$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa File: a86bb747-e58b-341e-a8ab-0edb1319f570.roa (raw, json) Hash identifier: oMd3fx5FwYwz3iSM6+nSCPQmalM0lVq2bIboAydQWvs= Subject key identifier: 57:47:FD:2B:0E:69:53:C1:09:6D:B5:3E:C1:B5:E7:0E:13:49:E2:72 Certificate issuer: /CN=c235459b-705a-42fb-9059-b6a9bf0c853f Certificate serial: 010D0C9F432858496B7ED4C1F0153E9EE3DA9938 Authority key identifier: 15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa Signing time: Sat 05 Apr 2025 01:00:47 +0000 ROA not before: Sat 05 Apr 2025 01:00:47 +0000 ROA not after: Fri 04 Jul 2025 01:00:47 +0000 asID: 393905 IP address blocks: 136.175.187.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:6b:7e:d4:c1:f0:15:3e:9e:e3:da:99:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c235459b-705a-42fb-9059-b6a9bf0c853f Validity Not Before: Apr 5 01:00:47 2025 GMT Not After : Jul 4 01:00:47 2025 GMT Subject: CN=1fd45074-93f1-4fba-a8be-378f2b6f08d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:8e:77:8e:8d:40:3d:98:31:d8:90:82:9f:81: 64:24:08:bf:5e:25:76:fb:a5:31:a5:4d:dd:8d:76: ea:95:f8:d0:bc:60:67:49:d3:88:46:28:37:74:70: c6:68:9e:2f:91:85:cc:7e:35:e6:a0:d0:de:4b:8e: 2a:06:88:38:b8:14:da:56:b3:fb:f1:55:31:cc:9f: be:bb:e3:bf:47:46:c2:2d:7e:22:8a:33:34:1e:92: 44:f9:8b:02:07:94:93:8c:cb:4a:a6:92:e3:16:3f: 88:cc:e1:97:c0:b5:61:fb:97:c4:51:1b:fd:e5:07: 2c:23:d0:68:36:b1:0c:37:c2:d3:ef:06:98:5f:ad: eb:90:d0:8d:53:ec:6c:17:54:5b:4d:81:a3:1e:c9: 31:d0:f4:89:3f:ee:55:bb:a8:2c:9c:5d:30:7b:69: 1a:39:bd:07:19:bf:4f:bd:9d:d0:be:eb:84:ba:de: 82:e5:9b:bd:fa:a6:5b:82:1a:42:0a:25:9a:6f:33: 15:98:54:b0:89:49:99:11:4f:0f:3b:a7:f3:65:9f: d3:aa:03:c5:59:51:0d:6b:d1:9e:41:75:7d:58:88: ce:6d:fa:99:d8:bb:28:8c:91:dc:86:dd:b9:16:0c: 8d:e4:5e:2d:7c:a0:08:ed:80:9f:24:47:b2:96:e9: 50:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:47:FD:2B:0E:69:53:C1:09:6D:B5:3E:C1:B5:E7:0E:13:49:E2:72 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/a86bb747-e58b-341e-a8ab-0edb1319f570.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f/c235459b-705a-42fb-9059-b6a9bf0c853f.crl X509v3 Authority Key Identifier: keyid:15:F5:EC:4A:5E:00:41:2A:E7:D7:5D:8E:11:BF:89:80:9E:D7:3E:83 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c235459b-705a-42fb-9059-b6a9bf0c853f.cer sbgp-ipAddrBlock: critical IPv4: 136.175.187.