$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa File: eb806ee2-a2a6-3496-9d22-6d8021915f52.roa (raw, json) Hash identifier: EaVJfKlLcAQ+pR554g2mC4fxbZLlNZF5fj9gDGLf/+M= Subject key identifier: 56:73:F6:7A:6A:3C:01:0C:98:69:D8:65:C2:8C:6F:ED:C1:B4:1B:09 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DD82C8FE66B6CFB54C00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.36.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dd:82:c8:fe:66:b6:cf:b5:4c:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=f5a76df9-7f87-464c-8e4e-8c3139b647ff Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b7:db:72:90:5a:0f:0d:6f:a2:83:71:1d:60: 09:38:05:36:1f:4f:73:d8:11:4c:43:44:b6:8f:d7: e0:d3:e9:58:e9:52:1f:6a:84:10:6d:40:e5:02:ff: 19:13:69:6b:88:78:c1:67:72:0b:37:1a:3f:36:c9: 19:e4:84:e8:8e:a6:5a:9a:a5:2f:8d:98:e1:f5:66: 94:b5:7c:ee:e4:01:57:54:08:4d:4c:95:61:db:67: 00:9a:13:91:8c:dd:24:09:9c:a8:bb:7f:f9:90:8c: 85:dc:2b:b5:92:6d:bf:4e:22:f6:6a:3d:7c:5d:0f: df:dc:ae:44:1f:3d:0f:58:b1:c7:5f:83:6c:50:e9: 5d:41:ac:f6:a0:96:94:44:71:da:e1:7b:a0:60:22: 2b:46:ae:a5:ad:74:08:5f:b9:82:d0:79:d7:da:a5: 26:7e:96:61:dd:55:e6:33:d1:af:c5:08:22:40:98: 80:e6:60:55:d8:87:4e:98:6a:22:12:72:fb:48:8f: 3e:0a:04:dc:b6:19:1e:05:7b:63:bb:0f:81:e7:71: 0a:44:d7:0a:5e:e7:71:f4:cb:ca:24:06:0f:ed:7e: 0c:fd:61:68:c0:0b:eb:07:1e:bf:37:0f:d5:ce:58: cc:8f:f4:82:37:31:7f:4a:98:72:b4:e5:35:d7:4e: b2:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:73:F6:7A:6A:3C:01:0C:98:69:D8:65:C2:8C:6F:ED:C1:B4:1B:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/eb806ee2-a2a6-3496-9d22-6d8021915f52.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:df:25:d6:46:b2:51:a1:46:07:99:39:3e:f4:ab:31:4e:20: 0d:cc:1d:07:a6:0e:e0:46:c3:75:04:2a:5f:c3:f8:ae:5e:fe: ab:6b:cc:ba:82:89:88:88:92:ab:71:79:25:99:d5:da:a7:f6: 33:19:1e:df:32:62:25:8e:19:4f:5e:e2:6a:07:db:a2:9f:30: f3:02:9f:f2:77:9d:37:83:6d:b9:03:72:bd:b3:b2:93:43:c1: eb:dc:52:a2:77:86:94:50:55:c3:b0:f4:27:ac:db:48:c1:67: de:a0:0e:5e:cc:83:66:af:fd:53:4e:f3:93:51:21:e8:98:e0: 5e:f5:15:b1:8a:fe:9e:de:ff:f3:fe:b6:20:e7:b3:95:29:ea: 11:2f:6d:a7:78:09:0f:52:b8:05:5a:51:40:fc:c9:17:5e:19: 06:c2:fc:d5:4a:d6:bb:ac:03:2f:14:47:67:95:d4:2c:18:a2: c6:62:30:e9:a1:9a:9e:f7:3d:6d:66:02:a8:fe:8b:27:63:f5: bc:f6:34:d6:64:f1:30:43:02:8d:9b:ae:49:cb:a9:0b:f0:a0: e3:9f:28:91:3a:2b:3e:92:b8:da:f2:98:29:04:75:a6:17:ce: 5d:8c:81:b0:c0:e2:7f:35:3e:e2:c8:80:05:70:55:84:34:9d: 8f:18:23:b4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd2CyP5mts+1TAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZjVhNzZkZjktN2Y4Ny00NjRjLThlNGUtOGMzMTM5YjY0N2ZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7fbcpBaDw1vooNxHWAJOAU2H09z2BFMQ0S2 j9fg0+lY6VIfaoQQbUDlAv8ZE2lriHjBZ3ILNxo/NskZ5ITojqZamqUvjZjh9WaU tXzu5AFXVAhNTJVh22cAmhORjN0kCZyou3/5kIyF3Cu1km2/TiL2aj18XQ/f3K5E Hz0PWLHHX4NsUOldQaz2oJaURHHa4XugYCIrRq6lrXQIX7mC0HnX2qUmfpZh3VXm M9GvxQgiQJiA5mBV2IdOmGoiEnL7SI8+CgTcthkeBXtjuw+B53EKRNcKXudx9MvK JAYP7X4M/WFowAvrBx6/Nw/VzljMj/SCNzF/SphytOU1106yYQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFZz9npqPAEMmGnYZcKMb+3BtBsJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZWI4MDZlZTItYTJhNi0z NDk2LTlkMjItNmQ4MDIxOTE1ZjUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFHfJdZGslGhRgeZOT70qzFOIA3MHQemDuBGw3UEKl/D+K5e/qtrzLqC iYiIkqtxeSWZ1dqn9jMZHt8yYiWOGU9e4moH26KfMPMCn/J3nTeDbbkDcr2zspND wevcUqJ3hpRQVcOw9Ces20jBZ96gDl7Mg2av/VNO85NRIeiY4F71FbGK/p7e//P+ tiDns5Up6hEvbad4CQ9SuAVaUUD8yRdeGQbC/NVK1rusAy8UR2eV1CwYosZiMOmh mp73PW1mAqj+iydj9bz2NNZk8TBDAo2brknLqQvwoOOfKJE6Kz6SuNrymCkEdaYX zl2MgbDA4n81PuLIgAVwVYQ0nY8YI7Q= -----END CERTIFICATE-----Generated at Mon Jun 16 17:41:40 2025 by rpki-client