$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa File: ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa (raw, json) Hash identifier: 6zq3CRMnfg5s1/gFDFCNYNViFDuqrYAeexYXUkEIxBA= Subject key identifier: 6E:F4:E5:23:B0:CE:C4:D7:05:8F:57:6F:5D:EB:C5:51:80:97:37:F6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D683AE6D7E4950753980 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.60.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 01 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d6:83:ae:6d:7e:49:50:75:39:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=958b55e1-4147-4ecb-8980-24b8b4b1ff21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:eb:48:01:60:e9:bb:40:78:ab:ef:40:25:ee: f5:d7:42:07:a5:db:b4:0f:83:50:e2:d2:e2:3c:e6: 92:9a:b8:e8:db:35:a4:c4:50:1d:84:4f:a4:0c:c6: 11:fd:80:11:86:cc:ea:11:7d:2d:05:bf:44:86:3f: 11:21:58:a5:35:67:0e:22:dd:9a:14:c5:5c:44:25: ff:6d:43:da:01:31:1b:33:eb:45:2f:dc:96:ba:b4: e8:70:e0:74:aa:60:d7:19:9b:09:3a:66:4e:60:d4: e4:c3:81:59:ec:e4:7e:25:80:8e:3a:02:33:d9:ce: 11:53:0b:0a:97:fa:c6:bc:e3:40:92:49:ed:68:51: e5:7a:4a:bf:34:26:3f:0f:af:da:69:e3:34:44:de: b6:20:83:a4:80:16:19:65:0a:f7:58:36:d2:93:de: 58:58:e4:02:14:68:7c:97:fc:4a:af:c9:9b:54:3f: 20:d0:91:d5:84:59:69:9a:d5:a4:39:32:96:68:fb: 6d:93:0b:05:9a:29:65:66:ea:17:59:ad:7e:dd:a7: 3f:50:93:1d:12:a4:6d:87:f1:01:58:42:71:6b:09: 9d:d1:9b:40:4e:3d:9e:71:82:6c:14:37:7d:d1:bb: 3a:51:32:8b:a4:6e:f5:0b:e9:fb:b2:de:d1:09:2a: 18:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:F4:E5:23:B0:CE:C4:D7:05:8F:57:6F:5D:EB:C5:51:80:97:37:F6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/ca9c00a9-0c14-352f-8ac9-def403bc3b3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:3e:e6:78:a4:0b:1f:27:4f:5a:42:98:8f:50:f3:21:71:7d: 67:80:ca:d3:f4:a5:8a:87:28:b9:66:dd:2d:b4:53:46:ee:d1: 76:95:10:bb:26:d2:66:02:1c:65:81:e2:62:21:1c:0c:c2:67: 65:44:b7:e4:19:cb:92:cb:dc:8b:fd:3c:6d:c4:c3:34:d5:20: 6d:ab:bb:9a:64:ff:1d:2d:32:31:b6:94:5c:75:c5:1d:d5:44: b5:c3:52:b1:1b:47:9d:d5:0c:25:a9:75:03:77:95:c2:6a:82: 0b:4f:4a:d8:1f:a5:62:76:d0:04:60:39:d3:69:4f:c7:72:f0: f0:80:98:c1:20:42:c9:dc:bc:79:e1:aa:cc:ef:32:f8:35:62: ea:d6:b8:7d:ee:96:de:d8:31:98:1a:72:ee:b2:cb:3e:26:dd: 42:a1:0c:26:37:43:a1:7e:d3:78:21:e6:dd:39:14:af:ff:dd: 0e:60:5a:e8:2a:68:ab:0b:44:6a:dd:7a:f1:4f:1f:60:89:2d: 1a:1c:78:09:58:26:82:bc:21:d7:8a:40:39:6c:43:9f:04:80: 0b:51:e8:09:e1:7e:87:8e:fc:c0:71:14:c2:93:96:9d:18:bb: ae:4d:21:a0:b8:bc:76:a5:94:bc:58:11:f2:b8:65:1a:03:46: 90:7d:b8:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdaDrm1+SVB1OYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk OTU4YjU1ZTEtNDE0Ny00ZWNiLTg5ODAtMjRiOGI0YjFmZjIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOtIAWDpu0B4q+9AJe7110IHpdu0D4NQ4tLi POaSmrjo2zWkxFAdhE+kDMYR/YARhszqEX0tBb9Ehj8RIVilNWcOIt2aFMVcRCX/ bUPaATEbM+tFL9yWurTocOB0qmDXGZsJOmZOYNTkw4FZ7OR+JYCOOgIz2c4RUwsK l/rGvONAkkntaFHlekq/NCY/D6/aaeM0RN62IIOkgBYZZQr3WDbSk95YWOQCFGh8 l/xKr8mbVD8g0JHVhFlpmtWkOTKWaPttkwsFmillZuoXWa1+3ac/UJMdEqRth/EB WEJxawmd0ZtATj2ecYJsFDd90bs6UTKLpG71C+n7st7RCSoYawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG705SOwzsTXBY9Xb13rxVGAlzf2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2E5YzAwYTktMGMxNC0z NTJmLThhYzktZGVmNDAzYmMzYjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDwwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADA+5nikCx8nT1pCmI9Q8yFxfWeAytP0pYqHKLlm3S20U0bu0XaVELsm 0mYCHGWB4mIhHAzCZ2VEt+QZy5LL3Iv9PG3EwzTVIG2ru5pk/x0tMjG2lFx1xR3V RLXDUrEbR53VDCWpdQN3lcJqggtPStgfpWJ20ARgOdNpT8dy8PCAmMEgQsncvHnh qszvMvg1YurWuH3ult7YMZgacu6yyz4m3UKhDCY3Q6F+03gh5t05FK//3Q5gWugq aKsLRGrdevFPH2CJLRoceAlYJoK8IdeKQDlsQ58EgAtR6AnhfoeO/MBxFMKTlp0Y u65NIaC4vHallLxYEfK4ZRoDRpB9uLc= -----END CERTIFICATE-----Generated at Wed Apr 30 00:10:59 2025 by rpki-client