$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3cfcafa2-3d7d-32b3-8a28-373974c1c786.roa File: 3cfcafa2-3d7d-32b3-8a28-373974c1c786.roa (raw, json) Hash identifier: 2covEl5XoolpFe/t57TeCjMqMYFe4ZrMv4qs/5IfN5c= Subject key identifier: 03:81:D3:81:0C:E3:A6:C5:7C:96:9C:96:F1:9F:AE:4B:25:9F:86:AD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584911A006D03F6910B3B4D32DC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3cfcafa2-3d7d-32b3-8a28-373974c1c786.roa Signing time: Mon 03 Mar 2025 20:25:00 +0000 ROA not before: Mon 03 Mar 2025 20:25:00 +0000 ROA not after: Sun 01 Jun 2025 19:25:00 +0000 asID: 401152 IP address blocks: 136.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:a0:06:d0:3f:69:10:b3:b4:d3:2d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 3 20:25:00 2025 GMT Not After : Jun 1 19:25:00 2025 GMT Subject: CN=8b3fe1ac-a3e5-4718-8be5-e24d80870024 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:83:dd:4d:9a:3b:c3:93:d8:dd:bf:b6:9e:d1: a6:eb:e0:61:73:c2:ce:17:cc:75:3b:fc:95:9c:23: c9:cc:4b:42:02:22:b0:fa:93:b7:fe:9f:2a:e8:05: 9c:2b:c5:5c:0f:9a:50:50:09:c3:cb:99:38:ea:8c: b6:b5:7e:8d:b2:04:7e:32:65:78:51:ef:5d:70:db: 6b:bd:19:6d:fe:05:c8:94:33:2d:bc:2d:d1:a7:a0: fa:58:72:59:ef:ad:11:9b:3d:de:63:88:4f:31:85: 69:27:89:cc:1d:3d:fa:c7:1f:18:cd:72:5b:80:0a: d8:62:36:f5:c4:c1:9a:90:cf:12:6b:7a:70:3e:97: 42:fc:59:61:8f:31:c9:75:9f:84:e9:f6:af:ba:7a: 16:f3:09:ea:cb:ff:cb:b8:93:1f:5d:7f:b9:f0:2d: 7e:45:c3:3c:6b:d4:20:b0:d1:21:54:3b:fe:67:3c: 5d:e4:1c:25:2b:5f:21:de:16:f6:2c:c8:e9:05:56: b5:62:c3:bc:b9:bc:33:d2:42:79:88:24:14:ce:6c: 5f:96:b0:a3:93:1c:53:b1:62:2f:37:78:d1:c1:62: 11:ed:58:28:09:5c:be:70:e9:8b:5b:1c:9a:f6:cb: d2:c1:79:a0:76:22:32:bb:92:58:a8:fd:62:3e:2e: dc:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:81:D3:81:0C:E3:A6:C5:7C:96:9C:96:F1:9F:AE:4B:25:9F:86:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3cfcafa2-3d7d-32b3-8a28-373974c1c786.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 18:1c:c1:eb:e7:0a:3c:6f:63:b5:5a:a8:3f:88:46:e7:16:3b: ae:d6:eb:6f:37:5d:fe:69:0d:33:87:3a:ea:66:18:27:9f:40: 2f:ce:3c:7e:23:b6:82:9a:f5:71:c8:44:a5:10:a3:cb:db:0f: 02:23:75:25:df:1c:a6:75:a3:61:8e:b6:42:6f:0d:1c:7d:32: 05:6a:75:69:6d:b2:60:3f:c1:c9:b9:f2:e2:6b:ec:7a:9b:2d: 09:5f:e1:08:1b:61:55:e6:c2:8f:10:01:87:42:9d:61:03:86: 75:93:a0:65:63:db:eb:48:44:7a:f0:2d:da:54:46:7e:69:9f: 16:cf:7e:52:6b:7e:de:4d:c8:a3:37:24:40:e1:f9:5d:f5:f5: cc:cf:53:64:ce:fe:6c:e7:52:6e:60:e7:8f:3a:39:63:07:73: 80:48:03:5f:b9:6d:44:d0:a0:f9:18:88:89:f5:a9:6e:4f:c8: d0:e3:f2:b2:51:19:b2:d8:8f:be:fc:eb:94:b3:fb:44:7f:b4: 3d:97:ec:2f:84:ed:11:8c:b8:b5:a0:6c:fa:5e:47:b7:a6:0f: 5e:e3:e9:79:b9:01:d2:ca:0d:f2:6e:2e:43:4e:00:07:a0:f8: 82:fa:ac:05:aa:6d:00:29:4b:d6:e2:60:58:2c:da:ec:5b:f0: 22:09:20:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRoAbQP2kQs7TTLcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMwMzIwMjUwMFoXDTI1MDYwMTE5MjUwMFowLzEtMCsGA1UEAxMk OGIzZmUxYWMtYTNlNS00NzE4LThiZTUtZTI0ZDgwODcwMDI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApoPdTZo7w5PY3b+2ntGm6+Bhc8LOF8x1O/yV nCPJzEtCAiKw+pO3/p8q6AWcK8VcD5pQUAnDy5k46oy2tX6NsgR+MmV4Ue9dcNtr vRlt/gXIlDMtvC3Rp6D6WHJZ760Rmz3eY4hPMYVpJ4nMHT36xx8YzXJbgArYYjb1 xMGakM8Sa3pwPpdC/FlhjzHJdZ+E6favunoW8wnqy//LuJMfXX+58C1+RcM8a9Qg sNEhVDv+Zzxd5BwlK18h3hb2LMjpBVa1YsO8ubwz0kJ5iCQUzmxflrCjkxxTsWIv N3jRwWIR7VgoCVy+cOmLWxya9svSwXmgdiIyu5JYqP1iPi7cwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAOB04EM46bFfJaclvGfrksln4atMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2NmY2FmYTItM2Q3ZC0z MmIzLThhMjgtMzczOTc0YzFjNzg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABgcwevnCjxvY7VaqD+IRucWO67W6283Xf5pDTOHOupmGCefQC/OPH4j toKa9XHIRKUQo8vbDwIjdSXfHKZ1o2GOtkJvDRx9MgVqdWltsmA/wcm58uJr7Hqb LQlf4QgbYVXmwo8QAYdCnWEDhnWToGVj2+tIRHrwLdpURn5pnxbPflJrft5NyKM3 JEDh+V319czPU2TO/mznUm5g5486OWMHc4BIA1+5bUTQoPkYiIn1qW5PyNDj8rJR GbLYj77865Sz+0R/tD2X7C+E7RGMuLWgbPpeR7emD17j6Xm5AdLKDfJuLkNOAAeg +IL6rAWqbQApS9biYFgs2uxb8CIJIJ0= -----END CERTIFICATE-----Generated at Mon Apr 28 22:10:07 2025 by rpki-client