$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa File: 25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa (raw, json) Hash identifier: fqVXxdz8OkjJw7Iz4TDPyohjAN95JYq/lIC8u8HNgDI= Subject key identifier: A3:42:01:A8:FA:58:A2:2D:88:10:C2:E2:AC:47:4B:F8:88:D0:27:ED Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B504F6B105981B65D8C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 54252 IP address blocks: 136.0.90.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b5:04:f6:b1:05:98:1b:65:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=89293cd1-aeef-484f-a9b2-1266f9b52ff6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:00:ba:e9:88:aa:f4:d9:02:97:7b:09:1c:41: a6:8f:78:53:d1:41:77:4d:9b:3f:a6:f4:a1:df:eb: 0a:e5:59:3d:85:71:3d:0f:d3:d3:4d:15:f5:09:f2: 32:49:9f:ed:7a:bb:72:6c:4f:a7:70:56:e0:2c:29: 69:2b:87:dd:33:a2:cb:65:07:f0:56:ae:b4:b7:db: b8:40:78:e1:79:9f:fe:17:e6:9d:14:cd:68:bd:03: da:f0:bb:bd:6e:5b:9f:f6:e6:fa:3f:a5:4f:1a:13: cc:ec:1f:aa:81:41:53:86:92:87:a6:9c:b7:36:3a: 24:95:ef:e7:c1:dd:aa:c0:0b:a6:a4:00:5e:4e:34: 94:a5:95:8f:5d:9e:1a:3d:db:11:6b:c4:de:bc:9e: 2e:3d:41:56:30:d7:1c:2b:12:7d:4b:03:ef:2e:95: f1:f1:51:b7:03:e5:7e:3a:32:c7:86:80:4f:1f:7d: 1e:2a:29:f1:0b:c3:f5:a6:8e:d9:ce:a7:51:df:d0: 4b:ea:51:78:21:b0:82:6d:ae:16:e3:a5:2e:4c:84: 4b:4a:2d:f2:b8:b5:b7:bb:35:42:83:14:31:f0:ed: b4:58:21:ed:1f:0f:c1:3c:a4:38:bb:c6:d7:fa:e6: d9:e0:98:72:fe:c9:51:6f:e1:15:5f:db:c6:27:8c: 97:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:42:01:A8:FA:58:A2:2D:88:10:C2:E2:AC:47:4B:F8:88:D0:27:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/25dc7448-1b8d-3347-b46f-25b9a3d1f742.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.90.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:12:0d:66:a5:71:b4:3e:0d:27:75:3d:c7:56:06:4c:bc:1c: c2:81:f7:c8:0b:7d:f9:62:db:50:93:19:8b:53:57:af:e3:c3: f7:53:e9:f2:94:6e:28:c8:d5:e5:ac:5c:14:0e:46:e2:65:b2: 18:a2:c3:52:54:92:d8:b5:21:b7:33:f8:21:1c:fa:37:ae:ed: 16:0d:84:be:19:24:3d:2c:15:c6:8b:6f:31:e4:48:8c:3e:7b: 54:5a:56:3b:d9:50:f0:af:06:eb:bb:dc:14:1b:46:f5:68:0d: 92:b6:17:e0:aa:b7:80:f3:4d:1a:89:ed:07:5a:c6:78:b2:41: 3f:15:b8:4e:d4:6b:fb:e2:cc:16:df:b4:61:f7:61:88:9a:24: 4e:57:39:8e:5f:f5:0b:55:50:fc:da:c6:8a:1a:40:9c:ab:09: 98:a5:1d:e8:1a:0f:25:59:37:86:09:ae:a1:c7:12:52:88:37: 88:46:5d:88:ce:3c:78:0a:63:87:bc:2d:8a:0b:9a:28:a4:19: d5:90:02:9d:73:23:01:a2:ca:ab:e4:4d:da:5d:c3:02:af:b0: ab:55:b0:d9:21:88:0c:e2:4c:0f:68:49:af:66:0a:b3:62:98: 7d:67:4f:a5:1c:67:01:92:04:07:42:cd:30:bf:8c:82:7f:38: 6c:41:94:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLUE9rEFmBtl2MAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ODkyOTNjZDEtYWVlZi00ODRmLWE5YjItMTI2NmY5YjUyZmY2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5AC66Yiq9NkCl3sJHEGmj3hT0UF3TZs/pvSh 3+sK5Vk9hXE9D9PTTRX1CfIySZ/tertybE+ncFbgLClpK4fdM6LLZQfwVq60t9u4 QHjheZ/+F+adFM1ovQPa8Lu9bluf9ub6P6VPGhPM7B+qgUFThpKHppy3Njokle/n wd2qwAumpABeTjSUpZWPXZ4aPdsRa8TevJ4uPUFWMNccKxJ9SwPvLpXx8VG3A+V+ OjLHhoBPH30eKinxC8P1po7ZzqdR39BL6lF4IbCCba4W46UuTIRLSi3yuLW3uzVC gxQx8O20WCHtHw/BPKQ4u8bX+ubZ4Jhy/slRb+EVX9vGJ4yXSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKNCAaj6WKItiBDC4qxHS/iI0CftMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjVkYzc0NDgtMWI4ZC0z MzQ3LWI0NmYtMjViOWEzZDFmNzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoSDWalcbQ+DSd1PcdWBky8HMKB98gLffli21CTGYtTV6/jw/dT6fKU bijI1eWsXBQORuJlshiiw1JUkti1Ibcz+CEc+jeu7RYNhL4ZJD0sFcaLbzHkSIw+ e1RaVjvZUPCvBuu73BQbRvVoDZK2F+Cqt4DzTRqJ7QdaxniyQT8VuE7Ua/vizBbf tGH3YYiaJE5XOY5f9QtVUPzaxooaQJyrCZilHegaDyVZN4YJrqHHElKIN4hGXYjO PHgKY4e8LYoLmiikGdWQAp1zIwGiyqvkTdpdwwKvsKtVsNkhiAziTA9oSa9mCrNi mH1nT6UcZwGSBAdCzTC/jIJ/OGxBlFs= -----END CERTIFICATE-----Generated at Sat Apr 26 16:09:26 2025 by rpki-client