$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bd2b4d60-12cb-3a9f-baa6-b38d90aeebaf.roa File: bd2b4d60-12cb-3a9f-baa6-b38d90aeebaf.roa (raw, json) Hash identifier: jVLwTm+uMlCSmkEIiy8tEyvHkc8aDkzkAGxF5RGc54g= Subject key identifier: 96:30:7A:A8:57:8C:B8:A8:35:34:DA:B9:56:E4:1E:97:33:FE:AF:EE Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DD8FCA0597759CD8C400 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bd2b4d60-12cb-3a9f-baa6-b38d90aeebaf.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.63.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dd:8f:ca:05:97:75:9c:d8:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=a1df1d74-f9d3-41aa-8aeb-7285048dafba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:db:5e:1d:c2:38:08:e3:c5:14:3a:f4:a3:3a: e0:03:a4:38:56:7c:96:a2:8c:0f:5c:2b:fb:a3:f3: 2d:14:6f:66:0f:cf:1e:84:cf:73:70:c6:4f:0d:46: 6e:ce:1f:33:6c:24:ab:3b:8f:67:f4:b6:c7:1f:88: aa:91:92:45:95:bc:3f:f5:a0:69:02:7b:35:bd:6f: 28:23:df:1d:07:9b:e9:cd:32:37:10:7a:3d:ca:4a: 6d:db:4f:a8:e8:c9:51:30:0b:13:19:f3:23:d2:e1: c7:74:51:4f:7a:e4:4a:c6:b2:93:71:24:42:af:37: 0c:e9:33:e6:a6:46:cb:a8:db:5a:66:c3:53:02:bc: 23:a5:9f:a6:58:2a:08:20:ac:00:1d:bd:ac:95:40: 94:a7:7e:60:2b:9c:ca:fd:1f:ef:bc:16:1a:06:58: 8c:1b:36:c8:a9:e9:44:db:63:36:4c:d7:4f:9b:66: c8:2a:83:46:d3:38:35:34:c3:21:de:ba:aa:22:06: 82:42:98:4f:f3:b7:50:68:14:e2:8d:3d:af:6c:92: 9f:bd:8f:48:4d:a2:21:62:20:88:19:fe:2b:ac:03: 4c:6d:8f:a1:93:82:a7:2e:06:fd:9e:58:45:fe:c7: 7d:e4:ad:32:3e:9c:6e:f1:85:cb:73:b8:3c:12:23: e8:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:30:7A:A8:57:8C:B8:A8:35:34:DA:B9:56:E4:1E:97:33:FE:AF:EE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/bd2b4d60-12cb-3a9f-baa6-b38d90aeebaf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.63.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:01:a3:a4:90:3a:90:22:02:ef:b5:35:d7:24:a1:aa:f5:3e: cc:cf:bf:16:64:83:d8:18:f4:16:07:7d:f3:17:d1:91:a3:ba: 7a:78:88:e5:2e:98:90:be:53:ac:72:56:47:c5:c5:dd:58:94: 01:b4:bf:6b:c1:da:b1:c8:56:ec:f8:28:22:c5:2c:7d:03:ee: cb:d7:8a:bc:11:63:ce:f6:ed:b3:74:71:e1:cf:cc:f9:1a:5a: 05:8d:9e:59:ae:26:7a:28:05:23:c1:40:63:fe:78:96:ae:1d: de:6a:3b:e6:20:33:94:ba:9a:93:23:9e:9e:6b:3c:8f:3c:af: 54:9d:b2:dd:fb:86:0c:5d:e3:a9:9b:ac:13:df:4b:b5:45:55: 7b:30:f0:00:62:a0:52:e5:b4:9d:0d:6b:2e:b8:cd:ba:07:b6: f0:de:50:11:21:42:91:5e:d8:ba:75:3c:e4:07:d8:42:b1:92: 29:e7:64:47:47:b0:02:ce:13:b7:3e:f0:06:01:51:a2:67:97: 99:83:ef:f3:69:1b:bc:01:f9:0c:65:a8:d8:09:77:b3:9c:c9: cb:da:3c:99:2d:30:53:46:6c:4a:36:2d:5e:16:d3:60:d4:57: 39:9f:21:24:01:1e:bb:04:1f:35:d5:79:59:d3:91:00:d9:38: 5c:b3:1a:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd2PygWXdZzYxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YTFkZjFkNzQtZjlkMy00MWFhLThhZWItNzI4NTA0OGRhZmJhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNteHcI4COPFFDr0ozrgA6Q4VnyWoowPXCv7 o/MtFG9mD88ehM9zcMZPDUZuzh8zbCSrO49n9LbHH4iqkZJFlbw/9aBpAns1vW8o I98dB5vpzTI3EHo9ykpt20+o6MlRMAsTGfMj0uHHdFFPeuRKxrKTcSRCrzcM6TPm pkbLqNtaZsNTArwjpZ+mWCoIIKwAHb2slUCUp35gK5zK/R/vvBYaBliMGzbIqelE 22M2TNdPm2bIKoNG0zg1NMMh3rqqIgaCQphP87dQaBTijT2vbJKfvY9ITaIhYiCI Gf4rrANMbY+hk4KnLgb9nlhF/sd95K0yPpxu8YXLc7g8EiPoyQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJYweqhXjLioNTTauVbkHpcz/q/uMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYmQyYjRkNjAtMTJjYi0z YTlmLWJhYTYtYjM4ZDkwYWVlYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiD8AMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGcBo6SQOpAiAu+1Ndckoar1PszPvxZkg9gY9BYHffMX0ZGjunp4iOUu mJC+U6xyVkfFxd1YlAG0v2vB2rHIVuz4KCLFLH0D7svXirwRY8727bN0ceHPzPka WgWNnlmuJnooBSPBQGP+eJauHd5qO+YgM5S6mpMjnp5rPI88r1Sdst37hgxd46mb rBPfS7VFVXsw8ABioFLltJ0Nay64zboHtvDeUBEhQpFe2Lp1POQH2EKxkinnZEdH sALOE7c+8AYBUaJnl5mD7/NpG7wB+QxlqNgJd7OcycvaPJktMFNGbEo2LV4W02DU VzmfISQBHrsEHzXVeVnTkQDZOFyzGg8= -----END CERTIFICATE-----Generated at Mon Jun 16 20:49:21 2025 by rpki-client