$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa File: a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa (raw, json) Hash identifier: X/VPI34ejZOp+kKA+xcNHUfGbPIOK1SvUrZvC64c9/Y= Subject key identifier: FF:82:A9:86:8C:79:18:64:B5:4A:CD:49:23:E2:87:5E:E2:43:C0:D3 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D9494F8BA9E57E23C380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.42.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:49:4f:8b:a9:e5:7e:23:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=503afec0-e454-4e5d-9091-3d4ed1f3f7d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5b:c3:b3:58:3b:a8:6a:8d:db:30:a1:2c:c8: 69:8c:17:64:5d:d9:b2:54:9a:d4:c4:24:89:7d:d4: 1c:b8:86:2a:cc:73:a3:f7:5a:5f:5a:8a:6a:cc:d3: 10:f9:dc:b8:89:c1:70:39:33:f5:a6:16:ae:53:72: 53:a6:75:63:57:53:37:29:6c:f7:f8:76:7c:8e:d7: 91:46:ea:3c:12:06:81:3a:97:a3:ae:e1:cb:e3:af: c6:f1:00:c3:13:98:0d:28:95:2b:3e:52:75:66:ac: d2:cd:26:41:26:67:7d:31:eb:99:d5:81:0d:6f:78: cc:dd:03:e5:c3:64:9f:cf:47:ee:80:c1:0a:3b:1b: 3b:a1:dc:65:3f:e4:56:9c:d1:24:c5:e8:e3:e0:92: de:f1:3e:27:82:11:e4:f1:05:e9:09:11:8c:d6:42: fe:5e:9f:7d:57:5f:c6:1d:7c:f5:f2:cc:f7:4c:1a: 69:04:79:bc:f2:25:e2:29:e6:31:26:c7:17:bc:6f: 9e:16:e7:9f:cd:8b:35:2f:98:9f:24:01:1b:a9:5f: ff:05:ae:e5:6b:dc:ae:60:f9:3e:5f:27:e3:65:f2: 81:08:9f:64:cc:c1:fa:60:a5:01:08:62:ed:34:c4: ff:9a:84:8f:ca:92:05:a9:71:cb:09:d2:bd:ca:37: e0:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:82:A9:86:8C:79:18:64:B5:4A:CD:49:23:E2:87:5E:E2:43:C0:D3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/a4c9fc1e-0d7d-3b3c-8443-64e1e8832d3b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.42.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 10:4a:0d:fb:b5:17:0d:24:1b:23:7a:84:81:20:ac:9c:73:44: b1:9e:38:b4:55:21:a4:b5:b4:a9:f9:ed:8e:f2:a1:43:46:22: 2b:3b:eb:a0:11:24:59:03:89:e4:bf:85:52:e2:c4:d0:fa:46: 49:9f:dd:6c:4a:e9:52:15:b9:d3:9b:a7:dc:57:7b:1d:1d:f2: 78:07:2e:90:5e:68:de:dc:c6:77:0a:33:79:56:34:ca:8f:2a: 59:37:74:f5:43:7b:8f:28:c9:84:e6:4e:03:89:58:14:b3:ce: 18:78:17:3c:e6:9f:dd:b9:c1:8a:2a:2e:8f:a8:3f:63:16:dc: d5:8d:53:f6:dc:a7:ca:ad:1c:fa:0e:86:20:c4:39:69:04:a0: 4f:56:34:60:a2:89:26:73:34:c2:10:47:77:c1:00:59:20:10: d6:e8:7b:1a:16:e9:b5:db:a1:cf:90:43:40:6b:b2:cc:59:29: 65:a1:bc:95:a0:e6:f1:47:58:38:bb:cd:be:b9:93:34:1e:6f: 9c:30:c8:8b:6b:57:26:2a:7f:f4:d6:ca:d5:eb:f2:6a:91:81: 0d:83:9e:ab:4c:6d:50:40:d2:bf:34:9c:2c:05:61:85:8f:8f: a1:6e:ba:ee:72:3d:8a:8a:c7:b4:8e:5a:d1:27:5c:54:ac:d8: 29:f7:44:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdlJT4up5X4jw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTAzYWZlYzAtZTQ1NC00ZTVkLTkwOTEtM2Q0ZWQxZjNmN2Q4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FvDs1g7qGqN2zChLMhpjBdkXdmyVJrUxCSJ fdQcuIYqzHOj91pfWopqzNMQ+dy4icFwOTP1phauU3JTpnVjV1M3KWz3+HZ8jteR Ruo8EgaBOpejruHL46/G8QDDE5gNKJUrPlJ1ZqzSzSZBJmd9MeuZ1YENb3jM3QPl w2Sfz0fugMEKOxs7odxlP+RWnNEkxejj4JLe8T4nghHk8QXpCRGM1kL+Xp99V1/G HXz18sz3TBppBHm88iXiKeYxJscXvG+eFuefzYs1L5ifJAEbqV//Ba7la9yuYPk+ XyfjZfKBCJ9kzMH6YKUBCGLtNMT/moSPypIFqXHLCdK9yjfgCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP+CqYaMeRhktUrNSSPih17iQ8DTMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYTRjOWZjMWUtMGQ3ZC0z YjNjLTg0NDMtNjRlMWU4ODMyZDNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiCoYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABBKDfu1Fw0kGyN6hIEgrJxzRLGeOLRVIaS1tKn57Y7yoUNGIis766AR JFkDieS/hVLixND6Rkmf3WxK6VIVudObp9xXex0d8ngHLpBeaN7cxncKM3lWNMqP Klk3dPVDe48oyYTmTgOJWBSzzhh4Fzzmn925wYoqLo+oP2MW3NWNU/bcp8qtHPoO hiDEOWkEoE9WNGCiiSZzNMIQR3fBAFkgENboexoW6bXboc+QQ0BrssxZKWWhvJWg 5vFHWDi7zb65kzQeb5wwyItrVyYqf/TWytXr8mqRgQ2DnqtMbVBA0r80nCwFYYWP j6Fuuu5yPYqKx7SOWtEnXFSs2Cn3RIc= -----END CERTIFICATE-----Generated at Mon Apr 28 22:53:28 2025 by rpki-client