$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa File: f0b78fce-a780-3f3e-a75f-086eabd8200e.roa (raw, json) Hash identifier: xiatm6UrEJvSew5rN2ffq3YKXanL6YWeSQDZGTWY6sc= Subject key identifier: 7D:ED:E1:C3:78:D8:67:62:6B:66:D0:2E:E1:3A:86:8E:C4:D5:1A:05 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DD9E6E921CC73AA19F80 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.52.112.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dd:9e:6e:92:1c:c7:3a:a1:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=0f902bb5-8dd0-46e5-a5ee-9b3d53841c56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:d8:30:c1:12:52:91:1a:40:d1:33:bd:b7:d8: 35:b3:1d:7f:f1:60:02:d4:0a:8b:e8:77:db:e4:be: 5f:90:61:88:7f:bb:de:10:db:d5:5d:ab:98:19:7d: da:e1:b2:b8:76:04:21:25:73:2d:ab:b9:ed:c1:2b: f7:12:43:87:dd:b8:de:c1:1c:17:a4:e4:96:6a:50: 21:d6:be:14:b8:9b:ef:ea:bf:ac:2c:30:3e:cf:a0: 92:1c:96:e4:0d:62:33:0c:47:75:9c:93:84:72:b3: b9:52:07:c7:23:e9:2d:84:f2:57:86:f5:06:03:07: 8a:1d:81:eb:83:ba:3c:94:9a:3e:68:98:e6:25:31: 52:b3:9a:32:37:2e:1f:04:03:24:fe:aa:02:ab:b8: 12:4f:e2:f2:af:c9:a1:b4:f9:ba:d1:ae:41:32:3a: a1:ea:e6:c4:11:72:89:2d:87:c3:1d:d4:4d:28:5d: 84:56:2c:96:d2:d6:44:f6:3c:00:87:31:8d:38:88: 8c:01:22:9a:ad:02:d6:1c:11:b9:6f:4a:b8:d5:a3: ac:5f:97:c8:41:0c:59:53:91:6c:4f:7c:b2:2b:43: 90:ed:2b:f4:e0:d7:a2:e6:c2:da:23:0f:a6:2e:77: 6d:fe:33:77:4e:f1:01:4f:41:3e:3d:40:1b:2c:b8: a7:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:ED:E1:C3:78:D8:67:62:6B:66:D0:2E:E1:3A:86:8E:C4:D5:1A:05 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f0b78fce-a780-3f3e-a75f-086eabd8200e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.112.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:85:78:68:8f:2a:77:07:1b:ee:0b:93:f7:39:5b:34:47:55: bb:83:74:d0:20:57:66:18:68:fa:2b:e4:59:64:b7:cd:9c:05: 85:18:10:cf:ac:48:df:bd:35:dc:73:c9:9f:cc:75:52:d8:54: 09:d3:ce:aa:36:fb:7c:62:83:88:7a:8b:53:73:9c:d9:dd:24: 44:e5:1b:75:bb:68:16:76:bd:6c:f3:d0:5c:9a:cc:81:63:05: 6e:a1:69:36:ae:dd:ba:46:69:4a:21:f3:12:d3:c1:9c:a3:a0: 4b:c0:28:01:36:aa:16:08:eb:62:66:36:33:3f:b8:ff:0a:56: 57:36:2b:4c:c5:5e:a3:a7:6e:2d:f5:38:17:9c:58:55:79:79: 94:44:98:e9:b8:17:5e:ec:65:25:80:37:fd:8c:13:a2:ba:29: 28:00:d8:1c:8f:11:8f:94:68:67:c7:10:d1:6a:ee:49:7e:91: 6d:32:f5:0a:34:3d:8d:49:4c:07:f2:ad:80:d8:b1:ee:9b:25: 23:47:b5:42:39:ac:d4:49:ac:bb:af:32:c8:c2:9a:4a:8b:bc: ac:0d:5b:3b:cf:ea:e3:8e:b7:d3:b4:de:a5:b3:20:00:b9:19: 69:f7:14:66:92:83:d5:ae:10:29:6b:70:be:34:ff:aa:1a:58: a0:0f:16:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOd2ebpIcxzqhn4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MGY5MDJiYjUtOGRkMC00NmU1LWE1ZWUtOWIzZDUzODQxYzU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndgwwRJSkRpA0TO9t9g1sx1/8WAC1AqL6Hfb 5L5fkGGIf7veENvVXauYGX3a4bK4dgQhJXMtq7ntwSv3EkOH3bjewRwXpOSWalAh 1r4UuJvv6r+sLDA+z6CSHJbkDWIzDEd1nJOEcrO5UgfHI+kthPJXhvUGAweKHYHr g7o8lJo+aJjmJTFSs5oyNy4fBAMk/qoCq7gST+Lyr8mhtPm60a5BMjqh6ubEEXKJ LYfDHdRNKF2EViyW0tZE9jwAhzGNOIiMASKarQLWHBG5b0q41aOsX5fIQQxZU5Fs T3yyK0OQ7Sv04Nei5sLaIw+mLndt/jN3TvEBT0E+PUAbLLin1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH3t4cN42Gdia2bQLuE6ho7E1RoFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjBiNzhmY2UtYTc4MC0z ZjNlLWE3NWYtMDg2ZWFiZDgyMDBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDRwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHKFeGiPKncHG+4Lk/c5WzRHVbuDdNAgV2YYaPor5Flkt82cBYUYEM+s SN+9NdxzyZ/MdVLYVAnTzqo2+3xig4h6i1NznNndJETlG3W7aBZ2vWzz0FyazIFj BW6haTau3bpGaUoh8xLTwZyjoEvAKAE2qhYI62JmNjM/uP8KVlc2K0zFXqOnbi31 OBecWFV5eZREmOm4F17sZSWAN/2ME6K6KSgA2ByPEY+UaGfHENFq7kl+kW0y9Qo0 PY1JTAfyrYDYse6bJSNHtUI5rNRJrLuvMsjCmkqLvKwNWzvP6uOOt9O03qWzIAC5 GWn3FGaSg9WuEClrcL40/6oaWKAPFsU= -----END CERTIFICATE-----Generated at Tue Apr 29 06:29:13 2025 by rpki-client