$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa File: c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa (raw, json) Hash identifier: Nfwohp+WR46EK7X66akKgcLGUa4itkadnqOROdq4eSU= Subject key identifier: EB:0F:59:70:BC:ED:C8:57:0C:88:3D:06:E9:8C:EF:4B:5F:48:9E:3D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CDB2587F76007BFE185C Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.47.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cd:b2:58:7f:76:00:7b:fe:18:5c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=ab5b9364-21a5-4508-b76b-f3db16123c64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:1f:54:69:df:42:a9:1d:e9:5b:da:88:5e:9a: f8:1e:e0:d8:5f:31:c5:51:8d:d6:b3:3f:a9:62:a3: a4:4c:18:b9:32:bf:bf:24:b2:25:b1:5c:1c:fc:71: 93:d6:c7:e8:31:68:d4:5a:b5:69:81:d4:e6:71:ee: 16:de:ad:82:86:ca:14:0c:c7:f8:32:07:ef:64:87: 06:ac:d6:7e:b0:10:a0:15:86:78:e9:3d:7c:d9:26: 7d:1f:bb:3c:22:48:9c:d3:3b:b4:12:dc:3d:a8:33: be:1c:ca:6b:26:6c:c4:63:c3:06:64:cd:c0:72:16: 61:5d:09:c5:1b:6b:44:a0:a4:19:17:32:d4:cb:80: 68:7a:81:0a:36:5a:4c:c2:bb:2b:b4:6b:42:40:4e: 91:3a:2f:3f:6b:2a:37:4a:bb:98:01:72:71:26:7d: 84:19:37:6c:c1:01:e4:8f:3d:e7:22:71:ce:66:06: f5:ba:9b:06:68:68:d0:d1:8d:7b:af:23:dc:e0:9a: c5:a5:81:65:72:83:7c:ea:7d:02:82:96:40:69:27: fb:d8:1d:24:ea:f7:3d:49:e7:49:44:4e:de:b7:75: 9c:26:1d:b9:3e:6e:e3:8a:1f:60:43:42:f5:0c:10: c9:dc:b1:f6:5f:71:7e:a6:77:25:94:3c:b9:b2:9c: dc:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0F:59:70:BC:ED:C8:57:0C:88:3D:06:E9:8C:EF:4B:5F:48:9E:3D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c2854c40-c6e9-3121-bb31-5b8d1ac7cdf8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.47.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:71:ed:8c:8f:94:e4:4f:38:b2:e6:4d:cd:67:1c:58:d1:98: f1:f1:5f:d6:f9:2d:94:bf:0b:72:3f:47:4b:cc:d9:7c:25:f1: cb:83:be:7e:01:10:b8:58:8b:5a:20:94:94:53:89:ed:0c:fc: f4:1b:f9:fa:d6:03:1f:3e:be:44:19:5f:1b:16:ae:63:7d:20: 60:a6:d5:96:b1:83:85:5a:43:14:ef:5a:15:44:3e:a2:29:5b: 66:8a:bb:64:87:6b:f3:c4:ac:2d:01:df:40:09:09:2d:d7:5b: 0a:5e:cc:9e:01:2b:e5:99:06:ce:86:36:7d:b4:92:ab:bd:d4: 44:6b:3b:3e:b4:d7:d6:be:4d:29:34:95:94:8c:8f:2b:de:1d: a5:83:ea:84:7b:cf:6b:fb:58:d8:36:10:5f:46:42:1c:74:65: 3b:2b:1b:da:ec:fd:7f:04:ca:ff:bf:4e:86:44:91:5b:7b:47: 46:b0:6c:4a:92:0f:51:72:b8:1f:66:d2:22:e7:f1:c0:c2:6a: ce:eb:14:29:b7:e4:0f:12:e3:ca:cc:9c:9a:65:f9:c3:2d:1c: 39:6e:50:a8:ed:66:55:1b:90:01:58:1e:fd:bf:a8:09:eb:ab: 4d:fb:26:25:8a:69:cf:99:98:6c:4d:6b:03:b4:ad:c5:f9:64: b6:ca:12:66 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc2yWH92AHv+GFwwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YWI1YjkzNjQtMjFhNS00NTA4LWI3NmItZjNkYjE2MTIzYzY0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlB9Uad9CqR3pW9qIXpr4HuDYXzHFUY3Wsz+p YqOkTBi5Mr+/JLIlsVwc/HGT1sfoMWjUWrVpgdTmce4W3q2ChsoUDMf4MgfvZIcG rNZ+sBCgFYZ46T182SZ9H7s8Ikic0zu0Etw9qDO+HMprJmzEY8MGZM3AchZhXQnF G2tEoKQZFzLUy4BoeoEKNlpMwrsrtGtCQE6ROi8/ayo3SruYAXJxJn2EGTdswQHk jz3nInHOZgb1upsGaGjQ0Y17ryPc4JrFpYFlcoN86n0CgpZAaSf72B0k6vc9SedJ RE7et3WcJh25Pm7jih9gQ0L1DBDJ3LH2X3F+pncllDy5spzcBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsPWXC87chXDIg9BumM70tfSJ49MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzI4NTRjNDAtYzZlOS0z MTIxLWJiMzEtNWI4ZDFhYzdjZGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiC+QMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEhx7YyPlORPOLLmTc1nHFjRmPHxX9b5LZS/C3I/R0vM2Xwl8cuDvn4B ELhYi1oglJRTie0M/PQb+frWAx8+vkQZXxsWrmN9IGCm1Zaxg4VaQxTvWhVEPqIp W2aKu2SHa/PErC0B30AJCS3XWwpezJ4BK+WZBs6GNn20kqu91ERrOz6019a+TSk0 lZSMjyveHaWD6oR7z2v7WNg2EF9GQhx0ZTsrG9rs/X8Eyv+/ToZEkVt7R0awbEqS D1FyuB9m0iLn8cDCas7rFCm35A8S48rMnJpl+cMtHDluUKjtZlUbkAFYHv2/qAnr q037JiWKac+ZmGxNawO0rcX5ZLbKEmY= -----END CERTIFICATE-----Generated at Tue Apr 29 12:47:57 2025 by rpki-client