$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa File: 8baccbe7-1913-3453-9a69-a902ed035ba8.roa (raw, json) Hash identifier: Q4DF+wUV/B/h8u5S0AjzprHM4MUmFKOPh8s+kPUBh0k= Subject key identifier: A5:2D:33:90:F5:38:BD:BD:78:3C:E4:D8:B0:8B:0D:09:DD:EE:DE:42 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D453233CDBB5F0BD1640 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.47.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d4:53:23:3c:db:b5:f0:bd:16:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=ecfa0467-3538-4dcf-b67d-edec86d6089c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:13:73:9a:5e:3a:6c:bb:33:e3:5d:e7:b3:e9: 53:18:0f:5b:8d:1a:a6:e3:1b:81:84:62:5b:a8:4a: 06:89:3e:90:43:a1:12:96:43:03:b4:41:12:ef:8b: ef:27:ca:4d:fb:f5:4b:dc:60:c5:44:e3:27:f5:7b: c6:7c:0d:fa:54:2b:6d:52:aa:cc:0d:28:ed:3c:53: 2c:8d:04:32:69:bc:2d:96:bf:ec:9c:07:91:f8:3c: 48:9f:4e:50:e8:67:f8:34:fb:59:52:fb:65:1c:a5: e2:60:2c:19:4b:bf:9f:fe:e0:20:14:93:08:60:22: 5c:09:3b:52:fb:eb:1a:b1:1c:c4:e4:1f:3a:0f:aa: b2:54:ad:f5:ad:b5:03:4e:62:81:11:cc:99:e9:ee: bd:0e:77:2e:a8:44:5a:16:20:64:0a:ae:13:6e:98: ea:82:13:ff:4c:cf:ab:5e:3a:c9:de:13:55:39:1b: f0:9f:3c:17:1b:d2:c9:55:3f:40:fc:70:56:44:c7: 70:5b:ad:b4:d4:82:39:4f:c4:bf:85:6d:47:c5:fe: 3a:cd:76:a3:46:3e:01:3e:41:0e:6b:e2:e3:47:58: cf:8e:2c:e0:b9:1a:37:98:1a:e2:d7:de:72:08:e7: ce:24:81:01:41:71:55:36:69:fe:80:a1:06:65:1e: 32:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:2D:33:90:F5:38:BD:BD:78:3C:E4:D8:B0:8B:0D:09:DD:EE:DE:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/8baccbe7-1913-3453-9a69-a902ed035ba8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 36:66:8c:25:f0:09:cc:a4:37:66:3c:a3:75:e1:b5:b6:90:4b: ce:b6:ad:a8:60:a6:04:aa:02:e2:06:08:a3:66:11:5f:11:81: 97:d6:86:eb:7f:5e:06:16:cd:a1:80:d2:27:42:c1:0a:be:87: 16:1e:af:85:ec:82:e5:2d:74:cf:cc:4d:f6:9e:c8:7f:53:3b: 29:d6:77:5f:15:38:62:c5:6b:40:a4:39:56:e1:05:32:71:60: 75:9a:4a:51:e6:64:5f:91:ee:88:19:80:88:84:35:ed:3c:88: 58:cb:8a:f9:0b:2c:1e:c4:b7:05:07:29:47:29:32:1d:3a:7b: de:6d:fa:15:7a:76:f4:10:70:ea:ed:3b:8c:f4:00:2e:98:09: a8:1a:8d:29:be:97:14:2d:3e:cd:21:53:0d:54:8b:d2:40:75: a1:21:5d:da:22:ec:d0:cb:67:f7:57:8c:bc:10:07:21:3f:e7: df:47:d3:f2:c1:4c:4b:6e:ae:97:42:0e:88:d7:30:d1:bd:03: ff:0e:4f:7d:c7:02:50:45:7a:f6:8d:88:5a:31:eb:aa:55:b3: 44:3e:4c:9a:ac:fe:44:9d:c0:0c:63:19:b4:32:f0:b2:7e:5d: 15:f5:86:75:ef:29:58:f8:94:fe:c1:ba:3a:75:e4:a6:78:19: 37:53:a5:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdRTIzzbtfC9FkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWNmYTA0NjctMzUzOC00ZGNmLWI2N2QtZWRlYzg2ZDYwODljMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmxNzml46bLsz413ns+lTGA9bjRqm4xuBhGJb qEoGiT6QQ6ESlkMDtEES74vvJ8pN+/VL3GDFROMn9XvGfA36VCttUqrMDSjtPFMs jQQyabwtlr/snAeR+DxIn05Q6Gf4NPtZUvtlHKXiYCwZS7+f/uAgFJMIYCJcCTtS ++sasRzE5B86D6qyVK31rbUDTmKBEcyZ6e69DncuqERaFiBkCq4TbpjqghP/TM+r XjrJ3hNVORvwnzwXG9LJVT9A/HBWRMdwW6201II5T8S/hW1Hxf46zXajRj4BPkEO a+LjR1jPjizguRo3mBri195yCOfOJIEBQXFVNmn+gKEGZR4y8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKUtM5D1OL29eDzk2LCLDQnd7t5CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOGJhY2NiZTctMTkxMy0z NDUzLTlhNjktYTkwMmVkMDM1YmE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC+AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADZmjCXwCcykN2Y8o3XhtbaQS862rahgpgSqAuIGCKNmEV8RgZfWhut/ XgYWzaGA0idCwQq+hxYer4XsguUtdM/MTfaeyH9TOynWd18VOGLFa0CkOVbhBTJx YHWaSlHmZF+R7ogZgIiENe08iFjLivkLLB7EtwUHKUcpMh06e95t+hV6dvQQcOrt O4z0AC6YCagajSm+lxQtPs0hUw1Ui9JAdaEhXdoi7NDLZ/dXjLwQByE/599H0/LB TEturpdCDojXMNG9A/8OT33HAlBFevaNiFox66pVs0Q+TJqs/kSdwAxjGbQy8LJ+ XRX1hnXvKVj4lP7Bujp15KZ4GTdTpdQ= -----END CERTIFICATE-----Generated at Mon Apr 28 21:49:07 2025 by rpki-client