$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa File: e73304dc-a250-38ed-aa9f-e07a00448bff.roa (raw, json) Hash identifier: MIqhfbh92vmcg+nTNOzhwKMb5Y3kjYGpxlINa8mB0g8= Subject key identifier: C7:41:E6:7A:6E:A8:31:82:5A:27:81:5D:1F:45:99:EB:73:77:B1:A6 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CECD597B06A45354A040 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.50.144.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:ce:cd:59:7b:06:a4:53:54:a0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=56bc3518-a350-4e86-a0c1-bcebdbe28cea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:64:4e:54:f8:61:31:2e:bd:96:42:98:06:48: 70:7d:64:79:5d:76:f4:08:97:d5:1d:7b:4e:92:40: b8:84:6a:03:e2:d6:21:19:90:cf:bf:46:b9:ab:5d: de:36:8d:a9:fe:27:80:9e:f2:3f:cf:54:99:17:bf: bd:a7:84:9f:89:b7:9f:16:46:88:95:76:55:05:40: 8f:89:5b:78:ab:3b:a3:cc:70:4e:ee:e3:c0:27:79: 54:1f:02:bc:ed:2f:eb:1e:e3:53:d4:f8:e0:2c:8c: 58:45:dd:ea:3d:66:0a:55:e8:b3:9f:57:2c:9d:58: 25:ad:e5:51:38:2c:c8:c1:cb:28:a9:32:d9:5a:cd: 09:a2:12:44:7e:33:21:d5:eb:99:2f:38:ba:f3:d7: 42:b9:3f:e7:ce:40:42:97:a2:e9:eb:8e:d7:07:14: d5:1b:a6:0f:25:35:27:33:ad:63:ad:dd:2d:70:c2: 02:a3:54:8f:4c:b5:40:8a:51:da:09:11:c7:60:9d: 4d:04:e1:25:b8:05:b6:f0:2c:79:4c:e0:94:6c:80: c4:e5:74:2f:e5:b7:4f:57:ae:20:ab:b5:eb:8b:19: 18:d1:02:81:c4:b8:d2:a0:1d:23:1f:84:5f:78:a7: 20:11:08:5d:17:9e:6d:cd:cb:cc:62:e0:b9:fb:6f: 4f:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:41:E6:7A:6E:A8:31:82:5A:27:81:5D:1F:45:99:EB:73:77:B1:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e73304dc-a250-38ed-aa9f-e07a00448bff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.144.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:0f:74:70:59:fb:af:9d:60:51:a0:d6:9a:f6:8a:a6:5d:b7: c3:67:0b:3e:d1:09:64:b8:00:8b:2b:c5:97:a8:7e:d9:2a:76: 66:58:93:6d:53:ef:cd:65:f3:fa:2d:09:db:c2:69:51:65:b8: 6a:c2:f0:1f:72:b6:d2:88:03:29:9d:8b:7a:5e:71:bc:e7:20: d6:35:f5:ce:be:e1:a4:46:77:d5:65:96:f4:6e:c8:a5:80:02: ba:37:04:d7:64:e3:3b:2b:96:e1:aa:49:f9:5a:68:9c:43:50: 32:5d:c0:3c:38:f0:3e:2f:c7:ad:05:9b:63:6d:cc:16:e2:9e: 43:cd:70:c6:0d:1c:72:60:7b:7e:02:42:c2:50:83:36:0c:a5: 8b:c6:ea:bf:9b:b3:eb:cd:75:6d:7b:f6:59:3f:55:4a:e0:51: 24:ea:8f:32:14:11:d1:67:92:fe:4f:9a:a0:d2:50:3f:b3:d1: bc:4f:1a:07:6d:d6:eb:a0:6d:c7:0f:41:6f:5a:bd:ff:84:28: 32:76:9e:08:f0:ea:23:83:ae:15:0b:eb:4c:5f:9d:9f:84:87: a3:b8:90:c1:67:bb:f3:27:27:38:6e:2c:e8:67:a0:a9:50:47: bd:90:52:a0:9f:2f:7c:18:6a:e2:2b:f5:b9:a5:66:50:62:ed: 3f:48:9f:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc7NWXsGpFNUoEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTZiYzM1MTgtYTM1MC00ZTg2LWEwYzEtYmNlYmRiZTI4Y2VhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1GROVPhhMS69lkKYBkhwfWR5XXb0CJfVHXtO kkC4hGoD4tYhGZDPv0a5q13eNo2p/ieAnvI/z1SZF7+9p4SfibefFkaIlXZVBUCP iVt4qzujzHBO7uPAJ3lUHwK87S/rHuNT1PjgLIxYRd3qPWYKVeizn1csnVglreVR OCzIwcsoqTLZWs0JohJEfjMh1euZLzi689dCuT/nzkBCl6Lp647XBxTVG6YPJTUn M61jrd0tcMICo1SPTLVAilHaCRHHYJ1NBOEluAW28Cx5TOCUbIDE5XQv5bdPV64g q7XrixkY0QKBxLjSoB0jH4RfeKcgEQhdF55tzcvMYuC5+29PXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMdB5npuqDGCWieBXR9Fmetzd7GmMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTczMzA0ZGMtYTI1MC0z OGVkLWFhOWYtZTA3YTAwNDQ4YmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDKQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQPdHBZ+6+dYFGg1pr2iqZdt8NnCz7RCWS4AIsrxZeoftkqdmZYk21T 781l8/otCdvCaVFluGrC8B9yttKIAymdi3pecbznINY19c6+4aRGd9VllvRuyKWA Aro3BNdk4zsrluGqSflaaJxDUDJdwDw48D4vx60Fm2NtzBbinkPNcMYNHHJge34C QsJQgzYMpYvG6r+bs+vNdW179lk/VUrgUSTqjzIUEdFnkv5PmqDSUD+z0bxPGgdt 1uugbccPQW9avf+EKDJ2ngjw6iODrhUL60xfnZ+Eh6O4kMFnu/MnJzhuLOhnoKlQ R72QUqCfL3wYauIr9bmlZlBi7T9InyA= -----END CERTIFICATE-----Generated at Mon Jun 16 17:45:22 2025 by rpki-client