$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa File: 85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa (raw, json) Hash identifier: BqYcO6EBPIM+x2oV911TuWi5Uzk/G/mQmyEENVuAt84= Subject key identifier: F9:CF:27:86:EE:09:AF:DD:E7:2C:F9:9C:73:99:34:82:AE:4D:27:DB Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D9879D032B0D0F6B2400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.35.192.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:87:9d:03:2b:0d:0f:6b:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=aa8c78d5-2bb2-4b89-8d0f-4ec40bfa2279 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:f7:f9:78:85:4e:a2:85:9b:a0:ae:19:53:f8: 0c:89:2a:f7:61:52:ac:b2:69:2b:ff:3c:6a:a9:ec: 5e:68:29:1f:dd:92:3d:72:5e:e4:bd:c4:88:50:bc: 3d:a7:91:23:ad:bb:92:57:6d:35:06:18:48:32:21: 0c:55:50:ce:b3:b6:a2:b0:50:e5:2b:79:5d:f5:96: 77:5b:b7:70:52:93:24:28:92:bc:06:88:06:d3:48: 6a:b6:8e:53:bb:f7:60:2e:7b:15:3d:f1:53:07:9e: c8:a6:60:f0:2f:7d:e3:df:dd:ad:13:4b:81:d8:c0: 20:c3:06:9e:cf:ec:0e:9c:40:27:64:b5:6c:cb:37: b7:62:fe:04:1a:89:ba:66:ae:84:a6:9f:50:82:0b: 49:c8:3d:a8:09:d5:54:9e:06:6a:ef:2c:63:8f:fd: ab:6d:8c:20:1d:76:ea:da:65:1d:83:cd:30:cb:88: 16:2a:c1:6d:0e:69:da:22:ec:03:bf:68:fd:70:f5: dd:3b:51:c1:f5:3a:22:7a:da:cd:9b:94:70:f3:46: 75:71:a7:9a:73:37:9e:92:57:ac:7b:22:74:c5:64: 16:f0:c7:d9:8f:7b:85:ff:c2:41:a5:a6:f4:75:65: ba:60:87:8f:72:c3:39:d2:42:95:68:0b:36:30:9b: d7:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:CF:27:86:EE:09:AF:DD:E7:2C:F9:9C:73:99:34:82:AE:4D:27:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/85518d6e-ecd0-388a-8a60-134ada0e2ae9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.35.192.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:79:fe:ea:a2:50:47:d2:18:1a:72:e1:39:37:27:f6:7d:10: 24:01:01:af:22:43:9b:8b:f1:d0:d4:59:7d:7b:84:23:14:e0: bf:4a:e0:97:38:1e:be:44:95:4f:01:36:5f:fa:45:de:9a:ad: 6f:e8:1f:94:fb:94:c9:bc:7b:a2:ea:39:3a:dc:e7:bf:4b:f8: 1b:89:5e:e2:30:cd:0a:2c:6b:cc:c8:cb:70:97:d6:46:4e:41: 06:5c:cd:2f:ce:82:e8:9f:7f:e9:72:43:9e:11:32:4f:74:61: c1:55:b0:4d:18:f0:f9:fe:70:02:68:03:29:be:83:3c:bb:62: d1:9d:d8:17:c6:b2:09:03:00:f2:42:07:0b:8c:db:9a:08:a1: 76:e7:4d:0f:b8:6a:16:42:e4:69:e1:59:5c:47:77:ab:f7:42: 78:f8:3d:29:28:8f:3a:c6:5d:50:1a:c9:e0:fc:fc:65:ac:6c: 84:22:df:22:ed:9c:48:20:cd:31:8f:fd:f2:85:49:aa:a4:ca: 3b:c0:b5:6f:6a:ef:59:68:f7:2f:72:09:28:c5:09:c5:eb:0c: 7b:ac:21:0e:ef:34:af:ba:fe:44:b4:dd:64:b1:59:bc:6b:c1: c6:8a:a6:87:e2:8e:fb:bf:2f:b6:da:06:a1:08:bf:0f:5a:29: 25:01:8f:6d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdmHnQMrDQ9rJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YWE4Yzc4ZDUtMmJiMi00Yjg5LThkMGYtNGVjNDBiZmEyMjc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjvf5eIVOooWboK4ZU/gMiSr3YVKssmkr/zxq qexeaCkf3ZI9cl7kvcSIULw9p5EjrbuSV201BhhIMiEMVVDOs7aisFDlK3ld9ZZ3 W7dwUpMkKJK8BogG00hqto5Tu/dgLnsVPfFTB57IpmDwL33j392tE0uB2MAgwwae z+wOnEAnZLVsyze3Yv4EGom6Zq6Epp9QggtJyD2oCdVUngZq7yxjj/2rbYwgHXbq 2mUdg80wy4gWKsFtDmnaIuwDv2j9cPXdO1HB9ToietrNm5Rw80Z1caeaczeekles eyJ0xWQW8MfZj3uF/8JBpab0dWW6YIePcsM50kKVaAs2MJvXpQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPnPJ4buCa/d5yz5nHOZNIKuTSfbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvODU1MThkNmUtZWNkMC0z ODhhLThhNjAtMTM0YWRhMGUyYWU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCPAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJJ5/uqiUEfSGBpy4Tk3J/Z9ECQBAa8iQ5uL8dDUWX17hCMU4L9K4Jc4 Hr5ElU8BNl/6Rd6arW/oH5T7lMm8e6LqOTrc579L+BuJXuIwzQosa8zIy3CX1kZO QQZczS/Oguiff+lyQ54RMk90YcFVsE0Y8Pn+cAJoAym+gzy7YtGd2BfGsgkDAPJC BwuM25oIoXbnTQ+4ahZC5GnhWVxHd6v3Qnj4PSkojzrGXVAayeD8/GWsbIQi3yLt nEggzTGP/fKFSaqkyjvAtW9q71lo9y9yCSjFCcXrDHusIQ7vNK+6/kS03WSxWbxr wcaKpofijvu/L7baBqEIvw9aKSUBj20= -----END CERTIFICATE-----Generated at Tue Apr 29 12:51:31 2025 by rpki-client