$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa File: 333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa (raw, json) Hash identifier: BvARgPHDQzE5ugErhBkPcVCHBOh/E2XBS35RMhdRkxg= Subject key identifier: 10:BE:BE:08:78:1E:CC:2F:FD:E9:02:36:0A:DE:A9:A7:9F:B1:54:94 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339DA32F21E5F377B8D4200 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.32.48.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:da:32:f2:1e:5f:37:7b:8d:42:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=4c2a7580-a244-4c78-ae7b-d00f3ae443f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:fe:3a:a2:1f:ac:d7:40:50:1c:30:ef:54:d2: f4:cb:d6:d4:4c:d2:90:2c:be:0c:63:32:a9:25:9d: 43:42:8c:57:51:c6:5e:e4:22:65:ff:47:e4:8a:08: 9c:22:c5:0b:da:4e:f4:7b:11:1f:f2:ad:0f:30:b2: a5:53:ec:7e:8b:f2:d9:ff:83:87:bf:4a:ba:1c:8c: 00:37:f9:cc:d9:54:48:a2:6d:8d:23:d9:06:99:3f: af:c9:6b:1a:56:2f:82:af:ab:e4:60:6d:fa:e5:86: a3:8b:ff:ca:a3:22:eb:e2:17:cc:54:be:7d:da:ad: ff:75:ff:a8:93:f9:d2:8b:7e:60:c0:be:ce:91:a0: 8d:f7:d9:82:54:ed:7a:c6:5e:84:e0:6c:b4:d1:b6: e7:28:6c:15:e2:4e:29:af:6e:33:c2:23:f0:b0:0a: 59:54:ea:9c:1d:f1:71:1d:70:ca:c9:78:ca:e1:56: 2d:5e:d8:6a:5b:99:98:2a:e2:14:97:08:47:b7:8d: 46:68:81:ed:ea:3b:e9:7c:9f:84:db:98:b0:68:56: 09:6f:02:e7:22:5b:e3:17:c3:12:47:b8:a0:c2:c9: 3f:11:06:cc:c4:e0:fc:1d:ca:3f:0e:98:1c:2f:4f: 40:52:88:9e:a8:ad:03:cf:61:8f:d0:c2:49:f0:ae: 49:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:BE:BE:08:78:1E:CC:2F:FD:E9:02:36:0A:DE:A9:A7:9F:B1:54:94 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/333cc87a-ba19-3d00-9f69-3b74f528f8d8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.48.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 11:75:a0:17:bb:71:e8:55:07:87:14:ee:c5:1d:a9:74:66:74: 15:ea:1c:b2:fb:1e:10:ea:3d:78:b7:ca:f3:55:d0:44:fd:58: ca:9e:19:76:02:62:2d:1d:8f:00:62:6e:dd:78:c2:cb:05:ee: 2a:3d:1b:38:03:f6:70:b3:5f:98:f1:65:4c:bc:1c:a6:05:0e: 7c:bf:b5:85:ff:9d:db:d7:69:01:f7:19:14:64:04:a0:0b:c4: f1:9b:2e:0a:09:b3:1f:e1:ad:cd:4c:b1:6e:f9:8b:f8:78:3e: de:f6:f5:39:16:06:d2:7c:ea:bb:50:cb:45:90:d3:63:65:76: db:01:b0:eb:4b:93:41:f5:07:cd:54:47:8c:c2:27:fe:c7:9b: ce:96:03:73:d5:11:74:c4:59:e0:5d:2e:dc:bd:54:d3:ca:34: f4:61:46:3e:2c:4e:33:20:2b:23:de:ee:9f:9b:43:ae:2f:b7: 07:f6:d1:82:12:dd:18:a6:b3:5f:c0:b3:cd:6a:02:2c:e5:6a: 01:3f:b4:1b:d2:28:76:ff:1f:57:84:a4:8e:e2:a9:6a:e9:45: 05:ed:9d:c9:60:af:b1:94:7a:ba:79:6a:62:6f:52:6f:65:67: af:03:64:b2:a0:9c:92:4f:73:ff:c8:5e:e2:89:96:d9:25:0a: 38:8b:2e:b1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdoy8h5fN3uNQgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk NGMyYTc1ODAtYTI0NC00Yzc4LWFlN2ItZDAwZjNhZTQ0M2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/46oh+s10BQHDDvVNL0y9bUTNKQLL4MYzKp JZ1DQoxXUcZe5CJl/0fkigicIsUL2k70exEf8q0PMLKlU+x+i/LZ/4OHv0q6HIwA N/nM2VRIom2NI9kGmT+vyWsaVi+Cr6vkYG365Yaji//KoyLr4hfMVL592q3/df+o k/nSi35gwL7OkaCN99mCVO16xl6E4Gy00bbnKGwV4k4pr24zwiPwsApZVOqcHfFx HXDKyXjK4VYtXthqW5mYKuIUlwhHt41GaIHt6jvpfJ+E25iwaFYJbwLnIlvjF8MS R7igwsk/EQbMxOD8Hco/DpgcL09AUoieqK0Dz2GP0MJJ8K5JNQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBC+vgh4Hswv/ekCNgreqaefsVSUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvMzMzY2M4N2EtYmExOS0z ZDAwLTlmNjktM2I3NGY1MjhmOGQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCAwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABF1oBe7cehVB4cU7sUdqXRmdBXqHLL7HhDqPXi3yvNV0ET9WMqeGXYC Yi0djwBibt14wssF7io9GzgD9nCzX5jxZUy8HKYFDny/tYX/ndvXaQH3GRRkBKAL xPGbLgoJsx/hrc1MsW75i/h4Pt729TkWBtJ86rtQy0WQ02NldtsBsOtLk0H1B81U R4zCJ/7Hm86WA3PVEXTEWeBdLty9VNPKNPRhRj4sTjMgKyPe7p+bQ64vtwf20YIS 3Rims1/As81qAizlagE/tBvSKHb/H1eEpI7iqWrpRQXtnclgr7GUerp5amJvUm9l Z68DZLKgnJJPc//IXuKJltklCjiLLrE= -----END CERTIFICATE-----Generated at Thu May 8 00:04:40 2025 by rpki-client