$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa File: dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa (raw, json) Hash identifier: VzVfgUqEsPrmjBjKVH4PFXXg4167T7w6pR4+yV7W8Ig= Subject key identifier: 3D:31:75:47:A9:4C:6D:5C:A9:B6:47:85:A3:7E:59:A6:4F:F4:E8:8E Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D9FC2A7BE5026AF1A600 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.55.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d9:fc:2a:7b:e5:02:6a:f1:a6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=13817e03-6d18-4960-84a7-936ff5c55db3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:07:37:bd:25:89:ae:44:ed:a1:e9:23:bc:ca: d8:53:26:df:a2:3e:f2:3f:6c:33:69:0b:64:78:8c: f4:fb:d5:9d:ec:32:7b:92:33:4a:04:cc:7e:33:0a: e7:95:ad:ca:51:ff:aa:90:ce:c0:e1:b6:ff:ef:88: c3:e7:b6:03:6f:8a:be:12:3b:38:92:9d:e2:76:e0: 37:3e:f1:dd:3a:59:db:f1:f5:cf:b0:23:9b:17:c9: d5:0b:6e:88:11:82:a7:7f:82:40:9c:e9:70:5f:e5: 8d:55:00:70:99:fc:7a:96:ec:2a:5c:8f:15:86:2b: 24:93:86:c1:be:fd:ac:06:7a:a4:3d:b8:2e:20:96: 64:46:cc:50:5c:8d:b1:6c:df:d3:26:bc:53:aa:82: e7:7d:b4:7d:2d:e4:20:25:25:1c:db:76:1a:0f:69: 2a:ad:38:50:45:1d:00:6f:4a:e3:3b:ea:cf:54:f3: 5f:b6:fa:c6:8c:b5:f3:66:cf:84:c6:c2:b2:ba:be: b7:04:9e:57:ce:f1:19:2e:9b:62:da:49:41:52:28: d9:be:54:13:12:b0:1f:c9:cb:e4:f5:42:60:67:b4: 67:69:7a:8f:42:62:05:1b:07:fd:f1:09:e7:7a:3c: 08:61:37:86:15:fb:02:75:f1:42:c5:df:c2:2d:36: c9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:31:75:47:A9:4C:6D:5C:A9:B6:47:85:A3:7E:59:A6:4F:F4:E8:8E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dc8e99a7-7ec7-38bb-a539-b383b62bf3a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.55.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3e:54:45:75:e3:94:83:78:23:a5:6e:e1:64:ba:bc:ff:51:cc: 2a:eb:79:68:9e:ce:ed:09:d3:f4:7a:7c:36:dd:81:c0:ac:25: ef:9f:09:49:b2:96:8e:bf:0d:db:09:3e:48:7d:7f:91:d9:79: ad:cf:2e:d6:3b:f4:b8:94:8d:9f:10:55:c3:74:f0:f4:a4:07: 41:3f:b1:7a:e7:ab:c2:77:6b:db:10:d6:49:76:94:88:bf:f2: b2:47:c4:19:99:56:8a:36:cd:8e:51:8e:f5:ba:37:a0:05:24: 97:82:24:68:13:a5:72:9d:28:ba:2b:a2:a4:b5:e6:c3:80:42: 31:d9:b4:8b:6c:dd:49:a1:de:2d:82:4f:54:95:be:7a:22:40: e3:d9:51:3c:ae:f1:1d:a8:27:88:52:15:9a:35:42:eb:ed:10: dd:1f:20:17:e6:90:02:7a:92:47:22:a1:ae:1c:39:48:f8:d8: 14:f5:4e:72:c7:31:a7:cd:ca:65:3c:d7:cb:35:64:16:9b:d1: 0f:a5:6e:d5:db:f2:a5:84:69:4c:5d:9e:0b:04:07:1d:6c:5e: 1b:91:cd:65:c2:47:01:78:ec:3b:88:18:4d:96:7f:79:91:59: 02:90:9a:b2:33:10:5c:32:00:83:e3:2a:c5:75:fa:c8:36:4e: 28:0e:8a:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdn8KnvlAmrxpgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MTM4MTdlMDMtNmQxOC00OTYwLTg0YTctOTM2ZmY1YzU1ZGIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAc3vSWJrkTtoekjvMrYUybfoj7yP2wzaQtk eIz0+9Wd7DJ7kjNKBMx+Mwrnla3KUf+qkM7A4bb/74jD57YDb4q+Ejs4kp3iduA3 PvHdOlnb8fXPsCObF8nVC26IEYKnf4JAnOlwX+WNVQBwmfx6luwqXI8Vhiskk4bB vv2sBnqkPbguIJZkRsxQXI2xbN/TJrxTqoLnfbR9LeQgJSUc23YaD2kqrThQRR0A b0rjO+rPVPNftvrGjLXzZs+ExsKyur63BJ5XzvEZLpti2klBUijZvlQTErAfycvk 9UJgZ7RnaXqPQmIFGwf98QnnejwIYTeGFfsCdfFCxd/CLTbJ7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD0xdUepTG1cqbZHhaN+WaZP9OiOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGM4ZTk5YTctN2VjNy0z OGJiLWE1MzktYjM4M2I2MmJmM2EwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDfgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD5URXXjlIN4I6Vu4WS6vP9RzCrreWiezu0J0/R6fDbdgcCsJe+fCUmy lo6/DdsJPkh9f5HZea3PLtY79LiUjZ8QVcN08PSkB0E/sXrnq8J3a9sQ1kl2lIi/ 8rJHxBmZVoo2zY5RjvW6N6AFJJeCJGgTpXKdKLoroqS15sOAQjHZtIts3Umh3i2C T1SVvnoiQOPZUTyu8R2oJ4hSFZo1QuvtEN0fIBfmkAJ6kkcioa4cOUj42BT1TnLH MafNymU818s1ZBab0Q+lbtXb8qWEaUxdngsEBx1sXhuRzWXCRwF47DuIGE2Wf3mR WQKQmrIzEFwyAIPjKsV1+sg2TigOip4= -----END CERTIFICATE-----Generated at Mon Apr 28 23:27:59 2025 by rpki-client