$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa File: b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa (raw, json) Hash identifier: +KITfMrmOD7YP2GKNaJAVsz3yOC288UckoQVoHpiaQQ= Subject key identifier: 32:B7:D0:93:CE:66:69:65:AD:C6:1A:24:C4:6F:28:AE:FD:B5:BD:49 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339C8C7A1528C174C85C200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.52.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:c8:c7:a1:52:8c:17:4c:85:c2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=eef4de48-b2c0-4106-b2c3-4de26e4e49c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:90:6a:ee:b3:57:7f:ea:16:67:6c:34:2c:6a: 97:26:8b:a7:48:de:1a:8f:63:15:a1:50:de:47:01: aa:17:09:7d:c9:77:f4:ac:54:b4:a5:3e:e3:1d:9a: 5b:d0:53:fe:f7:1e:42:44:cb:f1:5b:45:60:14:13: 50:7f:f1:53:08:11:03:5d:87:81:7c:21:e5:fd:a1: ca:6b:bf:21:a4:03:e6:d1:c6:c6:a0:33:b8:13:e2: 26:dc:c2:5e:93:2a:3f:8f:34:2e:25:ae:e7:df:99: 12:43:c3:d5:3e:c3:b1:b2:6b:66:a3:1d:f2:ac:0b: 09:75:50:0d:0f:f4:b5:e9:a4:7f:56:3e:d0:cd:b7: d8:42:88:80:e9:c3:83:5c:a5:e1:e1:17:54:31:e1: 18:e6:db:f2:1a:c0:4e:1b:20:b2:4e:16:a6:0a:2b: e1:1b:6a:e6:b8:8d:f5:b2:ac:a7:9a:b5:88:93:50: dc:30:ff:fd:1e:7c:7f:99:bf:c2:e4:57:3f:af:f8: 3c:c1:9a:1f:d9:5f:6c:25:ef:27:26:c6:25:24:e2: a1:39:35:7b:38:02:ab:31:6c:af:4b:9a:c7:c9:09: ce:4e:8d:46:1c:51:b5:74:dc:b5:52:4e:65:98:6e: 81:c8:43:e6:a0:29:09:e8:8f:32:29:08:57:39:87: 61:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:B7:D0:93:CE:66:69:65:AD:C6:1A:24:C4:6F:28:AE:FD:B5:BD:49 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/b28f5a57-c421-3cf0-9b2e-87e3c0ed446f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:30:18:ec:5b:09:56:ed:d9:d1:99:a9:5d:04:85:d0:1e:aa: 4e:60:8c:6a:7e:a9:27:f5:e3:29:93:28:a7:b4:03:fe:06:02: 64:31:4e:af:4e:4f:5b:6e:8f:78:07:24:b4:8d:5e:fd:48:db: 56:1e:5e:4a:dd:88:8b:fb:c8:b6:e3:4d:26:df:96:a1:16:bd: 4c:de:43:c5:d1:a4:27:4f:de:94:67:34:b7:88:87:13:b0:1d: dd:86:f9:9d:b6:63:f2:06:3f:1f:9f:39:1d:03:ea:ff:a0:12: 74:3a:ad:0f:86:83:6c:38:71:52:f1:13:cf:22:51:5f:29:82: b5:66:20:5e:bb:9d:3a:77:81:90:3a:ed:f1:6c:34:95:d7:41: 45:76:28:f3:7e:df:71:6e:16:a0:d2:2f:ef:b4:29:e4:d3:69: 91:d4:4c:9a:74:5d:0f:04:69:6c:25:03:77:93:52:51:94:a4: ac:ea:9e:07:21:22:c7:0f:78:33:81:19:89:4a:9e:8f:a9:6e: bc:4c:67:03:c0:f9:c3:7c:11:be:2d:8b:63:83:e2:ec:c7:37: 3d:66:08:0c:1d:73:83:29:78:b0:3c:81:eb:7d:64:f7:04:f2: 92:2a:a5:1d:90:0b:57:be:06:f3:a1:d9:cb:05:bc:51:25:9d: 5b:74:fc:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOcjHoVKMF0yFwgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZWVmNGRlNDgtYjJjMC00MTA2LWIyYzMtNGRlMjZlNGU0OWM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pBq7rNXf+oWZ2w0LGqXJounSN4aj2MVoVDe RwGqFwl9yXf0rFS0pT7jHZpb0FP+9x5CRMvxW0VgFBNQf/FTCBEDXYeBfCHl/aHK a78hpAPm0cbGoDO4E+Im3MJekyo/jzQuJa7n35kSQ8PVPsOxsmtmox3yrAsJdVAN D/S16aR/Vj7QzbfYQoiA6cODXKXh4RdUMeEY5tvyGsBOGyCyThamCivhG2rmuI31 sqynmrWIk1DcMP/9Hnx/mb/C5Fc/r/g8wZof2V9sJe8nJsYlJOKhOTV7OAKrMWyv S5rHyQnOTo1GHFG1dNy1Uk5lmG6ByEPmoCkJ6I8yKQhXOYdhLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDK30JPOZmllrcYaJMRvKK79tb1JMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYjI4ZjVhNTctYzQyMS0z Y2YwLTliMmUtODdlM2MwZWQ0NDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADswGOxbCVbt2dGZqV0EhdAeqk5gjGp+qSf14ymTKKe0A/4GAmQxTq9O T1tuj3gHJLSNXv1I21YeXkrdiIv7yLbjTSbflqEWvUzeQ8XRpCdP3pRnNLeIhxOw Hd2G+Z22Y/IGPx+fOR0D6v+gEnQ6rQ+Gg2w4cVLxE88iUV8pgrVmIF67nTp3gZA6 7fFsNJXXQUV2KPN+33FuFqDSL++0KeTTaZHUTJp0XQ8EaWwlA3eTUlGUpKzqngch IscPeDOBGYlKno+pbrxMZwPA+cN8Eb4ti2OD4uzHNz1mCAwdc4MpeLA8get9ZPcE 8pIqpR2QC1e+BvOh2csFvFElnVt0/GY= -----END CERTIFICATE-----Generated at Mon Apr 28 21:49:10 2025 by rpki-client