$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa File: a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa (raw, json) Hash identifier: 1ffQHU3he90Q455N4nZtrEBAPid8DD2xjXeLynN40Fo= Subject key identifier: DB:28:B8:C7:F3:28:69:06:0D:AE:95:8D:D0:3C:57:44:3C:C9:A4:5B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DA233A31413CD3188F80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.49.240.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:da:23:3a:31:41:3c:d3:18:8f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=2cd75697-7fee-4ba3-93a0-d0cc8d54a6c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:86:8a:92:d4:d8:c3:45:95:31:1b:80:96:b3: 63:98:20:ac:ff:3d:f0:60:8f:18:13:2d:8f:96:2e: b8:8f:f3:4c:0c:5c:2d:ef:88:9e:08:03:84:a7:9f: e1:dc:67:01:69:93:9e:61:39:0c:bc:08:c6:44:7e: 81:9e:6b:d7:bd:0f:eb:92:80:d8:e5:a7:de:6f:0f: f0:f0:bf:cf:b1:9f:64:4f:28:a8:9d:ff:63:d9:31: 4f:63:4f:eb:28:a5:10:a3:8f:44:0b:73:dd:79:d3: ef:44:4c:13:e8:79:4c:1e:c7:cf:26:fc:28:13:e3: 56:02:2f:87:cc:09:a1:91:4e:ba:00:be:34:f8:43: f3:0f:34:f2:46:67:cb:74:48:52:86:25:15:ab:83: 89:86:fe:e9:5c:d4:45:37:ca:40:22:1f:da:d7:c3: 93:14:12:f8:dc:54:7c:04:cd:a1:9b:ca:84:29:98: 7d:33:35:27:02:07:7d:2f:f4:ce:8b:96:b9:55:fd: 6d:62:39:7d:6e:88:56:c7:8c:7b:08:2c:8f:91:5a: 8a:33:40:49:45:3e:ee:ac:17:27:45:ba:45:71:67: f2:58:af:04:d4:49:af:7c:35:05:ef:6a:b2:f5:1b: 51:9e:3a:f4:3f:fe:60:55:2f:d3:bd:83:5a:13:ce: f9:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DB:28:B8:C7:F3:28:69:06:0D:AE:95:8D:D0:3C:57:44:3C:C9:A4:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a3f536b2-f455-35c2-ba37-54a8ee9d66c7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.240.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:0e:72:fc:4e:e5:e0:d1:0e:65:58:54:07:cd:2a:41:d2:5b: d5:0e:45:78:45:04:f3:00:c7:10:cb:eb:74:83:1e:2e:62:d2: 00:ee:8d:bd:12:c0:4e:5b:c5:e8:7a:1a:86:36:1d:71:ac:84: d3:51:67:00:44:b5:00:ec:6e:c5:f8:d9:ac:e9:1b:48:18:ad: 52:6d:19:fc:3e:c1:44:33:73:22:a4:a2:f7:08:b3:d7:9a:ac: 3b:da:39:6a:62:06:09:d3:cf:d4:b1:ef:24:31:25:63:2a:33: 1a:d8:da:f4:c9:b1:41:58:ef:fb:a8:49:fc:c7:60:dc:5c:ab: 86:49:93:5e:2c:04:45:b8:84:c6:d2:ab:69:5e:b1:ce:05:29: f5:b6:7d:4b:b1:f4:99:f2:04:71:5e:de:78:a7:b0:8d:3a:46: 13:90:62:4a:d7:4f:dc:7c:68:12:3e:0f:f8:fa:09:ee:d9:4d: 05:91:2d:62:7e:d9:9b:66:e3:c3:60:7d:e9:2b:6a:91:46:10: 4f:0b:89:82:0e:31:8c:e6:01:13:24:7f:a3:3a:4d:e0:0b:31: 4f:39:0b:df:2d:18:68:69:55:18:8a:e6:a1:df:ec:8a:d6:60: dc:1c:f5:81:05:22:5f:a6:ed:d3:76:0c:a4:03:35:50:6d:c2: cb:fe:73:49 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdojOjFBPNMYj4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MmNkNzU2OTctN2ZlZS00YmEzLTkzYTAtZDBjYzhkNTRhNmM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhYaKktTYw0WVMRuAlrNjmCCs/z3wYI8YEy2P li64j/NMDFwt74ieCAOEp5/h3GcBaZOeYTkMvAjGRH6BnmvXvQ/rkoDY5afebw/w 8L/PsZ9kTyionf9j2TFPY0/rKKUQo49EC3PdedPvREwT6HlMHsfPJvwoE+NWAi+H zAmhkU66AL40+EPzDzTyRmfLdEhShiUVq4OJhv7pXNRFN8pAIh/a18OTFBL43FR8 BM2hm8qEKZh9MzUnAgd9L/TOi5a5Vf1tYjl9bohWx4x7CCyPkVqKM0BJRT7urBcn RbpFcWfyWK8E1EmvfDUF72qy9RtRnjr0P/5gVS/TvYNaE875/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNsouMfzKGkGDa6VjdA8V0Q8yaRbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTNmNTM2YjItZjQ1NS0z NWMyLWJhMzctNTRhOGVlOWQ2NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF0OcvxO5eDRDmVYVAfNKkHSW9UORXhFBPMAxxDL63SDHi5i0gDujb0S wE5bxeh6GoY2HXGshNNRZwBEtQDsbsX42azpG0gYrVJtGfw+wUQzcyKkovcIs9ea rDvaOWpiBgnTz9Sx7yQxJWMqMxrY2vTJsUFY7/uoSfzHYNxcq4ZJk14sBEW4hMbS q2lesc4FKfW2fUux9JnyBHFe3ninsI06RhOQYkrXT9x8aBI+D/j6Ce7ZTQWRLWJ+ 2Ztm48NgfekrapFGEE8LiYIOMYzmARMkf6M6TeALMU85C98tGGhpVRiK5qHf7IrW YNwc9YEFIl+m7dN2DKQDNVBtwsv+c0k= -----END CERTIFICATE-----Generated at Tue Apr 29 09:22:07 2025 by rpki-client