$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa File: f8c8223c-bd4f-350e-af6b-a0e241edab57.roa (raw, json) Hash identifier: EUt+lXD0ce8xiRuJIJyGbtBZjaMOTF3jWAzlw5E6inM= Subject key identifier: 2A:8A:F7:59:A7:AC:F7:D4:26:5E:50:28:54:0A:5A:FE:E7:E8:3B:F8 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CF80C203F4572E5A2D78 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.50.32.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cf:80:c2:03:f4:57:2e:5a:2d:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=4a812112-a4e4-4325-a6bc-a4c494eac21d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:c4:9a:e6:38:e7:3b:e5:19:de:08:72:cc:07: a5:7d:14:ac:07:ae:38:76:6a:d3:53:a8:c6:21:3a: 74:52:4b:2e:41:20:a7:8c:37:6d:d1:cb:7e:a5:af: 28:b9:ee:ba:4c:a3:22:ea:e3:9a:4d:ca:de:01:cf: 0f:84:57:62:c4:ad:54:11:d6:6c:1d:28:30:a8:0e: 64:a8:49:f4:05:72:0e:48:ca:d7:ca:10:14:e2:f1: fa:94:7c:c6:dc:83:6b:2e:a3:eb:b8:48:0b:19:43: 6b:11:7f:75:5f:10:d3:82:b6:d1:e6:aa:85:2c:70: 58:29:6e:a0:d8:1b:dc:85:1f:2c:16:f6:d4:d6:8a: 6d:40:88:76:04:75:d5:95:e4:a4:bc:4a:d3:01:9f: 93:40:82:30:7a:09:a7:f6:58:6c:dd:30:01:d3:20: 52:a6:cc:fd:21:2e:b9:5b:d3:20:c2:43:ea:f0:b2: 24:ec:b8:7e:e0:a0:8d:23:05:69:73:a8:1c:41:f8: b3:26:05:cc:40:d2:e4:43:0c:25:5c:22:dc:12:d7: f8:00:20:bd:11:2f:a7:20:9f:d3:ca:46:8b:04:27: a6:c8:ff:a2:28:a6:eb:2a:6b:27:7a:4e:5c:14:70: c8:cf:76:6e:5b:7c:dd:17:06:81:22:bc:81:e5:aa: 25:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8A:F7:59:A7:AC:F7:D4:26:5E:50:28:54:0A:5A:FE:E7:E8:3B:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8c8223c-bd4f-350e-af6b-a0e241edab57.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.50.32.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:e5:c7:64:d5:54:f7:1e:a8:6d:40:e6:ef:d8:32:58:b8:31: 14:97:19:22:6a:cb:b1:fe:3c:a0:69:f0:a9:f6:59:91:2e:0c: 8a:66:33:69:c3:d9:3b:ee:c8:84:96:31:62:50:0d:3a:56:ac: b1:a7:73:9b:a4:0b:c1:cb:ff:ce:f8:ce:e2:79:2d:6a:0e:af: 0a:e6:39:57:2e:7c:31:02:86:71:87:6a:01:ac:6b:34:76:a9: 5e:7f:fc:41:29:a5:d1:81:1e:73:62:c7:9c:18:2a:a4:87:72: 06:d2:fa:02:aa:76:eb:70:a1:c3:65:07:b0:fd:2e:30:3e:56: 96:48:f8:e3:3a:dd:49:a1:ae:4b:f6:77:9b:d0:61:41:4a:b4: 10:49:74:db:d8:0d:af:69:81:57:72:1d:db:32:2b:ea:26:60: 6c:b8:16:50:03:99:c9:39:55:fc:1d:b6:13:16:34:e9:19:6d: b0:85:4f:8f:b5:c7:c8:26:9f:f6:91:31:4c:65:5a:c6:22:c1: 98:8b:45:0c:ff:a4:78:0d:d2:ca:82:8e:a4:96:50:4f:89:a7: d7:df:77:29:e5:ed:0c:db:93:bd:76:dd:74:1c:9e:56:49:02: 9f:26:78:d0:3b:1a:76:67:2f:ae:f8:61:7b:46:97:d5:3e:4c: 02:ab:35:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc+AwgP0Vy5aLXgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NGE4MTIxMTItYTRlNC00MzI1LWE2YmMtYTRjNDk0ZWFjMjFkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgcSa5jjnO+UZ3ghyzAelfRSsB644dmrTU6jG ITp0UksuQSCnjDdt0ct+pa8oue66TKMi6uOaTcreAc8PhFdixK1UEdZsHSgwqA5k qEn0BXIOSMrXyhAU4vH6lHzG3INrLqPruEgLGUNrEX91XxDTgrbR5qqFLHBYKW6g 2BvchR8sFvbU1optQIh2BHXVleSkvErTAZ+TQIIwegmn9lhs3TAB0yBSpsz9IS65 W9MgwkPq8LIk7Lh+4KCNIwVpc6gcQfizJgXMQNLkQwwlXCLcEtf4ACC9ES+nIJ/T ykaLBCemyP+iKKbrKmsnek5cFHDIz3ZuW3zdFwaBIryB5aolcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCqK91mnrPfUJl5QKFQKWv7n6Dv4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjhjODIyM2MtYmQ0Zi0z NTBlLWFmNmItYTBlMjQxZWRhYjU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDIgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEvlx2TVVPceqG1A5u/YMli4MRSXGSJqy7H+PKBp8Kn2WZEuDIpmM2nD 2TvuyISWMWJQDTpWrLGnc5ukC8HL/874zuJ5LWoOrwrmOVcufDEChnGHagGsazR2 qV5//EEppdGBHnNix5wYKqSHcgbS+gKqdutwocNlB7D9LjA+VpZI+OM63Umhrkv2 d5vQYUFKtBBJdNvYDa9pgVdyHdsyK+omYGy4FlADmck5VfwdthMWNOkZbbCFT4+1 x8gmn/aRMUxlWsYiwZiLRQz/pHgN0sqCjqSWUE+Jp9ffdynl7Qzbk7123XQcnlZJ Ap8meNA7GnZnL674YXtGl9U+TAKrNT4= -----END CERTIFICATE-----Generated at Tue Apr 29 11:42:16 2025 by rpki-client