$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa File: d2f12902-fe70-389d-ab44-0722a47d21f8.roa (raw, json) Hash identifier: tAMYzlcP+k8axy7tWG/fM/v0Qo9dpZNyC8av5Goyjus= Subject key identifier: A3:E1:ED:08:76:78:61:E3:1F:7D:DC:03:CC:5C:FB:DF:DC:BC:F7:47 Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D5ED84072CFEFF92A800 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.49.0.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d5:ed:84:07:2c:fe:ff:92:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=fb98cd3c-9f8d-4df3-8689-143b76aed7e7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:38:61:5c:80:0a:08:93:70:b1:03:a1:19:27: e2:c4:80:04:b4:28:0c:17:38:d8:4f:2c:d1:03:1c: 37:82:93:0a:f4:de:13:dc:5c:78:f1:fb:d2:a3:22: 3c:1d:bd:af:10:da:58:5a:01:9f:3f:a9:e2:dd:0d: e8:e4:d4:1a:9e:bc:fe:2b:3d:7b:9d:3d:41:d5:bb: c1:f2:3a:3d:3b:07:6b:4d:a0:d2:9f:22:df:44:3d: f6:4b:b7:21:e5:88:6f:e5:1c:21:48:64:c7:42:f3: c3:ef:92:3c:44:86:a9:19:3c:ff:be:3e:6c:65:ce: d2:dc:4c:95:c5:ac:72:be:03:26:fa:5e:39:3c:79: a0:d1:b1:ce:b1:33:19:41:23:57:be:9a:37:bc:49: 48:e1:85:29:8e:c9:01:02:b8:80:b7:d8:ba:49:45: 03:75:c2:41:99:2d:6d:9a:10:15:e3:94:07:e4:94: 96:30:ea:96:7f:8a:51:f4:cf:aa:e5:5a:48:e5:7e: 21:7e:54:f4:70:f8:52:9a:06:1e:d7:46:89:5d:04: ea:da:e1:c1:f2:b8:ff:52:c8:d7:99:f6:e9:80:31: 80:84:07:6f:48:04:49:57:18:6c:38:15:26:c1:60: a2:4d:30:66:45:32:ea:92:c3:c4:94:be:5b:89:e3: 77:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E1:ED:08:76:78:61:E3:1F:7D:DC:03:CC:5C:FB:DF:DC:BC:F7:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/d2f12902-fe70-389d-ab44-0722a47d21f8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.49.0.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:34:f6:f5:d9:01:a5:4d:1a:26:55:19:34:05:61:d8:c0:2a: 38:ff:98:25:22:27:1b:1b:e8:56:81:29:d9:14:39:f6:a9:bb: ba:d9:7c:b9:f1:70:67:d7:f8:ec:5b:97:63:2f:e9:b4:6b:79: ec:99:62:e5:f3:78:d2:3f:80:16:0f:92:97:69:3a:7b:f2:85: fd:8a:2e:74:73:17:3e:65:ea:e8:d1:20:0d:3d:a2:89:f2:46: dd:1f:f7:34:d5:71:23:1a:f4:aa:0a:29:6e:52:19:55:5a:7c: 15:b0:80:a0:92:b1:0d:54:e8:54:31:f8:d5:31:f6:31:17:2b: 9f:1f:bb:56:61:47:b6:4a:94:a2:99:8d:f9:ec:79:e9:06:3f: e1:e9:8b:5d:d7:68:3c:c8:8b:a3:7b:a8:88:44:22:0c:62:72: f8:fd:db:3f:a5:ea:a3:97:16:e2:6f:4e:a4:1b:fc:c3:57:10: 2d:91:8e:1c:c5:20:57:4d:fa:54:cd:c2:ea:6f:7d:80:c8:0b: d9:07:05:50:d5:03:d0:9d:55:47:13:ab:82:dd:27:e4:56:0e: 14:33:03:4a:30:c2:10:4b:c6:4f:f5:65:cf:7a:48:f0:6b:48: c0:90:c8:ae:2e:00:7d:e6:37:7c:2c:5d:5d:e1:47:38:6c:65: 35:44:52:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdXthAcs/v+SqAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk ZmI5OGNkM2MtOWY4ZC00ZGYzLTg2ODktMTQzYjc2YWVkN2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9DhhXIAKCJNwsQOhGSfixIAEtCgMFzjYTyzR Axw3gpMK9N4T3Fx48fvSoyI8Hb2vENpYWgGfP6ni3Q3o5NQanrz+Kz17nT1B1bvB 8jo9OwdrTaDSnyLfRD32S7ch5Yhv5RwhSGTHQvPD75I8RIapGTz/vj5sZc7S3EyV xaxyvgMm+l45PHmg0bHOsTMZQSNXvpo3vElI4YUpjskBAriAt9i6SUUDdcJBmS1t mhAV45QH5JSWMOqWf4pR9M+q5VpI5X4hflT0cPhSmgYe10aJXQTq2uHB8rj/UsjX mfbpgDGAhAdvSARJVxhsOBUmwWCiTTBmRTLqksPElL5bieN3ZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKPh7Qh2eGHjH33cA8xc+9/cvPdHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZDJmMTI5MDItZmU3MC0z ODlkLWFiNDQtMDcyMmE0N2QyMWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDEAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKA09vXZAaVNGiZVGTQFYdjAKjj/mCUiJxsb6FaBKdkUOfapu7rZfLnx cGfX+Oxbl2Mv6bRreeyZYuXzeNI/gBYPkpdpOnvyhf2KLnRzFz5l6ujRIA09oony Rt0f9zTVcSMa9KoKKW5SGVVafBWwgKCSsQ1U6FQx+NUx9jEXK58fu1ZhR7ZKlKKZ jfnseekGP+Hpi13XaDzIi6N7qIhEIgxicvj92z+l6qOXFuJvTqQb/MNXEC2RjhzF IFdN+lTNwupvfYDIC9kHBVDVA9CdVUcTq4LdJ+RWDhQzA0owwhBLxk/1Zc96SPBr SMCQyK4uAH3mN3wsXV3hRzhsZTVEUlA= -----END CERTIFICATE-----Generated at Fri May 9 22:02:58 2025 by rpki-client