$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa File: 52c21e94-873d-37f3-9993-0053617532ab.roa (raw, json) Hash identifier: J1WxdqUWMB2/R45xBDnRAlNsJo9YbyGZ/iMPZkKxTTw= Subject key identifier: A4:59:31:B7:E0:91:B9:56:7F:3F:78:0D:8F:16:A3:2D:88:C4:48:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B5516601D66B08B24B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 10557 IP address blocks: 136.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b5:51:66:01:d6:6b:08:b2:4b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=f5fa8c1a-c55e-4b2b-9e99-dfcd98d08fd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:23:8b:b8:3c:c3:e9:4a:be:e0:5d:ac:a5:23: 09:12:a0:1f:1d:2c:0f:e0:1d:27:43:60:13:69:a2: 33:ba:00:51:6c:3a:a8:bc:91:8e:b2:b7:45:ed:fa: f6:7c:18:7f:2a:fc:9f:82:3e:17:54:73:50:3f:64: ef:c0:8b:5b:c5:ec:e4:09:c7:40:78:9b:ec:ec:6d: 08:88:cd:de:85:3f:98:0c:fd:21:e8:e5:ac:d7:63: 1f:fa:31:9c:d2:28:74:79:99:5e:de:b9:85:e9:45: 7e:61:3b:9f:c1:72:72:f0:ff:6b:29:97:83:52:bc: 45:31:b2:46:0a:74:b9:52:ad:a7:1d:4d:9f:80:62: 03:99:2c:1a:fa:10:b0:4f:e1:a4:f9:b2:4a:cb:1d: d1:8c:4a:03:9c:22:ff:2b:c7:ca:0f:12:6d:cc:05: fd:aa:ef:9f:b0:15:9b:05:17:bb:f5:9a:f3:4a:f3: 37:a3:e8:af:f0:ce:13:f0:de:4d:ef:d0:0b:ff:68: 23:bb:fa:67:8a:64:d5:ba:20:e6:5a:7a:53:5b:56: 27:4b:60:10:b5:88:41:5a:1b:6b:c7:6e:1e:c2:69: 7c:3c:08:51:4a:b1:dd:df:30:7c:b6:8c:bd:7a:2c: 6d:8b:a3:93:db:e7:42:8b:70:a4:33:8d:71:43:98: d3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:59:31:B7:E0:91:B9:56:7F:3F:78:0D:8F:16:A3:2D:88:C4:48:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:38:d3:49:66:43:be:d5:88:a2:95:8f:8c:8c:85:c7:5a:a9: 0d:a2:72:37:81:9b:65:73:9c:f2:7e:ac:22:a9:46:ac:be:dc: 58:be:1b:95:82:6b:5f:76:eb:82:5d:21:05:57:4d:3f:62:11: bf:f3:e3:c5:f9:bb:b5:4e:34:79:58:36:58:fc:98:31:b1:02: 9b:54:3c:9f:02:8b:ed:01:49:0f:22:34:de:98:60:9a:62:73: aa:3e:f0:7c:82:3b:c6:74:a3:60:de:6b:c8:44:0f:d1:26:d0: 56:65:86:d2:a0:71:73:6b:9a:f1:24:f1:c5:9f:53:d8:fb:de: e7:51:c1:a4:0e:ca:49:2d:5b:45:ea:31:9b:4c:26:a0:bb:26: 4b:12:e5:0e:66:ce:2b:6e:f8:be:aa:46:67:66:49:bb:7c:43: 1a:3c:a9:33:8d:13:66:db:d1:43:17:0e:7c:93:51:24:04:52: 32:a4:da:75:67:df:45:b7:3b:51:8c:b8:e8:47:a3:0c:b3:22: b9:1d:5e:7b:78:d6:c6:68:21:49:2f:95:c7:79:83:08:af:ce: 04:51:51:39:86:1b:16:5d:3d:5c:58:b9:88:2b:75:b5:3d:c9: b5:fa:c1:2b:b6:ee:31:56:07:00:9a:41:99:4e:94:ca:7f:6b: 70:da:b7:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLVRZgHWawiyS4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk ZjVmYThjMWEtYzU1ZS00YjJiLTllOTktZGZjZDk4ZDA4ZmQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCOLuDzD6Uq+4F2spSMJEqAfHSwP4B0nQ2AT aaIzugBRbDqovJGOsrdF7fr2fBh/Kvyfgj4XVHNQP2TvwItbxezkCcdAeJvs7G0I iM3ehT+YDP0h6OWs12Mf+jGc0ih0eZle3rmF6UV+YTufwXJy8P9rKZeDUrxFMbJG CnS5Uq2nHU2fgGIDmSwa+hCwT+Gk+bJKyx3RjEoDnCL/K8fKDxJtzAX9qu+fsBWb BRe79ZrzSvM3o+iv8M4T8N5N79AL/2gju/pnimTVuiDmWnpTW1YnS2AQtYhBWhtr x24ewml8PAhRSrHd3zB8toy9eixti6OT2+dCi3CkM41xQ5jTkQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKRZMbfgkblWfz94DY8Woy2IxEjFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTJjMjFlOTQtODczZC0z N2YzLTk5OTMtMDA1MzYxNzUzMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACI400lmQ77ViKKVj4yMhcdaqQ2icjeBm2VznPJ+rCKpRqy+3Fi+G5WC a19264JdIQVXTT9iEb/z48X5u7VONHlYNlj8mDGxAptUPJ8Ci+0BSQ8iNN6YYJpi c6o+8HyCO8Z0o2Dea8hED9Em0FZlhtKgcXNrmvEk8cWfU9j73udRwaQOykktW0Xq MZtMJqC7JksS5Q5mzitu+L6qRmdmSbt8Qxo8qTONE2bb0UMXDnyTUSQEUjKk2nVn 30W3O1GMuOhHowyzIrkdXnt41sZoIUkvlcd5gwivzgRRUTmGGxZdPVxYuYgrdbU9 ybX6wSu27jFWBwCaQZlOlMp/a3Dat3Q= -----END CERTIFICATE-----Generated at Sun Apr 27 05:47:10 2025 by rpki-client