$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3341c84d-2e3e-3bd9-96f9-8aefd0b44c7a.roa File: 3341c84d-2e3e-3bd9-96f9-8aefd0b44c7a.roa (raw, json) Hash identifier: 94cAh2wRfjlrwuOxYsDOn3Vid5eaSXNZ+iRai3h/e3Y= Subject key identifier: 56:26:A6:E7:7B:A7:13:FE:6F:F7:AC:8B:F1:7B:66:78:DD:31:CD:E7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849849EF6426FC338BD8A63D140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3341c84d-2e3e-3bd9-96f9-8aefd0b44c7a.roa Signing time: Mon 14 Apr 2025 01:00:43 +0000 ROA not before: Mon 14 Apr 2025 01:00:43 +0000 ROA not after: Sun 13 Jul 2025 01:00:43 +0000 asID: 11798 IP address blocks: 136.0.175.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:84:9e:f6:42:6f:c3:38:bd:8a:63:d1:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 14 01:00:43 2025 GMT Not After : Jul 13 01:00:43 2025 GMT Subject: CN=8da19e64-397e-4114-add0-7ff6e397ab31 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:d8:eb:96:d2:58:53:78:08:e2:10:64:31:f3: 97:60:33:47:86:f2:a2:40:45:3b:2d:cc:e4:3c:6f: 15:0c:61:48:ce:4b:88:ad:86:a1:c0:1d:e5:e4:6d: 5a:fa:9d:89:a3:b0:1b:c3:19:81:8d:51:8d:e8:aa: 46:ba:79:c9:77:a2:e9:a2:d3:38:85:3f:86:0d:3b: de:34:bb:27:02:9b:e9:89:6d:19:0a:13:5e:1c:8b: 74:57:04:bf:90:d4:c2:40:e9:f8:75:bd:9d:bf:b6: 91:52:f6:c7:e7:92:f7:0a:79:f1:09:73:c9:ac:8f: 5e:27:19:47:e4:30:dc:a4:30:42:e5:a3:43:8a:09: b8:7d:82:55:72:ee:88:57:86:b8:52:4f:52:f2:ad: 03:1d:35:63:ea:22:3b:74:e0:a1:1c:95:49:83:f5: 25:35:b8:56:a2:0c:cf:a9:41:6e:05:9f:e5:b6:b6: 17:62:f3:5b:0a:64:ff:b4:a9:b1:e4:02:3f:71:ad: 9b:8e:78:f7:1b:97:40:37:a6:f0:95:73:1c:82:e1: 4f:5f:19:33:a5:39:dd:69:1e:ab:1e:c5:18:be:33: 6d:ad:9e:ea:ba:58:a1:4c:58:3d:04:b0:97:4c:3f: 70:e7:37:37:c8:b3:4e:4f:9b:10:21:9f:5f:7b:b7: 5e:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 56:26:A6:E7:7B:A7:13:FE:6F:F7:AC:8B:F1:7B:66:78:DD:31:CD:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3341c84d-2e3e-3bd9-96f9-8aefd0b44c7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.175.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 24:2b:c3:d1:67:02:94:05:79:48:6f:29:40:ab:8c:f3:33:0c: 23:da:c1:a5:bb:a0:08:49:a6:0f:2f:ac:70:ab:6d:9c:2e:4d: 86:8b:29:5b:08:81:ef:07:76:c6:54:43:43:b9:63:6e:36:6a: 45:a5:6c:f0:b8:09:b6:9c:18:fa:4b:3d:ba:44:84:4d:ab:66: d0:bd:95:6c:d2:f5:97:15:ef:7d:da:ca:aa:21:3d:53:b1:4f: 93:4b:b0:98:cd:05:2a:da:ba:8d:1c:18:50:5d:82:40:0c:6d: 18:40:f4:ba:d6:20:bc:a6:70:2d:e7:32:6f:15:a5:c3:99:78: d8:cf:83:bd:e6:b4:a9:25:b9:54:f8:7e:46:ba:c0:ed:b5:ca: 07:65:b0:36:21:77:10:a9:2f:bf:1e:34:b8:d0:eb:99:1a:df: 37:ef:98:86:d3:47:c5:45:bd:f6:e0:85:ad:19:79:9e:1c:01: 10:0f:c2:48:09:ab:60:19:4f:8c:d9:15:09:32:53:09:55:5b: 54:79:2b:21:c9:3b:fb:fd:6f:c0:89:45:95:06:b4:bc:6d:bb: c2:e7:59:83:bf:cc:e6:bb:2c:b7:02:85:e9:54:ee:dd:76:81: 24:68:7f:8f:7b:da:a5:00:93:b4:77:ed:b3:72:e1:91:4c:20: 8f:25:30:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmEnvZCb8M4vYpj0UAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNDAxMDA0M1oXDTI1MDcxMzAxMDA0M1owLzEtMCsGA1UEAxMk OGRhMTllNjQtMzk3ZS00MTE0LWFkZDAtN2ZmNmUzOTdhYjMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2tjrltJYU3gI4hBkMfOXYDNHhvKiQEU7Lczk PG8VDGFIzkuIrYahwB3l5G1a+p2Jo7AbwxmBjVGN6KpGunnJd6LpotM4hT+GDTve NLsnApvpiW0ZChNeHIt0VwS/kNTCQOn4db2dv7aRUvbH55L3CnnxCXPJrI9eJxlH 5DDcpDBC5aNDigm4fYJVcu6IV4a4Uk9S8q0DHTVj6iI7dOChHJVJg/UlNbhWogzP qUFuBZ/ltrYXYvNbCmT/tKmx5AI/ca2bjnj3G5dAN6bwlXMcguFPXxkzpTndaR6r HsUYvjNtrZ7qulihTFg9BLCXTD9w5zc3yLNOT5sQIZ9fe7deIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFYmpud7pxP+b/esi/F7ZnjdMc3nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzM0MWM4NGQtMmUzZS0z YmQ5LTk2ZjktOGFlZmQwYjQ0YzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACQrw9FnApQFeUhvKUCrjPMzDCPawaW7oAhJpg8vrHCrbZwuTYaLKVsI ge8HdsZUQ0O5Y242akWlbPC4CbacGPpLPbpEhE2rZtC9lWzS9ZcV733ayqohPVOx T5NLsJjNBSrauo0cGFBdgkAMbRhA9LrWILymcC3nMm8VpcOZeNjPg73mtKkluVT4 fka6wO21ygdlsDYhdxCpL78eNLjQ65ka3zfvmIbTR8VFvfbgha0ZeZ4cARAPwkgJ q2AZT4zZFQkyUwlVW1R5KyHJO/v9b8CJRZUGtLxtu8LnWYO/zOa7LLcChelU7t12 gSRof4972qUAk7R37bNy4ZFMII8lMJA= -----END CERTIFICATE-----Generated at Sun Apr 27 09:16:39 2025 by rpki-client