$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa File: dd162963-40bb-3447-bf78-f7c3eb7992b7.roa (raw, json) Hash identifier: s253LuVXRzCPS3wPjKmydeCW3snIcY7S1XvkPwD/vuU= Subject key identifier: B9:73:48:9A:9F:BE:DF:4F:CA:17:C3:CA:E8:3B:66:8A:42:9D:8F:5C Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339D893B2203124A0576780 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.52.128.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 May 2025 15:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:d8:93:b2:20:31:24:a0:57:67:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=c43a5c2a-22d6-4dca-987c-d502f77bbeeb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:6e:4b:c9:3a:1c:84:32:cd:30:35:1d:59:6a: 8b:42:bf:85:11:d7:33:4e:c8:56:25:f5:33:db:14: 99:ac:97:df:7a:08:ff:62:59:c2:d4:55:9a:7e:a7: f8:10:ef:fd:c4:5b:96:10:98:51:ed:94:72:c3:00: a7:92:b2:1f:56:6c:fa:64:fc:5d:ce:58:88:de:2c: ba:53:40:3b:12:af:d3:5a:81:8d:77:6d:c2:a4:d5: d2:37:4f:83:e4:50:0c:d4:a8:fd:dd:2e:af:c5:8a: 65:19:74:34:19:78:69:e1:b4:44:4d:71:9b:a9:c7: 14:67:a1:51:4e:27:b7:df:af:f9:3f:f2:79:cb:dd: 3d:b3:a6:aa:be:c0:80:8c:25:29:37:36:e9:23:ca: 1a:f5:f9:b8:e9:b3:89:fe:61:63:f5:38:ae:d0:0e: 91:5b:6a:ec:e7:67:a4:22:e4:3f:8a:7c:56:93:bd: f2:55:4d:2c:bf:fd:d3:88:fc:b4:73:b1:4e:48:45: 82:c7:98:0e:4d:33:0b:1a:97:4c:17:cb:cb:35:1c: 95:36:f4:35:68:fd:89:28:d9:0a:f0:8d:b9:21:a2: e0:44:a4:34:7e:1d:81:9d:59:bd:b8:b9:fa:04:21: 5c:43:0c:a3:0e:64:67:33:f2:ea:47:4e:be:cc:b5: fd:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:73:48:9A:9F:BE:DF:4F:CA:17:C3:CA:E8:3B:66:8A:42:9D:8F:5C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/dd162963-40bb-3447-bf78-f7c3eb7992b7.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.52.128.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:29:26:6d:f0:d7:11:de:41:cb:af:6c:c3:d5:e9:03:ec:ca: 1b:f4:89:f4:2a:33:47:6e:42:1d:ee:ea:80:9b:e3:c8:06:e6: 16:63:e0:b0:32:80:e2:f3:98:fc:70:97:bc:ac:31:bf:b4:80: fd:fa:d1:9b:ed:d2:a6:cd:77:c8:10:6a:ae:76:1c:fa:4f:05: 4d:f5:58:91:5a:0a:57:30:65:a5:6d:13:e8:05:b7:68:18:b4: 8d:7e:c5:b1:b7:d4:f0:71:ac:4e:d3:bc:12:7f:7a:28:bb:fb: b5:30:7c:75:09:6a:dc:1c:ca:2b:ad:c1:bb:0b:53:0b:7b:89: cf:e9:86:78:23:dd:56:f8:a6:5c:8d:f4:1a:cb:e6:ed:9f:ea: 27:99:d2:c7:c4:65:c3:54:bd:9a:27:3a:7e:d6:43:15:2b:82: f2:77:b7:01:03:18:2d:b0:cf:ee:25:97:89:69:84:00:40:4a: 3b:eb:9e:62:3b:8f:ab:ca:b9:07:82:4a:7e:87:da:4e:47:a9: 8e:b0:b1:c8:4d:1d:cb:3f:42:1b:08:19:c4:35:c8:8f:25:32: da:94:50:e0:9d:68:25:fb:1e:62:1c:85:52:da:79:34:cc:05: 32:de:f8:f5:54:97:0a:0d:e0:b7:b0:5f:64:b3:f6:e7:5c:be: 3d:04:4c:ff -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOdiTsiAxJKBXZ4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk YzQzYTVjMmEtMjJkNi00ZGNhLTk4N2MtZDUwMmY3N2JiZWViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhm5LyTochDLNMDUdWWqLQr+FEdczTshWJfUz 2xSZrJffegj/YlnC1FWafqf4EO/9xFuWEJhR7ZRywwCnkrIfVmz6ZPxdzliI3iy6 U0A7Eq/TWoGNd23CpNXSN0+D5FAM1Kj93S6vxYplGXQ0GXhp4bRETXGbqccUZ6FR Tie336/5P/J5y909s6aqvsCAjCUpNzbpI8oa9fm46bOJ/mFj9Tiu0A6RW2rs52ek IuQ/inxWk73yVU0sv/3TiPy0c7FOSEWCx5gOTTMLGpdMF8vLNRyVNvQ1aP2JKNkK 8I25IaLgRKQ0fh2BnVm9uLn6BCFcQwyjDmRnM/LqR06+zLX9zQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLlzSJqfvt9PyhfDyug7ZopCnY9cMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZGQxNjI5NjMtNDBiYi0z NDQ3LWJmNzgtZjdjM2ViNzk5MmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiDSAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADIpJm3w1xHeQcuvbMPV6QPsyhv0ifQqM0duQh3u6oCb48gG5hZj4LAy gOLzmPxwl7ysMb+0gP360Zvt0qbNd8gQaq52HPpPBU31WJFaClcwZaVtE+gFt2gY tI1+xbG31PBxrE7TvBJ/eii7+7UwfHUJatwcyiutwbsLUwt7ic/phngj3Vb4plyN 9BrL5u2f6ieZ0sfEZcNUvZonOn7WQxUrgvJ3twEDGC2wz+4ll4lphABASjvrnmI7 j6vKuQeCSn6H2k5HqY6wschNHcs/QhsIGcQ1yI8lMtqUUOCdaCX7HmIchVLaeTTM BTLe+PVUlwoN4LewX2Sz9udcvj0ETP8= -----END CERTIFICATE-----Generated at Thu May 8 06:46:28 2025 by rpki-client