$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa File: dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa (raw, json) Hash identifier: ULPahr5gwJBV3s3Fy3BgNOBHTDzLFEDZnDKXXAShs3g= Subject key identifier: FE:4C:FD:25:6B:21:CC:42:F1:A8:3A:E6:C4:93:58:61:8E:79:E6:7D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D1D6BCF283C707EC0F80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.34.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d1:d6:bc:f2:83:c7:07:ec:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=87c3dda0-7abe-43ff-8149-996701cce8c6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:89:57:8e:30:28:5d:9e:9e:9a:89:4e:14:33: 58:3e:f2:26:e2:b8:ae:27:d2:c2:38:fb:1e:ff:2a: 5b:e9:a2:dd:f6:6a:f2:db:cf:c0:18:1c:1b:de:c4: 46:a3:b6:63:b4:ba:17:1f:c8:51:65:54:28:44:1b: d4:c4:98:9f:c6:a1:91:d9:3d:4f:60:91:76:0c:b4: 60:38:71:26:bc:b7:14:ce:6d:4f:a4:6a:5f:88:cb: d8:2a:2f:58:a3:7b:05:26:8f:93:38:39:67:a5:8a: b9:80:94:0c:92:73:ad:aa:d8:29:35:09:d7:e5:99: 8b:70:0d:3a:20:d6:21:64:ae:86:e0:85:98:92:a2: ee:d8:3a:32:a3:7d:0e:82:0c:3f:1e:0a:42:4e:68: 9e:cc:d4:55:06:36:6b:ab:9e:c1:cc:eb:f1:d6:d7: a0:aa:94:3d:7f:2a:6a:d2:5c:36:20:97:48:c4:99: 0b:8f:bd:2a:d8:6c:77:ac:dd:fa:d1:3a:ba:f5:c3: 3e:e1:92:6c:7c:c7:e3:9a:c3:96:43:ae:28:74:44: f1:43:54:61:2f:fe:de:d0:4f:9c:63:5f:33:8d:45: da:ef:c1:31:74:6c:8b:57:e5:4c:8c:5d:92:18:7d: 73:bd:54:5a:71:45:e5:dc:f3:0d:f7:c1:60:09:c0: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:4C:FD:25:6B:21:CC:42:F1:A8:3A:E6:C4:93:58:61:8E:79:E6:7D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dcae33fd-e11c-3f20-b0fb-871292b97aa8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.34.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:56:85:4f:20:41:7b:08:f3:b3:4c:0f:c1:ad:a7:32:3f:01: 90:2b:6c:2b:ba:92:b5:8b:47:ab:b7:30:08:e1:16:8e:e7:c7: be:bc:b3:5a:52:c9:5f:8e:ae:81:66:90:8a:f5:5d:b1:bc:aa: 73:1b:71:70:de:38:7d:90:54:c7:e6:9d:17:8e:5b:58:d8:26: 43:75:b5:d7:2d:60:97:f5:20:38:c7:cf:3d:14:6d:af:bc:11: a4:d0:9c:ae:07:a4:4d:50:82:ef:41:d8:d1:a6:ad:65:2b:39: cd:c1:a0:17:2a:41:78:25:50:3b:83:fd:46:5c:5b:fc:6a:84: ef:ec:5c:9a:ab:0b:7b:64:24:9a:a3:af:06:3a:5b:0e:50:1f: 04:1f:6e:c5:d4:97:b5:76:f0:8d:de:74:50:a0:a3:b9:1d:c6: e8:cc:55:44:bf:16:47:9f:63:9d:78:86:09:50:35:d6:f0:18: 13:a5:4f:db:ad:a7:07:8a:8f:9c:c7:0b:35:33:92:a6:13:19: 93:f8:9d:d7:72:d4:55:f3:0c:04:42:f9:7c:d5:b1:38:2d:a6: 0a:c1:0f:b0:82:ea:98:e9:66:0e:c8:9e:9b:6c:71:ab:31:b9: 0e:70:5e:9b:d3:13:8c:e4:ca:6c:6c:41:c4:ca:8c:a9:7f:7c: 97:bf:79:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdHWvPKDxwfsD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ODdjM2RkYTAtN2FiZS00M2ZmLTgxNDktOTk2NzAxY2NlOGM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4lXjjAoXZ6emolOFDNYPvIm4riuJ9LCOPse /ypb6aLd9mry28/AGBwb3sRGo7ZjtLoXH8hRZVQoRBvUxJifxqGR2T1PYJF2DLRg OHEmvLcUzm1PpGpfiMvYKi9Yo3sFJo+TODlnpYq5gJQMknOtqtgpNQnX5ZmLcA06 INYhZK6G4IWYkqLu2Doyo30Oggw/HgpCTmiezNRVBjZrq57BzOvx1tegqpQ9fypq 0lw2IJdIxJkLj70q2Gx3rN360Tq69cM+4ZJsfMfjmsOWQ64odETxQ1RhL/7e0E+c Y18zjUXa78ExdGyLV+VMjF2SGH1zvVRacUXl3PMN98FgCcAX7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5M/SVrIcxC8ag65sSTWGGOeeZ9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGNhZTMzZmQtZTExYy0z ZjIwLWIwZmItODcxMjkyYjk3YWE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCLgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpWhU8gQXsI87NMD8GtpzI/AZArbCu6krWLR6u3MAjhFo7nx768s1pS yV+OroFmkIr1XbG8qnMbcXDeOH2QVMfmnReOW1jYJkN1tdctYJf1IDjHzz0Uba+8 EaTQnK4HpE1Qgu9B2NGmrWUrOc3BoBcqQXglUDuD/UZcW/xqhO/sXJqrC3tkJJqj rwY6Ww5QHwQfbsXUl7V28I3edFCgo7kdxujMVUS/FkefY514hglQNdbwGBOlT9ut pweKj5zHCzUzkqYTGZP4nddy1FXzDARC+XzVsTgtpgrBD7CC6pjpZg7Inptscasx uQ5wXpvTE4zkymxsQcTKjKl/fJe/eTk= -----END CERTIFICATE-----Generated at Mon Apr 28 22:47:45 2025 by rpki-client