$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa File: cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa (raw, json) Hash identifier: lOpayxDhxzhKAAmm8J0hKj96ZHjW9t0j1eyu43vFU70= Subject key identifier: F3:13:52:7C:E3:73:20:FD:78:39:B7:D7:9F:D9:79:CC:63:E0:30:0C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D91CD057A50452C5B270 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.32.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:1c:d0:57:a5:04:52:c5:b2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=040971ea-1712-4e7f-a7c8-31dd9d356f1f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:51:cf:d4:79:eb:83:e5:99:c7:bb:eb:5d:c3: 98:bf:21:53:a4:46:59:84:94:05:22:3a:39:89:37: 05:de:94:19:64:f5:6d:fc:be:d4:c5:0c:9f:3a:08: bc:fc:27:14:1b:dc:d7:6b:3c:00:ab:0c:eb:ad:83: 3b:da:91:b1:d7:05:06:92:93:5b:ca:bb:fd:e2:44: 18:c7:37:8e:10:77:97:a8:51:62:5b:02:06:2a:c6: 9b:c1:dd:bc:df:b4:c1:44:69:17:29:68:31:fa:f4: d4:0a:f8:a8:63:5f:d2:46:c8:e1:85:55:ec:4c:68: 3b:6a:5d:a8:29:4b:fa:1e:ae:a9:ea:47:7c:14:d3: 39:fe:06:9a:9f:de:b4:90:b9:e1:e3:ac:06:bc:2c: e8:31:36:c5:72:2d:27:56:a7:c8:96:ec:4b:0c:f1: eb:7d:7d:3c:10:f6:34:16:de:f4:58:4a:72:57:48: e5:56:01:b8:7d:f8:81:a0:b3:d8:af:ab:9d:5c:4d: 65:85:90:93:45:1a:77:01:fb:d4:f7:75:98:10:fb: 3a:f1:f1:14:90:93:b8:1c:35:d9:c7:5b:c7:c2:99: 72:45:25:bd:63:b5:fe:b0:94:1b:60:88:de:f1:85: 00:57:b0:09:b9:d7:1f:6a:f8:3c:57:0b:41:cc:93: f4:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:13:52:7C:E3:73:20:FD:78:39:B7:D7:9F:D9:79:CC:63:E0:30:0C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/cecc95c9-f1d1-342c-a2ff-3c03c32f838b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.16.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6c:20:18:f1:02:cb:2a:06:f2:21:8b:ae:cc:55:11:22:42:25: e1:0a:fa:36:21:bd:6b:15:4b:20:9f:09:9a:2f:b6:ca:63:c8: c3:71:25:d4:c8:8c:5a:96:1d:50:17:34:8f:73:00:f3:58:4a: f6:4f:9d:67:3e:24:ed:a4:c7:85:3a:f5:64:8c:87:b7:77:ad: 15:e1:af:e2:b5:ba:17:3b:1a:16:4c:c6:98:bd:aa:df:7c:6b: e7:91:39:9b:a6:38:e2:f5:9a:ff:e4:ce:39:50:76:8a:94:2a: 28:84:3c:43:26:31:c9:87:31:bf:fa:4b:63:11:44:8b:49:de: ec:fc:b0:fb:f4:06:cc:52:3a:5a:95:6a:30:8b:ca:9a:4f:1e: c5:13:1d:c4:78:fd:9d:86:3b:93:2f:fa:fe:6e:db:0e:99:e8: f5:26:10:ab:ea:ee:df:86:99:72:b2:df:51:bf:ec:98:ce:b4: 16:05:b8:5d:b8:f0:6d:fd:68:a5:aa:37:24:5a:65:c8:7a:a5: 69:55:38:06:e4:2b:90:37:7c:ca:ff:1a:d3:9f:59:cf:7e:4a: 7d:10:74:f4:68:4d:97:24:dd:7a:4c:dd:e4:51:a5:ad:fe:78: cd:1f:ba:f5:de:1f:a2:b0:9c:13:da:e0:bd:0a:0d:2e:19:c0: d1:a7:16:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdkc0FelBFLFsnAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MDQwOTcxZWEtMTcxMi00ZTdmLWE3YzgtMzFkZDlkMzU2ZjFmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFHP1Hnrg+WZx7vrXcOYvyFTpEZZhJQFIjo5 iTcF3pQZZPVt/L7UxQyfOgi8/CcUG9zXazwAqwzrrYM72pGx1wUGkpNbyrv94kQY xzeOEHeXqFFiWwIGKsabwd2837TBRGkXKWgx+vTUCvioY1/SRsjhhVXsTGg7al2o KUv6Hq6p6kd8FNM5/gaan960kLnh46wGvCzoMTbFci0nVqfIluxLDPHrfX08EPY0 Ft70WEpyV0jlVgG4ffiBoLPYr6udXE1lhZCTRRp3AfvU93WYEPs68fEUkJO4HDXZ x1vHwplyRSW9Y7X+sJQbYIje8YUAV7AJudcfavg8VwtBzJP0TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPMTUnzjcyD9eDm315/Zecxj4DAMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvY2VjYzk1YzktZjFkMS0z NDJjLWEyZmYtM2MwM2MzMmY4MzhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGwgGPECyyoG8iGLrsxVESJCJeEK+jYhvWsVSyCfCZovtspjyMNxJdTI jFqWHVAXNI9zAPNYSvZPnWc+JO2kx4U69WSMh7d3rRXhr+K1uhc7GhZMxpi9qt98 a+eROZumOOL1mv/kzjlQdoqUKiiEPEMmMcmHMb/6S2MRRItJ3uz8sPv0BsxSOlqV ajCLyppPHsUTHcR4/Z2GO5Mv+v5u2w6Z6PUmEKvq7t+GmXKy31G/7JjOtBYFuF24 8G39aKWqNyRaZch6pWlVOAbkK5A3fMr/GtOfWc9+Sn0QdPRoTZck3XpM3eRRpa3+ eM0fuvXeH6KwnBPa4L0KDS4ZwNGnFks= -----END CERTIFICATE-----Generated at Tue Apr 29 14:16:03 2025 by rpki-client