$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa File: f52b06f5-3629-343c-bb95-0fe8bba70179.roa (raw, json) Hash identifier: Jh6MobDs71N6Ku9HUAPq7x/QywtmgPkure7DBrhPV6I= Subject key identifier: F6:88:F0:3E:86:1A:E6:64:63:D1:00:EC:5D:2D:C7:D7:A4:E6:5F:25 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DC88DE37F8737C4E2140 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.36.176.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:dc:88:de:37:f8:73:7c:4e:21:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=d08fd670-e3b7-4e25-b968-5288bd5180e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c2:ff:1f:eb:9b:0d:26:d2:9e:63:16:35:8f: a3:c6:07:93:bd:9e:5e:ad:10:db:86:34:4f:8c:bf: 4f:e2:ce:85:05:cd:0d:e3:56:99:fd:49:f1:52:a7: d1:e1:cd:16:ae:46:98:53:46:d6:ae:6d:04:6a:ab: 9a:f6:73:86:fa:ae:e2:27:bc:34:2f:80:cb:d1:75: 78:40:d9:c4:96:b3:01:7e:d0:5f:d4:c4:90:a3:d4: 3a:b3:1d:86:56:17:9d:aa:2a:26:28:91:60:2f:4b: 1f:ff:ed:b2:98:1a:28:ba:b9:27:aa:07:00:20:c3: 32:61:a8:6e:53:04:8d:c5:67:03:20:34:11:18:93: 8b:75:38:2c:db:05:6b:a4:3f:85:b4:1b:64:90:d9: 60:9c:43:36:f7:00:ba:2e:83:e2:cf:bb:92:37:a5: ed:85:41:65:3c:89:e9:49:f3:51:e9:e5:ee:1f:a0: 5f:f5:aa:96:ec:33:38:0f:ba:76:91:b0:d0:98:03: a2:33:5b:d3:b5:0d:82:7e:71:61:2b:08:c9:82:d0: 7a:ef:62:c2:bd:87:38:07:83:98:20:2a:ac:1d:98: 33:8f:a2:3b:a3:a2:cb:0e:91:6f:1f:8c:f6:3a:32: 4a:7d:9e:30:2d:85:e3:da:bc:4c:d5:b2:7d:a2:f4: e0:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:88:F0:3E:86:1A:E6:64:63:D1:00:EC:5D:2D:C7:D7:A4:E6:5F:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f52b06f5-3629-343c-bb95-0fe8bba70179.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.36.176.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:12:4b:54:16:03:e7:75:57:95:9e:64:cd:9a:8e:bb:c0:d2: 31:89:c3:6f:16:ca:28:4a:37:92:6e:d1:9e:75:48:4c:af:7d: 0e:20:c5:c1:a7:18:84:d0:5c:d4:ab:99:15:31:98:a4:4d:5f: f2:79:60:1d:92:0a:79:42:ec:14:ca:b9:40:34:a7:8c:8f:c2: 28:3e:6a:22:3b:95:0b:98:c2:58:de:6f:7f:f8:c6:86:1d:6b: 3d:d4:fd:3b:c9:df:2b:0d:42:ec:0f:71:68:64:40:d4:17:dc: be:eb:ed:b8:47:a3:d5:61:b1:69:b5:89:79:c6:54:0e:6c:f9: 59:9d:87:27:54:6e:2f:b7:f1:6b:d0:39:14:5e:3d:c3:af:5e: a4:c2:e0:a9:91:87:fe:bc:52:f0:cb:83:8b:ce:13:f8:10:68: 03:6e:16:2c:b4:4a:c8:c8:13:75:f0:35:f4:02:f7:4d:71:bd: 91:ad:f2:4b:99:6c:ac:3c:4e:ee:1c:06:55:43:b0:a4:a5:9c: 0a:5c:26:a2:f1:1e:89:ce:f7:8e:1c:eb:94:6a:19:c2:36:66: 90:79:aa:76:5e:c5:48:34:46:2d:80:b0:d1:45:f0:cc:4d:6a: dd:06:e3:fe:fa:42:0b:17:3b:60:a5:0f:c6:78:17:81:af:9c: 6a:49:8f:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdyI3jf4c3xOIUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZDA4ZmQ2NzAtZTNiNy00ZTI1LWI5NjgtNTI4OGJkNTE4MGU3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8L/H+ubDSbSnmMWNY+jxgeTvZ5erRDbhjRP jL9P4s6FBc0N41aZ/UnxUqfR4c0WrkaYU0bWrm0Eaqua9nOG+q7iJ7w0L4DL0XV4 QNnElrMBftBf1MSQo9Q6sx2GVhedqiomKJFgL0sf/+2ymBoourknqgcAIMMyYahu UwSNxWcDIDQRGJOLdTgs2wVrpD+FtBtkkNlgnEM29wC6LoPiz7uSN6XthUFlPInp SfNR6eXuH6Bf9aqW7DM4D7p2kbDQmAOiM1vTtQ2CfnFhKwjJgtB672LCvYc4B4OY ICqsHZgzj6I7o6LLDpFvH4z2OjJKfZ4wLYXj2rxM1bJ9ovTg7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPaI8D6GGuZkY9EA7F0tx9ek5l8lMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjUyYjA2ZjUtMzYyOS0z NDNjLWJiOTUtMGZlOGJiYTcwMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCSwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMSS1QWA+d1V5WeZM2ajrvA0jGJw28WyihKN5Ju0Z51SEyvfQ4gxcGn GITQXNSrmRUxmKRNX/J5YB2SCnlC7BTKuUA0p4yPwig+aiI7lQuYwljeb3/4xoYd az3U/TvJ3ysNQuwPcWhkQNQX3L7r7bhHo9VhsWm1iXnGVA5s+VmdhydUbi+38WvQ ORRePcOvXqTC4KmRh/68UvDLg4vOE/gQaANuFiy0SsjIE3XwNfQC901xvZGt8kuZ bKw8Tu4cBlVDsKSlnApcJqLxHonO944c65RqGcI2ZpB5qnZexUg0Ri2AsNFF8MxN at0G4/76QgsXO2ClD8Z4F4GvnGpJjy0= -----END CERTIFICATE-----Generated at Tue Apr 29 14:32:26 2025 by rpki-client