$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa File: bc01ea38-f371-3faa-acac-14ea10689699.roa (raw, json) Hash identifier: v2GVW4HoOMMBzXl0htwtK9xdH+JExgHhGjak+U6lgUs= Subject key identifier: 0E:CC:01:1F:4E:B3:B7:7E:AD:F2:50:FA:94:26:3C:20:08:83:D5:D8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D42FE6AA9990FCBC33C0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.57.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d4:2f:e6:aa:99:90:fc:bc:33:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=bffafea9-2202-4990-b254-9e2e9f2e8324 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:72:d7:57:59:c2:c7:5c:2d:25:40:bb:01:6c: d7:f8:e6:7f:00:06:46:36:9d:16:3f:c8:3f:f0:9c: 7a:f2:db:e5:da:06:92:16:61:53:f5:5c:88:04:d3: e4:84:6b:3c:00:0b:7c:c0:e0:e4:61:61:ff:b4:30: 86:98:e7:97:f2:33:87:4b:75:90:89:f4:46:d6:bc: 19:09:32:4f:52:ff:a0:45:ae:02:60:2e:e0:24:f0: 46:e9:30:82:20:e5:ce:41:03:ed:69:40:67:e0:fc: e6:81:7b:5d:1e:a4:47:40:f9:23:76:ec:92:4c:fa: ac:00:b2:91:2b:35:a7:b6:7d:73:90:b4:49:85:83: 0c:f9:59:ad:60:03:0f:f6:c7:b8:09:86:da:cb:6d: b5:28:4c:02:95:92:49:07:5b:9e:e1:45:65:f4:b1: d6:c3:f2:36:20:08:b3:cb:64:52:75:e8:30:43:9f: 26:c1:8a:59:37:67:3b:a5:89:cb:ff:c1:6f:be:8e: e7:36:ed:01:ca:4f:28:18:41:84:56:75:be:7e:e5: 99:b0:23:37:eb:8f:eb:c8:f9:46:73:a3:e0:40:99: 9c:83:40:84:77:f9:78:1f:6c:2c:cb:fb:62:43:42: 28:0f:30:95:3a:83:80:14:45:ca:48:7b:9e:45:c5: 28:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:CC:01:1F:4E:B3:B7:7E:AD:F2:50:FA:94:26:3C:20:08:83:D5:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bc01ea38-f371-3faa-acac-14ea10689699.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.57.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:61:11:87:b7:25:12:12:d7:85:00:50:6f:0b:83:0d:1e:3b: b9:a6:69:47:c2:21:80:a2:30:19:84:ca:5f:f2:e0:f7:03:7b: 6a:94:00:69:60:f1:53:d4:79:25:c9:4f:83:b8:11:f3:22:73: 45:f2:9e:f2:11:6b:0c:9f:26:34:2a:9c:b0:ed:08:92:f8:77: 44:d0:d7:fa:16:b2:ad:fa:27:05:1a:dc:3b:7b:2e:7a:f5:59: 4c:95:45:90:8b:cc:d9:ff:76:b9:39:f1:cb:7c:d0:6f:0e:a1: b5:de:87:8c:72:ae:1d:a9:9d:98:2e:4b:58:a4:c9:20:cb:73: a9:c0:d8:39:82:e6:c9:09:1e:d5:7b:51:2f:1b:02:1f:3c:ba: b5:65:79:d4:70:1e:85:43:2a:d2:fe:3b:6a:0f:71:01:e5:73: e4:49:75:f6:43:62:1a:b3:60:a6:8f:59:f9:df:b8:03:43:d5: 49:db:03:8f:2a:99:5b:6f:c9:79:16:78:e4:e9:35:3d:1d:91: 64:df:78:b2:cd:ae:74:c1:06:22:0e:0d:e9:a1:f0:64:3e:a1: 97:45:28:5d:ef:9f:6e:a1:43:b2:70:50:b2:3c:af:5c:12:a2: cf:eb:02:be:7d:bd:1a:44:15:d8:46:c8:ad:0c:a9:08:a8:f1: f2:1d:85:d3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdQv5qqZkPy8M8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YmZmYWZlYTktMjIwMi00OTkwLWIyNTQtOWUyZTlmMmU4MzI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXLXV1nCx1wtJUC7AWzX+OZ/AAZGNp0WP8g/ 8Jx68tvl2gaSFmFT9VyIBNPkhGs8AAt8wODkYWH/tDCGmOeX8jOHS3WQifRG1rwZ CTJPUv+gRa4CYC7gJPBG6TCCIOXOQQPtaUBn4PzmgXtdHqRHQPkjduySTPqsALKR KzWntn1zkLRJhYMM+VmtYAMP9se4CYbay221KEwClZJJB1ue4UVl9LHWw/I2IAiz y2RSdegwQ58mwYpZN2c7pYnL/8Fvvo7nNu0Byk8oGEGEVnW+fuWZsCM364/ryPlG c6PgQJmcg0CEd/l4H2wsy/tiQ0IoDzCVOoOAFEXKSHueRcUo3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA7MAR9Os7d+rfJQ+pQmPCAIg9XYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmMwMWVhMzgtZjM3MS0z ZmFhLWFjYWMtMTRlYTEwNjg5Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDlwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEdhEYe3JRIS14UAUG8Lgw0eO7mmaUfCIYCiMBmEyl/y4PcDe2qUAGlg 8VPUeSXJT4O4EfMic0XynvIRawyfJjQqnLDtCJL4d0TQ1/oWsq36JwUa3Dt7Lnr1 WUyVRZCLzNn/drk58ct80G8OobXeh4xyrh2pnZguS1ikySDLc6nA2DmC5skJHtV7 US8bAh88urVledRwHoVDKtL+O2oPcQHlc+RJdfZDYhqzYKaPWfnfuAND1UnbA48q mVtvyXkWeOTpNT0dkWTfeLLNrnTBBiIODemh8GQ+oZdFKF3vn26hQ7JwULI8r1wS os/rAr59vRpEFdhGyK0MqQio8fIdhdM= -----END CERTIFICATE-----Generated at Tue Apr 29 09:32:54 2025 by rpki-client