$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa File: 9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa (raw, json) Hash identifier: a22zr4rUGc+fAfp6XWOvldEfyP9W+QbZGioFYhIXeCs= Subject key identifier: D1:11:00:79:24:CF:2D:D8:2D:5E:59:4E:D5:7F:CF:77:16:5A:0A:E2 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D9C81E04083E0450A8E0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.37.64.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:c8:1e:04:08:3e:04:50:a8:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=607d68f8-d0e6-4930-ae51-4501f59f46a5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:29:c6:c0:d1:2a:80:88:af:ba:e2:f8:7c:23: a6:8c:f6:a9:6d:b4:a5:a0:11:3b:1a:d9:3e:b6:ab: 3a:6c:0f:5b:e9:2e:b3:f3:30:95:9b:b9:d7:b0:01: 7d:30:0e:87:eb:b1:c4:03:9c:29:25:68:a9:32:8a: 5b:b0:e2:e6:96:d5:f3:ad:52:0f:06:11:97:34:d6: 77:6f:39:70:2b:37:1a:c5:21:d8:f4:0f:0e:fa:15: a5:d2:44:f5:ef:7d:ce:cc:0a:d2:d9:e0:0f:1d:93: 10:9d:03:61:25:de:52:44:ba:c8:78:eb:03:5c:07: f1:b8:dc:89:87:46:87:68:5e:59:10:e0:7e:d4:0e: a7:63:d9:84:7d:da:fc:ba:26:aa:04:36:2f:6c:a1: 07:7d:63:81:a8:b7:9b:f6:24:b4:09:0f:c8:48:be: 6e:36:37:63:32:0d:30:05:b4:f0:34:87:58:c6:e7: 2e:e8:59:d9:be:74:1b:3d:c3:4e:83:34:05:52:9e: 22:6c:ef:92:70:f7:93:23:10:48:43:27:19:b0:68: 3a:8e:f5:48:85:10:23:8e:8e:38:6f:7a:d7:53:f5: 73:60:9c:11:14:ed:eb:94:a0:8f:3f:c0:5c:00:fd: c2:65:de:6c:9c:87:cf:cd:09:f9:ea:0e:ac:d6:00: 8d:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:11:00:79:24:CF:2D:D8:2D:5E:59:4E:D5:7F:CF:77:16:5A:0A:E2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/9310a4a6-96e3-39c0-aea8-fa4dc42d8f41.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.37.64.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 43:ae:fa:d0:a1:e4:8f:8a:e7:3f:98:40:be:90:f1:f5:dd:28: 0c:da:e0:5a:02:b3:ff:9a:16:a3:b3:c1:5a:f8:87:c0:b8:8c: 43:ad:fe:ca:a5:8b:59:31:9c:34:ad:94:20:b2:81:42:44:10: d1:e4:e1:3a:d2:71:f0:de:83:fa:99:96:c6:d6:a5:5a:c5:6f: 93:ef:8d:c7:4a:7e:68:89:cb:ce:ef:71:6f:a7:28:0a:d7:d6: c7:f4:9b:e5:e9:bf:29:d4:5c:bb:8b:38:36:4c:b2:17:5f:6a: 77:95:1e:8c:38:a4:7a:e7:b2:eb:d9:6c:d2:73:2e:d1:80:9e: ac:9d:da:fe:a1:1f:52:02:d2:4d:89:f2:ce:e5:81:82:c5:25: 96:88:c4:d6:0a:99:59:6f:30:f1:b1:54:81:a8:07:16:ac:b3: 51:13:29:84:59:1a:22:03:80:88:9a:a3:8d:ba:69:c4:ab:bc: f3:26:88:99:39:58:35:63:14:db:cc:a8:e7:53:71:b2:10:0c: d1:c9:24:c8:ae:d3:3d:c7:2f:22:d6:e0:4e:9d:cd:d2:bf:fb: e6:58:66:36:02:9d:42:8a:22:61:91:a3:19:db:48:3d:f7:b8: 37:f6:28:ce:ea:54:d2:49:0c:a1:f3:16:30:5a:f0:a1:9c:f6: c6:e7:8a:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdnIHgQIPgRQqOAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NjA3ZDY4ZjgtZDBlNi00OTMwLWFlNTEtNDUwMWY1OWY0NmE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlynGwNEqgIivuuL4fCOmjPapbbSloBE7Gtk+ tqs6bA9b6S6z8zCVm7nXsAF9MA6H67HEA5wpJWipMopbsOLmltXzrVIPBhGXNNZ3 bzlwKzcaxSHY9A8O+hWl0kT1733OzArS2eAPHZMQnQNhJd5SRLrIeOsDXAfxuNyJ h0aHaF5ZEOB+1A6nY9mEfdr8uiaqBDYvbKEHfWOBqLeb9iS0CQ/ISL5uNjdjMg0w BbTwNIdYxucu6FnZvnQbPcNOgzQFUp4ibO+ScPeTIxBIQycZsGg6jvVIhRAjjo44 b3rXU/VzYJwRFO3rlKCPP8BcAP3CZd5snIfPzQn56g6s1gCN6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNERAHkkzy3YLV5ZTtV/z3cWWgriMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTMxMGE0YTYtOTZlMy0z OWMwLWFlYTgtZmE0ZGM0MmQ4ZjQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCVAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEOu+tCh5I+K5z+YQL6Q8fXdKAza4FoCs/+aFqOzwVr4h8C4jEOt/sql i1kxnDStlCCygUJEENHk4TrScfDeg/qZlsbWpVrFb5PvjcdKfmiJy87vcW+nKArX 1sf0m+XpvynUXLuLODZMshdfaneVHow4pHrnsuvZbNJzLtGAnqyd2v6hH1IC0k2J 8s7lgYLFJZaIxNYKmVlvMPGxVIGoBxass1ETKYRZGiIDgIiao426acSrvPMmiJk5 WDVjFNvMqOdTcbIQDNHJJMiu0z3HLyLW4E6dzdK/++ZYZjYCnUKKImGRoxnbSD33 uDf2KM7qVNJJDKHzFjBa8KGc9sbnitw= -----END CERTIFICATE-----Generated at Tue Apr 29 06:37:16 2025 by rpki-client