$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa File: c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa (raw, json) Hash identifier: 52oN7nfmTTMoriBhG6ii2Y5gI9FjZyW2kbJ9kAngx0Y= Subject key identifier: 56:ED:E1:F9:03:DF:94:BE:3A:96:01:2D:B8:EC:25:D6:B1:21:CB:59 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339C8D86580BADA8C4AE5F0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.32.96.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:c8:d8:65:80:ba:da:8c:4a:e5:f0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=b364ab26-9d75-40e0-8bd5-cf96871877ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:32:68:e5:00:91:2e:18:52:46:42:4d:1a:fc: 3b:56:f0:b9:ac:10:0f:74:f3:bd:73:8a:e0:01:af: 70:92:8a:cc:a3:87:76:57:d6:8f:69:4a:0e:37:ae: 4a:b7:a6:af:3f:38:25:b4:d1:a0:55:f8:0a:8b:40: ee:69:07:2c:c7:16:4e:0d:4b:c6:ca:a2:7c:7c:33: 99:6a:94:b6:a4:8a:00:5f:41:1a:80:bd:37:d8:e5: f8:82:f5:0a:57:14:e6:36:fc:7d:c1:bf:bb:6b:1f: a0:b5:76:e9:2f:aa:40:4d:ed:87:c6:27:80:71:ec: e5:95:0c:d4:29:b6:0a:e0:92:f5:dd:15:12:6a:4e: 22:80:91:25:39:de:79:1b:06:55:da:7c:7f:e4:47: 30:aa:c4:b6:da:2f:ce:7d:18:89:8d:23:49:9c:18: 72:9b:a7:13:09:3b:94:96:58:44:a7:3e:90:e2:62: a7:42:ef:3a:16:c0:b7:60:40:1e:55:a5:78:23:2b: 91:91:71:13:d0:0a:8c:0d:3b:70:e5:30:90:58:b1: 67:ff:73:84:d7:e4:b7:20:6b:84:20:3b:f7:81:0d: d3:00:0d:29:c5:63:6f:2a:ba:f5:21:86:de:76:fb: 67:3e:b8:42:61:fd:3f:4e:c7:7b:fd:30:12:bc:6a: 88:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:ED:E1:F9:03:DF:94:BE:3A:96:01:2D:B8:EC:25:D6:B1:21:CB:59 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/c49a928a-cb43-392e-8d6d-68e9dc73b3b3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.96.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:fa:bc:0e:f4:2a:63:30:8a:b3:96:63:fe:3d:81:e4:04:50: ae:3e:4b:7f:01:7f:4a:3b:34:73:59:ae:f2:77:a5:ab:79:da: f5:c8:5b:05:68:5e:a5:a8:7c:0a:5b:ee:02:fb:3e:25:e0:0a: 17:28:5f:fd:fb:55:e5:4c:89:9d:56:75:9e:76:86:0c:3c:a1: 6a:6d:01:6f:51:7e:0d:0a:be:d6:4a:ae:1e:18:7a:19:f0:61: ec:13:46:07:76:ed:76:d3:ac:e5:1e:7e:d6:d7:bc:15:7b:03: c8:4b:b8:18:49:c6:b9:17:5d:ff:dd:b8:48:ad:ec:c5:62:3a: 9d:bf:50:83:df:f9:a3:f1:be:ea:31:ee:83:0a:29:cd:c5:fa: ea:3d:3c:fc:4f:37:46:14:e6:47:b0:4c:f5:80:56:78:d2:53: 0e:f4:49:6d:54:2b:5b:74:c5:cc:7b:8d:14:d9:f1:c2:55:66: 4e:d3:e9:8b:2a:0c:fb:8d:f4:ff:04:9a:1e:54:3d:93:4a:9d: 02:42:b3:d3:e6:09:9f:9a:54:38:c4:e8:e6:32:ef:b8:26:ae: b9:be:42:14:5b:c0:2d:f0:43:f0:03:ec:16:7a:3d:fa:55:b9: 82:ce:8a:d2:aa:eb:57:8d:f1:61:98:12:bd:b7:7c:c9:02:8a: e7:96:f4:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOcjYZYC62oxK5fAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YjM2NGFiMjYtOWQ3NS00MGUwLThiZDUtY2Y5Njg3MTg3N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhDJo5QCRLhhSRkJNGvw7VvC5rBAPdPO9c4rg Aa9wkorMo4d2V9aPaUoON65Kt6avPzgltNGgVfgKi0DuaQcsxxZODUvGyqJ8fDOZ apS2pIoAX0EagL032OX4gvUKVxTmNvx9wb+7ax+gtXbpL6pATe2HxieAcezllQzU KbYK4JL13RUSak4igJElOd55GwZV2nx/5EcwqsS22i/OfRiJjSNJnBhym6cTCTuU llhEpz6Q4mKnQu86FsC3YEAeVaV4IyuRkXET0AqMDTtw5TCQWLFn/3OE1+S3IGuE IDv3gQ3TAA0pxWNvKrr1IYbedvtnPrhCYf0/Tsd7/TASvGqI2wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFbt4fkD35S+OpYBLbjsJdaxIctZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvYzQ5YTkyOGEtY2I0My0z OTJlLThkNmQtNjhlOWRjNzNiM2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCBgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFj6vA70KmMwirOWY/49geQEUK4+S38Bf0o7NHNZrvJ3pat52vXIWwVo XqWofApb7gL7PiXgChcoX/37VeVMiZ1WdZ52hgw8oWptAW9Rfg0KvtZKrh4Yehnw YewTRgd27XbTrOUeftbXvBV7A8hLuBhJxrkXXf/duEit7MViOp2/UIPf+aPxvuox 7oMKKc3F+uo9PPxPN0YU5kewTPWAVnjSUw70SW1UK1t0xcx7jRTZ8cJVZk7T6Ysq DPuN9P8Emh5UPZNKnQJCs9PmCZ+aVDjE6OYy77gmrrm+QhRbwC3wQ/AD7BZ6PfpV uYLOitKq61eN8WGYEr23fMkCiueW9LY= -----END CERTIFICATE-----Generated at Wed Apr 30 21:20:36 2025 by rpki-client