$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa File: f040b20c-a806-35b2-ae4a-b52c865f43c4.roa (raw, json) Hash identifier: Fw7mEMEqNExtiPcT3o+/FOElmHF4VU9f9Zyj1WCbnls= Subject key identifier: BB:41:E3:00:BD:3D:16:DD:4D:5B:DC:EE:72:D0:4E:9B:F3:9E:0F:6B Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339C979FA9FE6AFB948CA00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.49.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:c9:79:fa:9f:e6:af:b9:48:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=51597327-d484-472c-bc12-12ac1d5295aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:11:17:e5:30:ab:a8:4c:54:03:13:23:8e:1a: 94:f1:c6:ca:c5:a5:f8:6f:3d:a5:da:28:78:6f:80: 24:bf:ed:06:ee:cd:49:11:e7:10:7c:40:a9:de:48: 76:e4:d9:4d:4d:23:86:b9:29:b0:3f:38:f1:7c:8b: ee:89:6b:31:35:a6:9b:bd:6c:b3:9f:e6:df:92:99: c6:a2:b1:cd:d9:3e:85:57:2d:f5:ec:3b:28:cd:50: 8d:d9:10:bf:ad:ba:b5:aa:88:bf:bc:49:a9:09:a0: a6:bc:22:ff:18:38:e4:12:4f:0d:82:43:b0:b6:01: f9:59:29:15:9d:0a:7a:5b:ad:65:f1:d2:84:13:0b: ee:81:25:6c:39:9e:68:c6:ed:a3:7f:4a:59:f4:56: 67:8e:1b:71:3f:c3:b8:f9:38:4a:46:c2:3a:2e:58: ea:c2:ca:e1:20:16:c0:32:a8:3a:bd:3a:c5:95:f7: 1b:d3:0d:cf:27:0e:f8:92:ae:0d:33:a7:9b:57:28: d8:a2:60:06:93:ef:9e:77:74:56:a3:a7:99:b8:6c: 1a:61:38:94:4e:c9:5d:3e:44:89:31:f2:40:db:b1: ea:99:28:60:91:21:f9:07:fe:e6:de:d8:72:e9:18: 38:ce:f4:4b:62:e6:e5:e4:21:9d:8a:24:0a:ea:f4: 20:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:41:E3:00:BD:3D:16:DD:4D:5B:DC:EE:72:D0:4E:9B:F3:9E:0F:6B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f040b20c-a806-35b2-ae4a-b52c865f43c4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:d3:e8:13:f9:bc:c5:79:b2:45:9d:bd:24:80:d1:cf:21:b0: d9:00:02:08:08:f0:7a:c6:f2:b5:e3:4c:df:c3:29:de:4a:3d: 00:9c:90:1a:bd:4e:6d:e2:8c:18:3e:72:ed:0a:1b:33:5e:84: 46:f2:55:84:b1:fa:3e:53:6f:94:12:55:66:6e:08:8e:57:be: ba:c6:a0:79:0d:c0:79:93:85:d6:3d:75:c5:28:8c:8a:79:22: 61:5a:70:cd:73:eb:ab:13:8b:9b:65:e1:0a:5f:a0:5f:9b:e6: 90:f2:73:9e:56:d2:12:7a:ba:89:e7:30:a2:46:fd:15:bf:dc: f1:c4:ba:bf:76:17:02:43:d3:62:19:65:ea:2a:ec:04:bd:5d: e1:4a:03:1b:fb:6a:c6:b2:ad:38:8a:03:1e:57:90:43:84:68: 64:f0:42:8f:33:51:58:9e:8c:54:63:1a:b5:0f:a0:b7:21:7b: 4f:fa:44:d9:db:95:c0:76:36:58:59:5f:cb:f4:85:da:c5:f7: 8e:01:cf:6f:e5:38:b7:0a:f2:de:df:31:ec:cc:35:5c:da:bf: a8:db:c7:5c:a4:24:85:65:eb:cb:6f:2e:3a:be:35:cf:e1:f8: 8c:73:46:88:5e:b6:dc:e7:8a:3f:13:68:00:ad:f9:3b:7e:47: 32:37:fc:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOcl5+p/mr7lIygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NTE1OTczMjctZDQ4NC00NzJjLWJjMTItMTJhYzFkNTI5NWFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7REX5TCrqExUAxMjjhqU8cbKxaX4bz2l2ih4 b4Akv+0G7s1JEecQfECp3kh25NlNTSOGuSmwPzjxfIvuiWsxNaabvWyzn+bfkpnG orHN2T6FVy317DsozVCN2RC/rbq1qoi/vEmpCaCmvCL/GDjkEk8NgkOwtgH5WSkV nQp6W61l8dKEEwvugSVsOZ5oxu2jf0pZ9FZnjhtxP8O4+ThKRsI6LljqwsrhIBbA Mqg6vTrFlfcb0w3PJw74kq4NM6ebVyjYomAGk++ed3RWo6eZuGwaYTiUTsldPkSJ MfJA27HqmShgkSH5B/7m3thy6Rg4zvRLYubl5CGdiiQK6vQgNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLtB4wC9PRbdTVvc7nLQTpvzng9rMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjA0MGIyMGMtYTgwNi0z NWIyLWFlNGEtYjUyYzg2NWY0M2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDHgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjT6BP5vMV5skWdvSSA0c8hsNkAAggI8HrG8rXjTN/DKd5KPQCckBq9 Tm3ijBg+cu0KGzNehEbyVYSx+j5Tb5QSVWZuCI5XvrrGoHkNwHmThdY9dcUojIp5 ImFacM1z66sTi5tl4QpfoF+b5pDyc55W0hJ6uonnMKJG/RW/3PHEur92FwJD02IZ Zeoq7AS9XeFKAxv7asayrTiKAx5XkEOEaGTwQo8zUViejFRjGrUPoLche0/6RNnb lcB2NlhZX8v0hdrF944Bz2/lOLcK8t7fMezMNVzav6jbx1ykJIVl68tvLjq+Nc/h +IxzRohettznij8TaACt+Tt+RzI3/N8= -----END CERTIFICATE-----Generated at Thu May 1 02:43:54 2025 by rpki-client