$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa File: 96c60abd-645f-326f-b5a5-66908173a9c0.roa (raw, json) Hash identifier: eha75SrGrGc/yL8KRGmE8MbXylACWJ3pxPTSNnqHiPM= Subject key identifier: 70:CC:CE:07:9D:89:63:BD:3B:E1:C7:06:56:3C:8C:1D:F3:2D:6E:9D Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F43285849B2FBFD6EEEACF1CD8C773380 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa Signing time: Wed 30 Apr 2025 15:35:26 +0000 ROA not before: Wed 30 Apr 2025 15:35:26 +0000 ROA not after: Tue 29 Jul 2025 15:35:26 +0000 asID: 16591 IP address blocks: 136.52.160.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:b2:fb:fd:6e:ee:ac:f1:cd:8c:77:33:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 30 15:35:26 2025 GMT Not After : Jul 29 15:35:26 2025 GMT Subject: CN=76e23afe-af54-44cc-b244-37e2f395cfd4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:33:ff:44:e6:cc:4d:07:c3:a5:d1:ca:45:d0: 83:97:42:72:c8:67:19:a0:62:c9:ea:ec:98:4a:0c: 90:0f:10:d6:a7:a1:83:d6:0f:d4:9f:49:f8:0e:b3: af:ba:d4:5e:0a:27:57:40:06:c8:5f:b5:50:1f:f3: c1:d5:35:fd:c0:e1:b7:4b:3c:f0:ce:45:20:b8:cd: 68:ae:13:de:30:ef:d8:88:39:af:1f:04:fb:bb:57: ce:42:0c:e9:05:aa:aa:44:96:42:3f:a3:d5:98:7e: 29:11:88:1a:e4:08:52:4b:43:fe:8c:78:ed:26:bf: 86:5e:70:87:7a:a3:a7:21:74:28:6d:5c:a2:17:37: 7f:22:8d:95:13:0b:25:24:0d:3c:0e:df:3c:79:25: 6c:56:9c:be:11:e0:bb:b7:d4:bc:c7:48:3b:b3:bb: 11:c1:46:72:ce:2d:5d:cc:88:00:ae:5d:da:21:69: dc:5b:bc:40:85:bd:f3:45:ad:e2:11:34:5b:dd:4d: 45:2c:62:cb:e6:32:f7:c9:53:ee:ef:47:f4:aa:f2: fc:09:cb:28:34:06:18:03:eb:36:c8:6f:2d:20:3d: 9d:7b:cc:5b:4c:43:5d:9f:d5:b9:64:4e:cb:1e:e8: da:21:48:3c:e2:a2:3a:24:a5:70:8a:d3:28:c0:02: fd:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:CC:CE:07:9D:89:63:BD:3B:E1:C7:06:56:3C:8C:1D:F3:2D:6E:9D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/96c60abd-645f-326f-b5a5-66908173a9c0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.160.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:fb:6f:65:ba:e7:4b:3d:16:ba:ea:71:9e:30:41:72:09:98: 1a:18:7d:dc:14:14:8e:9e:3d:e6:15:7b:10:05:ed:16:bc:ad: 67:4b:e8:41:2b:08:f1:40:34:d7:26:52:13:b8:39:b6:33:e3: aa:a5:b0:5a:5f:ef:95:b0:f2:9f:75:aa:28:95:e5:b4:90:44: 3f:34:96:41:d6:40:35:9c:fc:be:fb:79:f4:39:58:1a:a0:83: 7f:31:9e:e6:21:70:fe:d9:24:fd:2e:d3:97:05:5b:9e:ff:c7: 99:24:21:97:1f:7e:cc:a0:51:df:a3:e3:ee:cf:1e:31:69:3f: 36:4b:fc:e1:c6:eb:ba:64:08:88:d0:c5:c5:19:67:71:77:27: 7b:54:89:e1:40:e2:eb:50:6f:db:7a:b5:55:07:07:77:47:59: 73:86:f5:74:27:10:81:f5:a1:93:77:69:a3:8d:b5:1e:8d:86: 51:c4:49:eb:68:0f:82:a8:d6:96:24:52:da:72:5c:bb:2f:d9: e4:61:55:60:df:d6:e2:49:cb:03:86:c5:77:3f:f7:ca:8c:9d: 2b:c8:06:5c:05:f3:d7:dd:ee:3b:19:8f:c8:6f:6b:7a:97:70: 7b:fe:ec:e6:e3:83:d3:1e:2b:0a:64:23:47:2d:0d:c1:82:bc: 9f:35:52:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmy+/1u7qzxzYx3M4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQzMDE1MzUyNloXDTI1MDcyOTE1MzUyNlowLzEtMCsGA1UEAxMk NzZlMjNhZmUtYWY1NC00NGNjLWIyNDQtMzdlMmYzOTVjZmQ0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjP/RObMTQfDpdHKRdCDl0JyyGcZoGLJ6uyY SgyQDxDWp6GD1g/Un0n4DrOvutReCidXQAbIX7VQH/PB1TX9wOG3SzzwzkUguM1o rhPeMO/YiDmvHwT7u1fOQgzpBaqqRJZCP6PVmH4pEYga5AhSS0P+jHjtJr+GXnCH eqOnIXQobVyiFzd/Io2VEwslJA08Dt88eSVsVpy+EeC7t9S8x0g7s7sRwUZyzi1d zIgArl3aIWncW7xAhb3zRa3iETRb3U1FLGLL5jL3yVPu70f0qvL8CcsoNAYYA+s2 yG8tID2de8xbTENdn9W5ZE7LHujaIUg84qI6JKVwitMowAL9kQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHDMzgediWO9O+HHBlY8jB3zLW6dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvOTZjNjBhYmQtNjQ1Zi0z MjZmLWI1YTUtNjY5MDgxNzNhOWMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDSgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABr7b2W650s9FrrqcZ4wQXIJmBoYfdwUFI6ePeYVexAF7Ra8rWdL6EEr CPFANNcmUhO4ObYz46qlsFpf75Ww8p91qiiV5bSQRD80lkHWQDWc/L77efQ5WBqg g38xnuYhcP7ZJP0u05cFW57/x5kkIZcffsygUd+j4+7PHjFpPzZL/OHG67pkCIjQ xcUZZ3F3J3tUieFA4utQb9t6tVUHB3dHWXOG9XQnEIH1oZN3aaONtR6NhlHESeto D4Ko1pYkUtpyXLsv2eRhVWDf1uJJywOGxXc/98qMnSvIBlwF89fd7jsZj8hva3qX cHv+7Objg9MeKwpkI0ctDcGCvJ81Ulg= -----END CERTIFICATE-----Generated at Thu May 8 02:21:08 2025 by rpki-client