33:bb:bd:41:34:59:6e:3e:27:e8:44:16:d5:b0:7b:61:86:09: c8:5c:ea:b9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc9nTAoiklXYzUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZTdjZjcyOWYtYzhkOC00YzdhLWJlZmUtNTNlNjY5OGI2NzJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplY1gD7Xi9CO9pYdlYbAxhnyWHFkhcbVrbKE mZBCMlwZU7qAibRwSEkPOiO9OfQF2uzrvpHZoKj7+VCC8TtP7ZEJThhu96d3UtHE 1Eo6zGfE7WLHlg99in83NbmIOP7uxi3gNJyesT8miDxYKIKaIBKBS/5X0OicNfEw C3OrcqzMnMHNxgFwgv4ef/ZUyYHmCcUevzl+X2P6qGQQRHU3qgBuLA4CfLm8IW2n NsdcWuVmcBoAyKkGujD1RZXEak0VI81tqypIWN/fgxq3Qi4kDaGiH9nHzMfOhBF2 ztQeQYxBZlULDirAN98Ox7543aMIm85hnFgGXaG0Gmt3cEZLewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSIunjbnJ5wwtDWZ6scUJhq/0LMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzAwZjI5MDUtN2QxZS0z MmQwLWI1ZWEtM2Y0NzhiNDRkNDc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDywMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGate9nIUoe2VrvMaQUixvhvLcG8+TbUBdRNcQlaNsuzk++Uz8Ck653v 4mi9HL/plGh4tASoq0Tph+uNxC1w10BFAYbugaJC5yFejv9mDm+YqaXfxSHOKQhx 9O/wkP3Xn7Wba/Y9u+S5fFjU1ZacYZOEdj4vqX8reyW5ZU9vZpVQpNk0+uiEOYv4 tO2RFZAIKpZV9rRvkDsBPVHGxF+Xeqby3UfHeHr9CLjn2qC/4u1HPlGyXIGhvPsi 6qcWPgulgDfoWUzB8wX3Ka2nOAawjp5Gu5uFHNCIVgHIFjFUdNrLxest9pw9E27q bTO7vUE0WW4+J+hEFtWwe2GGCchc6rk= -----END CERTIFICATE-----Generated at Tue Apr 29 09:20:36 2025 by rpki-client