$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa File: d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa (raw, json) Hash identifier: X5q4pPAKvyoMN8xMm3OGGPb3T/9ADirSL0saUCyrpgc= Subject key identifier: DA:31:46:5E:8B:B4:37:12:8B:E3:B0:42:09:C4:35:FE:4E:77:4B:D0 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CF3AD5145732138E9FD0 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.53.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cf:3a:d5:14:57:32:13:8e:9f:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=0690a864-8e7f-4c3a-9613-62256dd1c3e6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:3f:5e:00:ca:5a:38:11:8d:e5:94:1d:4d:b5: 10:54:b5:4d:02:16:42:0f:e0:93:0d:1f:75:88:8a: 11:b1:d8:48:f9:ea:58:15:7d:69:f8:3f:d7:28:a2: 14:46:8a:02:c5:51:db:ac:fa:7c:88:2f:39:59:ba: cf:da:0e:e5:1d:a1:50:c0:fe:25:cb:2c:3f:d1:a0: 6c:e5:3a:86:66:06:e9:9e:be:6e:c8:63:30:f7:c5: 12:49:a3:80:7d:06:e6:79:a0:c6:3b:d6:58:7c:ae: 7d:79:a2:e4:fd:d2:50:7b:de:6b:46:13:cc:94:74: 62:5a:da:72:da:07:d1:13:89:69:1a:00:ce:2a:d5: 84:82:fa:9a:99:7a:8a:93:96:be:33:e1:80:d4:bb: 8d:12:9a:55:09:7c:df:12:24:d8:7e:5c:24:1c:c0: d1:40:cf:d3:0d:73:10:ff:42:83:2b:6f:ac:30:5c: f3:04:5a:e6:d0:e0:6c:6b:ef:72:de:4a:b2:fa:a2: ce:a2:52:ad:0e:f9:a0:a9:31:6b:9d:54:de:5b:20: 58:eb:fd:64:76:a8:5c:33:21:83:49:72:aa:3f:bb: 37:fb:e8:6c:00:3a:62:b2:ba:a1:2c:95:59:f5:88: 9c:e6:e9:a5:b8:3e:d4:88:39:29:41:c4:58:de:e6: 75:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:31:46:5E:8B:B4:37:12:8B:E3:B0:42:09:C4:35:FE:4E:77:4B:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d734a8aa-d900-39cd-8237-58ac0d28e3c3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.53.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:94:f4:2e:b3:7b:5d:32:64:2d:eb:5b:a7:12:48:19:aa:61: 7d:fc:d2:23:5a:4b:d1:c4:bb:5a:12:c2:af:e7:14:10:af:d4: 43:08:eb:90:08:f9:0b:33:4f:fe:bb:43:b8:36:1a:8f:db:d9: 54:6a:8b:0c:24:d2:58:45:cc:d8:9d:b5:fb:1c:58:98:aa:94: f9:3b:d9:ac:8a:a2:03:be:6b:39:37:2f:89:3a:dd:ac:15:51: fb:88:ba:86:a2:77:7e:f4:6e:64:7b:f7:93:4a:dd:a9:b0:d6: 43:af:95:7c:84:d3:40:c0:b4:61:39:11:d6:a1:55:d9:1a:59: b4:bb:06:bf:84:3b:13:b1:8d:60:79:98:f0:08:c6:9c:59:dd: 2c:62:d6:74:47:44:c1:62:57:1c:fa:a6:ce:76:f6:e9:6d:56: 3c:cb:44:67:ed:22:ea:24:e3:2e:11:8a:99:ad:16:d3:c4:56: 1f:c1:a7:1d:70:a1:bc:e2:46:49:e4:51:e1:42:7c:0c:ad:41: ba:61:fb:73:b3:eb:f1:89:df:0b:1f:3e:c5:8a:86:bd:d5:c5: 0a:c1:76:c8:1b:ae:88:fe:98:2d:d5:30:6f:72:4f:f9:b4:5e: 8d:83:3b:3d:12:ab:03:e7:4b:09:66:f8:a2:63:21:ba:9c:0a: 7f:83:54:cb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc861RRXMhOOn9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MDY5MGE4NjQtOGU3Zi00YzNhLTk2MTMtNjIyNTZkZDFjM2U2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApz9eAMpaOBGN5ZQdTbUQVLVNAhZCD+CTDR91 iIoRsdhI+epYFX1p+D/XKKIURooCxVHbrPp8iC85WbrP2g7lHaFQwP4lyyw/0aBs 5TqGZgbpnr5uyGMw98USSaOAfQbmeaDGO9ZYfK59eaLk/dJQe95rRhPMlHRiWtpy 2gfRE4lpGgDOKtWEgvqamXqKk5a+M+GA1LuNEppVCXzfEiTYflwkHMDRQM/TDXMQ /0KDK2+sMFzzBFrm0OBsa+9y3kqy+qLOolKtDvmgqTFrnVTeWyBY6/1kdqhcMyGD SXKqP7s3++hsADpisrqhLJVZ9Yic5umluD7UiDkpQcRY3uZ1qQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNoxRl6LtDcSi+OwQgnENf5Od0vQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDczNGE4YWEtZDkwMC0z OWNkLTgyMzctNThhYzBkMjhlM2MzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDUwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFiU9C6ze10yZC3rW6cSSBmqYX380iNaS9HEu1oSwq/nFBCv1EMI65AI +QszT/67Q7g2Go/b2VRqiwwk0lhFzNidtfscWJiqlPk72ayKogO+azk3L4k63awV UfuIuoaid370bmR795NK3amw1kOvlXyE00DAtGE5EdahVdkaWbS7Br+EOxOxjWB5 mPAIxpxZ3Sxi1nRHRMFiVxz6ps529ultVjzLRGftIuok4y4RipmtFtPEVh/Bpx1w obziRknkUeFCfAytQbph+3Oz6/GJ3wsfPsWKhr3VxQrBdsgbroj+mC3VMG9yT/m0 Xo2DOz0SqwPnSwlm+KJjIbqcCn+DVMs= -----END CERTIFICATE-----Generated at Tue Apr 29 16:20:17 2025 by rpki-client