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:4b:fe:db:0d:a2:1a:21:0f:38:73:e6:f5:ca:45:fe:57:c6: 1b:6c:f0:ad:23:b9:aa:5e:ed:77:18:4c:a1:1b:28:bb:59:6c: 84:a8:55:50:26:16:36:52:d4:a5:34:4c:77:ed:42:6d:80:9e: af:1d:fd:d1:10:f4:5b:a1:30:d0:4f:26:0f:0e:dd:c3:a8:b4: 15:83:39:c2:70:3d:db:f4:cd:b2:e2:16:55:72:3d:05:4f:52: a8:65:0c:e2:fd:5e:13:a5:ed:4e:7a:cf:a6:42:0d:90:4b:65: 7f:28:23:16:19:da:6b:a6:85:97:7b:9a:fa:e1:f1:10:87:90: f7:a9:33:01:5f:fb:85:90:a1:1b:f0:72:61:3e:de:cc:fa:fb: 4f:c0:75:41:4f:75:bd:c3:ba:00:78:8a:6a:ee:81:15:e7:a8: d7:47:c5:ae:90:d5:07:c3:bd:15:9c:af:c5:dd:d1:ff:c3:9b: 9b:89:a4:5a:88:c4:66:5c:01:56:61:7a:c6:82:67:45:63:af: 84:bc:63:8b:10:28:e1:f3:85:0a:f3:f6:50:9d:4f:33:32:9c: 66:21:80:26:52:b9:fc:b7:1b:36:c0:d7:95:8e:b4:74:d7:a4: e0:4a:00:0f:d0:73:36:50:80:bd:bf:67:71:44:3d:83:d1:f1: 15:24:89:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrftTB8BU+nuPamTgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYzIzNTQ1OWItNzA1YS00MmZiLTkwNTktYjZhOWJmMGM4 NTNmMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk MWZkNDUwNzQtOTNmMS00ZmJhLWE4YmUtMzc4ZjJiNmYwOGQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsY53jo1APZgx2JCCn4FkJAi/XiV2+6UxpU3d jXbqlfjQvGBnSdOIRig3dHDGaJ4vkYXMfjXmoNDeS44qBog4uBTaVrP78VUxzJ++ u+O/R0bCLX4iijM0HpJE+YsCB5STjMtKppLjFj+IzOGXwLVh+5fEURv95QcsI9Bo NrEMN8LT7waYX63rkNCNU+xsF1RbTYGjHskx0PSJP+5Vu6gsnF0we2kaOb0HGb9P vZ3QvuuEut6C5Zu9+qZbghpCCiWabzMVmFSwiUmZEU8PO6fzZZ/TqgPFWVENa9Ge QXV9WIjObfqZ2LsojJHcht25FgyN5F4tfKAI7YCfJEeylulQwQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFdH/SsOaVPBCW21PsG15w4TSeJyMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMjM1 NDU5Yi03MDVhLTQyZmItOTA1OS1iNmE5YmYwYzg1M2YvYTg2YmI3NDctZTU4Yi0z NDFlLWE4YWItMGVkYjEzMTlmNTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzIzNTQ1OWItNzA1YS00MmZiLTkw NTktYjZhOWJmMGM4NTNmL2MyMzU0NTliLTcwNWEtNDJmYi05MDU5LWI2YTliZjBj ODUzZi5jcmwwHwYDVR0jBBgwFoAUFfXsSl4AQSrn112OEb+JgJ7XPoMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMjM1NDU5Yi03MDVhLTQyZmItOTA1OS1iNmE5 YmYwYzg1M2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK+7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJL/tsNohohDzhz5vXKRf5Xxhts8K0juape7XcYTKEbKLtZbISoVVAm FjZS1KU0THftQm2Anq8d/dEQ9FuhMNBPJg8O3cOotBWDOcJwPdv0zbLiFlVyPQVP UqhlDOL9XhOl7U56z6ZCDZBLZX8oIxYZ2mumhZd7mvrh8RCHkPepMwFf+4WQoRvw cmE+3sz6+0/AdUFPdb3DugB4imrugRXnqNdHxa6Q1QfDvRWcr8Xd0f/Dm5uJpFqI xGZcAVZhesaCZ0Vjr4S8Y4sQKOHzhQrz9lCdTzMynGYhgCZSufy3GzbA15WOtHTX pOBKAA/QczZQgL2/Z3FEPYPR8RUkidg= -----END CERTIFICATE-----Generated at Sun Apr 27 00:12:11 2025 by rpki-client