$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa File: e5103ed5-341b-3991-b338-56f2db1f3a9e.roa (raw, json) Hash identifier: +bSJ2wxld2wAsXJ8S1wcet7pdicIh0MBaPWWWL5As64= Subject key identifier: B2:35:DB:74:B9:42:C8:C1:5F:56:70:8F:D5:8A:E4:91:9F:BF:0A:EA Certificate issuer: /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Certificate serial: 010D0C9F432858498339CFB337A3AD517CBDA300 Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa Signing time: Sun 13 Apr 2025 13:01:01 +0000 ROA not before: Sun 13 Apr 2025 13:01:01 +0000 ROA not after: Sat 12 Jul 2025 13:01:01 +0000 asID: 16591 IP address blocks: 136.32.208.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 10 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:83:39:cf:b3:37:a3:ad:51:7c:bd:a3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e Validity Not Before: Apr 13 13:01:01 2025 GMT Not After : Jul 12 13:01:01 2025 GMT Subject: CN=2eb43ba0-3504-44e4-bf91-82b9f228f211 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:05:a0:ca:4a:8e:0e:a4:f4:d9:72:b1:bf:df: 6f:8a:2c:12:d1:0e:1c:70:ce:bc:14:b0:02:eb:0a: bf:a7:a8:8d:d3:f4:10:2e:eb:61:df:92:a3:d8:c2: 59:89:ca:a8:21:45:8f:28:74:d0:f9:80:67:52:e5: 2b:bb:76:53:db:49:f9:2b:8b:aa:27:a4:d0:c2:fa: bc:8a:f5:51:b2:5f:96:4b:30:c4:b7:68:a4:86:6c: fa:34:d5:f0:8b:75:83:49:b7:58:70:5c:e6:8a:87: ab:12:2f:5b:0a:3c:e6:58:46:de:cb:ac:53:4c:3c: 84:cd:11:31:ab:1f:37:40:b4:91:8d:78:7d:63:e9: ac:b5:d5:37:80:24:d5:dd:95:e1:45:6c:0b:b1:4f: 3b:7e:79:bf:dd:f9:90:b2:05:ed:c4:43:57:ba:ac: 85:b4:ce:99:1f:f7:d8:6e:66:7f:07:d3:04:7b:92: db:88:4f:c5:5e:f2:24:1a:e9:be:99:15:27:ae:ad: 11:1e:01:a6:11:2d:aa:b6:73:cb:8a:9c:79:28:12: b9:dd:d7:14:eb:e5:6f:f7:93:17:2d:59:46:94:ae: c3:63:f2:2b:a2:ab:2c:30:17:ab:c0:f5:75:fc:d8: 17:cb:12:2a:dc:32:d9:ce:90:38:a6:83:96:5f:02: ba:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:35:DB:74:B9:42:C8:C1:5F:56:70:8F:D5:8A:E4:91:9F:BF:0A:EA Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e5103ed5-341b-3991-b338-56f2db1f3a9e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl X509v3 Authority Key Identifier: keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer sbgp-ipAddrBlock: critical IPv4: 136.32.208.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:fa:15:26:f2:64:73:f3:be:ec:60:5e:7d:a8:6c:66:08:64: 2b:b1:e9:ce:63:78:b2:54:0c:3c:a9:30:9d:1a:64:64:01:a1: b0:8b:00:3c:bc:f8:af:a3:99:c8:35:89:c0:17:f5:01:db:5d: dd:c4:eb:53:96:6f:cb:3e:ef:f6:8d:6b:49:61:f2:0d:06:39: 3f:50:13:d9:e3:49:ad:59:c5:72:35:de:00:ad:db:80:1e:9c: d0:82:66:ba:10:19:56:aa:e8:ab:20:60:f0:4e:6b:5c:9f:ce: 49:4f:0c:d2:df:61:43:30:66:45:6d:a0:23:ab:22:dc:cb:f2: 1e:0d:83:bf:1a:bf:bc:4e:84:98:56:51:3d:c5:81:3c:94:c7: dd:e4:7e:08:01:73:55:6f:92:22:d6:29:26:ea:59:47:0a:21: ea:4d:41:d2:0d:56:0d:de:f3:68:65:c2:a2:ef:6b:f7:ed:3c: 31:96:97:94:22:a4:65:f7:0d:8e:fb:80:ec:bf:a0:f5:8e:d3: 89:97:6b:a6:11:7c:f5:17:75:1c:0d:6b:4c:71:16:f4:c7:95: 8a:3f:ec:67:e2:1c:5b:e8:2a:e7:8b:ac:32:73:6e:29:3c:92: 1d:fe:b5:34:f9:dd:a5:9f:b7:57:d8:19:42:d0:ba:ef:01:72: 7a:55:93:f5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmDOc+zN6OtUXy9owAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh MzRlMB4XDTI1MDQxMzEzMDEwMVoXDTI1MDcxMjEzMDEwMVowLzEtMCsGA1UEAxMk MmViNDNiYTAtMzUwNC00NGU0LWJmOTEtODJiOWYyMjhmMjExMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswWgykqODqT02XKxv99viiwS0Q4ccM68FLAC 6wq/p6iN0/QQLuth35Kj2MJZicqoIUWPKHTQ+YBnUuUru3ZT20n5K4uqJ6TQwvq8 ivVRsl+WSzDEt2ikhmz6NNXwi3WDSbdYcFzmioerEi9bCjzmWEbey6xTTDyEzREx qx83QLSRjXh9Y+mstdU3gCTV3ZXhRWwLsU87fnm/3fmQsgXtxENXuqyFtM6ZH/fY bmZ/B9MEe5LbiE/FXvIkGum+mRUnrq0RHgGmES2qtnPLipx5KBK53dcU6+Vv95MX LVlGlK7DY/IroqssMBerwPV1/NgXyxIq3DLZzpA4poOWXwK6YwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLI123S5QsjBX1Zwj9WK5JGfvwrqMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2 NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZTUxMDNlZDUtMzQxYi0z OTkxLWIzMzgtNTZmMmRiMWYzYTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03 OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5 YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0 NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0 MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCDQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADv6FSbyZHPzvuxgXn2obGYIZCux6c5jeLJUDDypMJ0aZGQBobCLADy8 +K+jmcg1icAX9QHbXd3E61OWb8s+7/aNa0lh8g0GOT9QE9njSa1ZxXI13gCt24Ae nNCCZroQGVaq6KsgYPBOa1yfzklPDNLfYUMwZkVtoCOrItzL8h4Ng78av7xOhJhW UT3FgTyUx93kfggBc1VvkiLWKSbqWUcKIepNQdINVg3e82hlwqLva/ftPDGWl5Qi pGX3DY77gOy/oPWO04mXa6YRfPUXdRwNa0xxFvTHlYo/7GfiHFvoKueLrDJzbik8 kh3+tTT53aWft1fYGULQuu8BcnpVk/U= -----END CERTIFICATE-----Generated at Fri May 9 12:40:05 2025 by rpki-client