$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa File: 72af0589-5060-3a98-9b53-ea7be26f3c65.roa (raw, json) Hash identifier: rbNGmDfTqm8vMjD0BCSbGvQp73LvbzaKoc0c8ykEHd0= Subject key identifier: FE:34:26:65:76:F1:29:43:AE:A0:13:E6:CD:FB:AA:E7:8C:CC:0E:51 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CE70A2A86D6D4D0AA600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.35.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ce:70:a2:a8:6d:6d:4d:0a:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=d9e0270a-8064-45c1-96f6-f534a15efb8b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0b:cb:80:bc:56:73:92:f0:1b:4e:1e:51:32: ed:97:bf:a3:32:35:bc:f8:c3:1a:20:95:50:81:34: 40:25:b5:de:c8:16:bf:13:3a:ad:2c:59:ea:ee:08: 7b:c4:fb:ec:b7:34:a1:61:0e:79:67:8e:c1:c4:6c: 55:46:7a:77:5a:e9:66:d2:cd:d2:96:82:46:f0:c7: c8:a7:5d:01:1d:40:29:32:53:21:a5:15:5c:a1:27: e4:12:a0:25:03:78:b2:34:eb:63:ba:f2:a2:35:99: ac:3f:58:db:e8:b6:34:6a:f6:82:c3:10:b9:79:cc: 52:c9:89:60:16:32:f8:9e:dc:b2:3c:33:7e:e9:88: cf:2b:35:99:8d:26:0b:60:f9:54:e1:ec:9f:a0:31: f8:f1:dd:9a:a1:e5:f4:4b:44:fd:c8:07:78:e4:a7: 78:4b:b7:28:a1:e1:7e:69:18:1e:41:cc:5c:58:6b: 33:ee:3e:c1:31:2b:bf:9d:90:0d:01:fa:dd:b1:4c: 30:13:a0:21:a5:2f:8e:26:ab:b3:d9:79:4f:df:e4: c6:03:c3:54:53:c9:84:8f:2f:8b:ab:9a:7b:07:9e: 64:3d:c7:61:8a:51:c4:6b:1b:d1:a9:1f:31:e9:e0: 37:29:37:c4:a4:fe:08:57:ab:ae:cd:f4:29:5e:c5: 66:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:34:26:65:76:F1:29:43:AE:A0:13:E6:CD:FB:AA:E7:8C:CC:0E:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/72af0589-5060-3a98-9b53-ea7be26f3c65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:6f:a6:36:d8:79:46:a6:61:cd:43:2f:b3:92:5b:a4:8d:ce: ec:03:c3:fa:fb:fa:d7:df:ba:80:89:8c:72:bc:1d:84:8e:ee: f1:5d:d3:d4:b2:89:88:a8:38:b4:dd:e5:0a:a6:bd:ab:36:b5: 57:ae:d3:40:2f:41:8c:61:f6:26:e2:31:4a:90:b7:dc:10:d2: 20:da:eb:6e:10:76:f1:a3:b2:75:27:6e:30:f1:65:17:3f:d7: cc:25:e5:68:c2:21:61:5d:e9:4d:a1:5d:55:78:74:da:ed:fe: ce:5d:89:a0:05:d2:ac:b7:e0:2f:04:f7:ba:ae:75:2a:17:a8: da:6b:7e:96:8b:6e:f1:ae:39:1b:c1:3a:d9:74:b4:f4:ee:e6: d1:ae:5e:27:b3:00:53:15:dd:74:3f:d9:ff:2d:be:0d:9b:24: f2:f6:72:96:5e:69:75:4e:f3:f4:83:c3:53:96:da:38:96:aa: af:ec:c9:65:d3:99:2c:20:06:2e:16:cf:af:ed:d6:64:23:9d: 23:57:50:7d:c3:d5:0c:fb:f0:42:eb:79:27:49:b5:8e:84:c1: ec:c9:51:88:30:b7:e1:88:b1:90:72:0d:74:d5:19:ce:c1:57: 4a:7c:f6:1a:28:d9:f0:b5:e8:e0:05:c5:7f:ba:a0:f4:50:00: f4:18:11:17 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc5woqhtbU0KpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDllMDI3MGEtODA2NC00NWMxLTk2ZjYtZjUzNGExNWVmYjhiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxAvLgLxWc5LwG04eUTLtl7+jMjW8+MMaIJVQ gTRAJbXeyBa/EzqtLFnq7gh7xPvstzShYQ55Z47BxGxVRnp3Wulm0s3SloJG8MfI p10BHUApMlMhpRVcoSfkEqAlA3iyNOtjuvKiNZmsP1jb6LY0avaCwxC5ecxSyYlg FjL4ntyyPDN+6YjPKzWZjSYLYPlU4eyfoDH48d2aoeX0S0T9yAd45Kd4S7cooeF+ aRgeQcxcWGsz7j7BMSu/nZANAfrdsUwwE6AhpS+OJquz2XlP3+TGA8NUU8mEjy+L q5p7B55kPcdhilHEaxvRqR8x6eA3KTfEpP4IV6uuzfQpXsVmSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP40JmV28SlDrqAT5s37queMzA5RMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvNzJhZjA1ODktNTA2MC0z YTk4LTliNTMtZWE3YmUyNmYzYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZvpjbYeUamYc1DL7OSW6SNzuwDw/r7+tffuoCJjHK8HYSO7vFd09Sy iYioOLTd5Qqmvas2tVeu00AvQYxh9ibiMUqQt9wQ0iDa624QdvGjsnUnbjDxZRc/ 18wl5WjCIWFd6U2hXVV4dNrt/s5diaAF0qy34C8E97qudSoXqNprfpaLbvGuORvB Otl0tPTu5tGuXiezAFMV3XQ/2f8tvg2bJPL2cpZeaXVO8/SDw1OW2jiWqq/syWXT mSwgBi4Wz6/t1mQjnSNXUH3D1Qz78ELreSdJtY6EwezJUYgwt+GIsZByDXTVGc7B V0p89hoo2fC16OAFxX+6oPRQAPQYERc= -----END CERTIFICATE-----Generated at Tue Apr 29 09:42:34 2025 by rpki-client