$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa File: 930baebb-b528-3d6d-9e48-2ff8e4312599.roa (raw, json) Hash identifier: 4giXPFb6Q5nOgwxGYAYWqu4XRUW9NW1dVKhSPJT0R6Q= Subject key identifier: CD:09:CF:E9:51:3F:9A:43:75:B6:A5:D1:62:D9:63:3B:24:AC:F8:02 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285849B2FBFD4E697E7B1C5B817E00 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa Signing time: Wed 30 Apr 2025 15:35:26 +0000 ROA not before: Wed 30 Apr 2025 15:35:26 +0000 ROA not after: Tue 29 Jul 2025 15:35:26 +0000 asID: 16591 IP address blocks: 136.60.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:fb:fd:4e:69:7e:7b:1c:5b:81:7e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 30 15:35:26 2025 GMT Not After : Jul 29 15:35:26 2025 GMT Subject: CN=ac9a3415-6fb0-4adb-b39f-a4cb82854580 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:fb:7f:aa:69:0c:1e:f7:c0:85:30:35:97:52: d7:62:82:80:5e:c4:0e:d9:df:48:aa:96:61:26:ca: 3d:fc:ae:cb:57:8f:3d:67:56:6d:60:21:c5:66:58: e2:e3:fd:46:2e:19:23:e5:a6:92:4b:22:12:00:4b: ab:1d:91:28:ee:ab:87:d9:cf:8d:d3:46:00:99:3c: 01:1e:2f:46:f0:8c:f0:2d:84:88:c0:85:d4:90:33: a9:c9:aa:48:c4:60:c2:33:ab:dc:38:d2:a3:18:6d: 72:0d:eb:fb:2e:df:93:a0:30:0d:1b:ea:a4:3a:95: 41:f0:7e:b0:c8:33:d7:aa:b3:15:5f:2a:4d:e3:2c: 53:a0:07:f1:c5:c3:98:fa:46:f3:4c:99:0d:75:ed: 2c:10:8d:db:7a:7e:3d:61:bb:4e:f3:25:bb:ec:d6: 19:01:5f:ce:38:df:cf:f1:91:31:5e:ad:8f:35:89: ac:8e:60:68:7c:b3:66:f1:2b:77:35:15:f7:19:8e: 1d:db:6b:ac:fc:95:8e:32:97:2c:f9:47:c2:ee:9e: 0a:ee:4a:70:f6:ba:c4:44:b8:5c:2d:bc:31:95:ec: 49:65:a3:8b:5e:cb:eb:47:a0:07:4c:57:99:12:4c: 77:7d:69:0c:71:b2:2c:79:80:06:8a:33:f5:d9:96: e0:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:09:CF:E9:51:3F:9A:43:75:B6:A5:D1:62:D9:63:3B:24:AC:F8:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/930baebb-b528-3d6d-9e48-2ff8e4312599.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.60.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:24:6d:4f:19:b5:19:5b:5c:8c:08:bf:e3:e3:c4:53:f2:8b: 7d:01:c2:62:9c:db:d5:54:2f:69:63:0d:fc:27:d1:e6:6e:95: 6e:5f:1a:fa:7e:7a:d8:42:a8:ae:21:33:83:06:5f:b0:64:8b: be:92:2f:20:cc:a2:6d:53:59:c3:a8:b3:ea:fe:98:36:63:d7: 24:9e:f2:98:bb:8d:a3:f3:8b:30:2b:57:92:ef:6f:d4:e2:b2: 64:85:ca:a2:16:9b:7d:58:1d:42:eb:5f:09:1a:6a:44:d6:70: 32:6f:52:59:67:02:ae:85:09:cf:aa:1a:5a:a5:1b:16:3b:a7: 71:51:66:05:a4:57:41:73:9d:eb:23:2a:02:89:06:b6:a2:ed: a4:ec:43:58:8b:bc:06:ca:a3:cc:d7:0e:e8:83:13:b3:09:c1: a3:02:75:31:d4:f8:2b:8d:25:d3:4b:53:c0:f4:a4:d8:23:f8: 78:e4:29:e6:8e:8b:ed:3b:00:63:05:5a:f6:dc:c3:23:1b:f9: 8f:ce:c0:c6:d7:1e:86:9f:45:85:a3:52:60:aa:0b:0a:ab:e0: 0a:f4:f9:c2:2e:25:30:8b:cd:5c:a8:c3:27:53:b2:1f:97:92: 2c:9d:63:c1:38:2c:0d:75:87:3e:80:fc:9f:f3:0e:45:70:62: 3c:5f:90:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmy+/1OaX57HFuBfgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQzMDE1MzUyNloXDTI1MDcyOTE1MzUyNlowLzEtMCsGA1UEAxMk YWM5YTM0MTUtNmZiMC00YWRiLWIzOWYtYTRjYjgyODU0NTgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/t/qmkMHvfAhTA1l1LXYoKAXsQO2d9IqpZh Jso9/K7LV489Z1ZtYCHFZlji4/1GLhkj5aaSSyISAEurHZEo7quH2c+N00YAmTwB Hi9G8IzwLYSIwIXUkDOpyapIxGDCM6vcONKjGG1yDev7Lt+ToDANG+qkOpVB8H6w yDPXqrMVXypN4yxToAfxxcOY+kbzTJkNde0sEI3ben49YbtO8yW77NYZAV/OON/P 8ZExXq2PNYmsjmBofLNm8St3NRX3GY4d22us/JWOMpcs+UfC7p4K7kpw9rrERLhc LbwxlexJZaOLXsvrR6AHTFeZEkx3fWkMcbIseYAGijP12ZbgTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM0Jz+lRP5pDdbal0WLZYzskrPgCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTMwYmFlYmItYjUyOC0z ZDZkLTllNDgtMmZmOGU0MzEyNTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDzQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADAkbU8ZtRlbXIwIv+PjxFPyi30BwmKc29VUL2ljDfwn0eZulW5fGvp+ ethCqK4hM4MGX7Bki76SLyDMom1TWcOos+r+mDZj1ySe8pi7jaPzizArV5Lvb9Ti smSFyqIWm31YHULrXwkaakTWcDJvUllnAq6FCc+qGlqlGxY7p3FRZgWkV0Fznesj KgKJBrai7aTsQ1iLvAbKo8zXDuiDE7MJwaMCdTHU+CuNJdNLU8D0pNgj+HjkKeaO i+07AGMFWvbcwyMb+Y/OwMbXHoafRYWjUmCqCwqr4Ar0+cIuJTCLzVyowydTsh+X kiydY8E4LA11hz6A/J/zDkVwYjxfkN8= -----END CERTIFICATE-----Generated at Wed May 7 23:33:46 2025 by rpki-client