$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bb37f61-9b3b-3488-ad98-5661b13c7d2a.roa File: 1bb37f61-9b3b-3488-ad98-5661b13c7d2a.roa (raw, json) Hash identifier: 9ejRN+fI6DgzxnTqXH32VQGukXL/ex/MKuC3d32vZGs= Subject key identifier: D5:2F:81:1E:18:38:42:27:DB:6E:8D:35:48:AB:C0:22:DA:6E:C4:58 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849063121E707D6306457497800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bb37f61-9b3b-3488-ad98-5661b13c7d2a.roa Signing time: Thu 27 Feb 2025 18:07:40 +0000 ROA not before: Thu 27 Feb 2025 18:07:40 +0000 ROA not after: Wed 28 May 2025 17:07:40 +0000 asID: 15083 IP address blocks: 136.0.12.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:06:31:21:e7:07:d6:30:64:57:49:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 27 18:07:40 2025 GMT Not After : May 28 17:07:40 2025 GMT Subject: CN=d1829b77-2a1e-41fb-b6c0-fa14f0dee73e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:ee:30:ad:62:f2:47:36:85:bf:74:f1:dc:84: 87:b4:05:dc:34:8e:92:5c:b8:0c:b3:17:5c:9c:b0: 0d:35:1b:ea:d8:56:94:19:d6:e2:b6:06:ca:2d:eb: 26:0f:89:cc:f7:69:bd:97:25:0e:ff:19:a7:f8:7e: 80:af:40:62:6d:c9:85:3e:20:f6:60:29:c8:ba:77: 4f:eb:3b:a4:21:85:e1:b4:bd:6b:22:c7:c7:f4:89: c7:af:78:a9:81:0f:d2:14:47:c6:75:c3:37:b4:3e: 0c:91:d5:5d:40:9a:42:13:a2:7f:fa:ef:80:cb:3e: 20:ed:a6:8d:37:4e:29:03:4e:a6:9a:ae:9e:4e:1a: 62:b1:00:96:1e:54:88:e9:fb:8d:7a:45:ee:ac:7f: 30:cf:65:24:7c:31:98:6b:b0:ad:13:b3:0d:26:98: df:3a:10:56:f7:20:76:82:e8:5a:7b:2f:de:40:1b: cd:9b:c2:9a:11:24:dc:bf:83:59:0a:d5:2e:95:4a: f6:e7:33:16:68:f0:b7:d7:e9:08:dc:bd:11:18:de: a7:5c:01:4b:8e:49:c7:d8:1a:80:03:5d:6b:38:ed: 64:49:ca:69:41:67:70:3f:a7:bb:de:6c:4e:24:91: 22:c7:44:34:c2:0a:d0:64:83:11:99:a1:ff:66:46: e3:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:2F:81:1E:18:38:42:27:DB:6E:8D:35:48:AB:C0:22:DA:6E:C4:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bb37f61-9b3b-3488-ad98-5661b13c7d2a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.12.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6e:f9:52:8d:50:cb:4c:9f:91:d9:0c:17:97:7d:98:03:33:88: 20:0c:ba:57:23:f4:60:d6:a7:94:e3:14:a8:48:8d:59:a8:6d: 2c:53:c4:5e:88:ad:a3:9a:51:d4:08:0f:ca:82:40:0a:e4:bc: 05:e9:79:b4:7d:3c:4e:23:5e:7a:5e:d3:58:35:34:8f:23:a9: ce:26:76:9e:2e:37:5d:85:14:d2:ce:ec:a6:e9:33:8a:d0:53: 04:8c:0c:64:8e:5d:9b:f5:cf:07:74:f5:b9:f3:71:3e:aa:b2: e8:cc:af:ee:77:cc:8d:e4:79:6b:8a:80:63:38:d0:ff:a2:6c: 2f:34:e0:fa:ad:ba:44:8d:a4:0f:7c:c8:ae:d5:37:70:3b:a1: 53:c2:ef:c4:af:71:35:3e:c0:73:c7:dc:ed:be:a7:bf:00:94: 95:bb:7c:67:36:83:0f:97:8b:d6:82:c4:3f:7c:db:5b:d0:c5: 5f:7a:20:1f:0f:99:7a:31:c9:38:ef:c8:e0:65:2c:99:6e:de: e8:3b:8d:03:43:2d:69:4b:d4:b2:1a:8e:88:12:cf:fc:f9:e7: 43:74:5f:1f:dd:e7:ff:5e:2f:61:12:7b:82:c3:58:7b:b6:ba: 4b:d5:6e:33:1f:a9:20:cd:f2:04:f5:77:12:73:20:df:80:ac: ed:b5:12:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGMSHnB9YwZFdJeAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyNzE4MDc0MFoXDTI1MDUyODE3MDc0MFowLzEtMCsGA1UEAxMk ZDE4MjliNzctMmExZS00MWZiLWI2YzAtZmExNGYwZGVlNzNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiu4wrWLyRzaFv3Tx3ISHtAXcNI6SXLgMsxdc nLANNRvq2FaUGdbitgbKLesmD4nM92m9lyUO/xmn+H6Ar0BibcmFPiD2YCnIundP 6zukIYXhtL1rIsfH9InHr3ipgQ/SFEfGdcM3tD4MkdVdQJpCE6J/+u+Ayz4g7aaN N04pA06mmq6eThpisQCWHlSI6fuNekXurH8wz2UkfDGYa7CtE7MNJpjfOhBW9yB2 guhaey/eQBvNm8KaESTcv4NZCtUulUr25zMWaPC31+kI3L0RGN6nXAFLjknH2BqA A11rOO1kScppQWdwP6e73mxOJJEix0Q0wgrQZIMRmaH/Zkbj0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUvgR4YOEIn226NNUirwCLabsRYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWJiMzdmNjEtOWIzYi0z NDg4LWFkOTgtNTY2MWIxM2M3ZDJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiAAMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG75Uo1Qy0yfkdkMF5d9mAMziCAMulcj9GDWp5TjFKhIjVmobSxTxF6I raOaUdQID8qCQArkvAXpebR9PE4jXnpe01g1NI8jqc4mdp4uN12FFNLO7KbpM4rQ UwSMDGSOXZv1zwd09bnzcT6qsujMr+53zI3keWuKgGM40P+ibC804PqtukSNpA98 yK7VN3A7oVPC78SvcTU+wHPH3O2+p78AlJW7fGc2gw+Xi9aCxD9821vQxV96IB8P mXoxyTjvyOBlLJlu3ug7jQNDLWlL1LIajogSz/z550N0Xx/d5/9eL2ESe4LDWHu2 ukvVbjMfqSDN8gT1dxJzIN+ArO21EvA= -----END CERTIFICATE-----Generated at Sat Apr 26 20:22:55 2025 by rpki-client