$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa File: 83b4f307-9071-37b9-a911-f53330a67a49.roa (raw, json) Hash identifier: 9qqcVjNjWiIBD6Rl3cPy4SV7MwHrKLaP6FY2l8TLImo= Subject key identifier: EF:16:D1:39:D1:6C:BA:1F:25:C4:03:5C:71:5B:A4:8B:F1:61:D0:7E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D6C17C8CC1FF832CE980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.62.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d6:c1:7c:8c:c1:ff:83:2c:e9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=f710cd19-21c5-43c8-a1ef-7a92ea8c5fc8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:f1:5a:27:f9:b2:65:af:c7:99:d4:09:a6:05: b0:e5:54:68:fa:67:1c:77:ea:08:e0:a9:93:14:8b: 3b:39:00:ed:0a:5b:98:f0:71:2a:46:37:da:ce:e7: 12:aa:c7:1d:ed:f4:b3:df:74:a5:d6:b9:3d:53:df: 6d:49:1e:f0:80:fc:a1:8a:6f:20:26:09:3a:a9:58: fb:b8:55:a7:41:12:64:73:c2:02:77:b5:93:85:7a: 0b:3f:4b:35:7d:01:cd:91:7d:9d:a5:8d:87:b9:56: ab:70:9a:22:5e:f6:ba:15:8f:7d:ab:cb:30:72:94: 68:ca:62:1f:81:00:9d:53:9e:87:08:4d:e8:06:30: f6:fb:80:c9:e5:3a:5f:71:30:7b:a3:8c:52:d5:2a: c1:96:43:0c:31:6a:d6:99:22:1b:f6:a3:ac:31:d4: 2a:0a:62:1a:d5:a8:1e:51:f6:67:4b:26:6d:2d:13: d6:ba:79:a1:8a:3f:d5:6f:d0:f8:44:90:e8:fe:9a: 58:f1:d6:72:04:eb:d4:8f:ee:5b:c2:be:83:d6:ed: 91:e0:54:57:d5:91:73:78:1c:a1:82:f2:85:0a:01: c3:be:87:60:3f:52:c8:d9:a0:63:49:07:6e:92:49: 5e:d9:d5:38:3a:fe:85:0c:1b:a0:0e:80:7f:0e:b3: 2d:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:16:D1:39:D1:6C:BA:1F:25:C4:03:5C:71:5B:A4:8B:F1:61:D0:7E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/83b4f307-9071-37b9-a911-f53330a67a49.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.62.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 55:9f:de:eb:6c:f8:55:3b:78:56:f7:66:43:b6:33:78:b5:73: 03:07:98:76:3b:da:98:a5:a6:56:8b:9b:82:f5:a1:49:e9:3b: d9:d2:1b:4e:cb:84:11:28:1c:5d:15:8f:e1:eb:ec:15:6f:b5: 88:55:59:f0:ec:ef:74:b2:2a:ac:78:75:5c:a4:d5:dd:bf:c1: aa:fc:75:50:69:9a:46:86:15:93:6d:c7:bf:10:ac:8f:31:45: c3:ce:87:c8:3a:90:94:44:00:27:34:6d:e8:4d:6e:ee:4f:7e: 35:98:0d:f6:8d:d6:f7:c0:ef:3d:56:cb:c6:aa:db:be:17:0b: 8e:15:78:e1:db:dd:7e:d1:06:2a:d9:1d:b7:1a:fc:78:a3:ef: 7b:70:a6:cd:87:83:dc:9a:7c:d2:f0:65:ad:12:28:80:07:ae: 0d:b5:a5:56:0e:1e:29:a8:5d:9f:0f:dd:63:d3:ed:cb:00:5a: f0:e5:0d:f3:8e:cc:dc:7f:fc:3c:a6:99:7e:45:48:a4:90:12: f5:a2:51:2e:37:60:37:43:a6:2e:ed:8d:df:db:41:12:23:4c: 27:fa:47:bc:f9:bf:ed:82:c1:77:0a:ef:ae:51:6a:ab:5f:0d: cf:be:b2:8e:9d:90:38:73:4b:53:07:43:92:09:bb:a6:f1:84: 0c:cd:fc:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdbBfIzB/4Ms6YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjcxMGNkMTktMjFjNS00M2M4LWExZWYtN2E5MmVhOGM1ZmM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfFaJ/myZa/HmdQJpgWw5VRo+mccd+oI4KmT FIs7OQDtCluY8HEqRjfazucSqscd7fSz33Sl1rk9U99tSR7wgPyhim8gJgk6qVj7 uFWnQRJkc8ICd7WThXoLP0s1fQHNkX2dpY2HuVarcJoiXva6FY99q8swcpRoymIf gQCdU56HCE3oBjD2+4DJ5TpfcTB7o4xS1SrBlkMMMWrWmSIb9qOsMdQqCmIa1age UfZnSyZtLRPWunmhij/Vb9D4RJDo/ppY8dZyBOvUj+5bwr6D1u2R4FRX1ZFzeByh gvKFCgHDvodgP1LI2aBjSQdukkle2dU4Ov6FDBugDoB/DrMt+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO8W0TnRbLofJcQDXHFbpIvxYdB+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODNiNGYzMDctOTA3MS0z N2I5LWE5MTEtZjUzMzMwYTY3YTQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD7AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFWf3uts+FU7eFb3ZkO2M3i1cwMHmHY72pilplaLm4L1oUnpO9nSG07L hBEoHF0Vj+Hr7BVvtYhVWfDs73SyKqx4dVyk1d2/war8dVBpmkaGFZNtx78QrI8x RcPOh8g6kJREACc0behNbu5PfjWYDfaN1vfA7z1Wy8aq274XC44VeOHb3X7RBirZ Hbca/Hij73twps2Hg9yafNLwZa0SKIAHrg21pVYOHimoXZ8P3WPT7csAWvDlDfOO zNx//DymmX5FSKSQEvWiUS43YDdDpi7tjd/bQRIjTCf6R7z5v+2CwXcK765Raqtf Dc++so6dkDhzS1MHQ5IJu6bxhAzN/GE= -----END CERTIFICATE-----Generated at Mon Apr 28 23:02:18 2025 by rpki-client