$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa File: 587e7538-3a60-3852-8cff-069822dc3627.roa (raw, json) Hash identifier: XbTHEkjcTA44S+hkmFLjoUG4sDa5WRj7k+jzyOiCe40= Subject key identifier: D1:D3:E8:67:75:61:50:04:01:11:38:C3:0C:FE:ED:DD:3C:6B:76:73 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849D4312A8DE28C1DF919837C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa Signing time: Mon 12 May 2025 13:01:00 +0000 ROA not before: Mon 12 May 2025 13:01:00 +0000 ROA not after: Sun 10 Aug 2025 13:01:00 +0000 asID: 149440 IP address blocks: 136.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 18 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:d4:31:2a:8d:e2:8c:1d:f9:19:83:7c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 12 13:01:00 2025 GMT Not After : Aug 10 13:01:00 2025 GMT Subject: CN=564a6194-9542-4fa9-8b2b-4a265de10b30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:b9:e5:81:a6:21:c5:63:6c:8a:54:a6:0f:1b: 6d:fc:5f:d1:9f:a2:04:04:d7:b1:ec:c5:70:57:c9: 41:9f:03:b5:0d:58:5d:59:98:3a:2a:a3:18:a4:7e: 01:87:e2:a3:f6:f8:5c:7b:bb:4d:97:3a:ed:b1:13: 8c:79:12:ac:bc:66:28:1e:02:74:97:33:aa:f2:db: 91:65:9d:2f:ab:8e:55:e0:68:8d:a7:7b:20:b7:d4: 5c:57:e2:48:37:d6:9e:e4:3d:65:5c:bf:4c:cd:3a: b5:69:99:95:9e:95:52:1d:5a:b0:f2:4c:20:6c:a3: 24:7c:a2:55:ea:02:df:9c:c7:5e:c3:50:31:17:49: 0a:ee:5c:f5:ee:eb:77:7c:3d:82:6e:50:85:41:57: 11:85:f3:c0:cf:f2:6d:4c:ff:53:01:d0:b6:11:1c: c2:4d:a0:97:e1:b3:bd:a3:7e:35:5a:e2:b4:93:62: 54:39:ce:f0:ab:b1:e1:2b:c0:6e:75:2a:8e:f3:14: 30:35:f4:ed:2b:c4:c3:f4:59:48:bb:87:c7:04:9c: 23:17:52:eb:10:f2:8e:48:6a:01:09:93:89:64:b8: b5:32:a8:fa:5c:1c:1f:66:1a:d3:2f:d2:e8:bf:67: ba:11:07:13:6a:a2:b9:ea:7d:30:f9:af:78:fa:2e: c4:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:D3:E8:67:75:61:50:04:01:11:38:C3:0C:FE:ED:DD:3C:6B:76:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 90:f0:df:7b:64:66:d9:19:17:4b:6d:22:fd:f9:85:dc:24:c0: 70:7d:ff:7e:f1:56:27:44:19:fd:ce:a0:de:2e:11:38:f1:2e: b8:2d:36:34:be:f7:5d:58:52:d6:0e:7b:d2:68:41:39:9a:23: 8e:c5:41:00:3d:4f:49:d0:1f:a7:7a:52:4b:fe:88:0e:cf:47: 91:f9:3c:45:f8:49:af:68:db:e7:11:76:49:32:3f:ec:66:79: 1c:85:25:74:d7:a8:9e:8c:73:77:6a:e3:8f:e0:ba:10:b2:e0: 74:66:4f:53:75:1c:8b:72:cf:b3:2c:52:af:07:01:17:27:8b: 53:60:dd:56:b2:f9:b2:6b:8f:b4:25:aa:44:7c:d6:ae:61:74: 11:13:18:33:e0:9e:fe:02:94:71:71:2b:e7:72:c8:c6:81:ca: 6f:b4:3e:f4:0b:f3:b8:09:f9:49:29:20:78:e8:37:aa:67:41: 63:f4:9c:b4:9e:78:f4:d1:c6:b7:6b:b5:90:90:b7:40:b5:d6: d5:1b:2a:a0:1f:79:9c:f1:2d:43:ee:f6:7f:61:1f:5d:3b:4c: b2:88:48:11:72:5b:f7:7d:43:b5:6a:eb:0c:26:02:de:ae:d7: 4b:89:59:64:3b:cf:0a:c7:b5:fb:5d:25:ff:dc:2e:66:4f:d7: e3:03:80:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUMSqN4owd+RmDfIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk NTY0YTYxOTQtOTU0Mi00ZmE5LThiMmItNGEyNjVkZTEwYjMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgrnlgaYhxWNsilSmDxtt/F/Rn6IEBNex7MVw V8lBnwO1DVhdWZg6KqMYpH4Bh+Kj9vhce7tNlzrtsROMeRKsvGYoHgJ0lzOq8tuR ZZ0vq45V4GiNp3sgt9RcV+JIN9ae5D1lXL9MzTq1aZmVnpVSHVqw8kwgbKMkfKJV 6gLfnMdew1AxF0kK7lz17ut3fD2CblCFQVcRhfPAz/JtTP9TAdC2ERzCTaCX4bO9 o341WuK0k2JUOc7wq7HhK8BudSqO8xQwNfTtK8TD9FlIu4fHBJwjF1LrEPKOSGoB CZOJZLi1Mqj6XBwfZhrTL9Lov2e6EQcTaqK56n0w+a94+i7EwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNHT6Gd1YVAEARE4wwz+7d08a3ZzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTg3ZTc1MzgtM2E2MC0z ODUyLThjZmYtMDY5ODIyZGMzNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJDw33tkZtkZF0ttIv35hdwkwHB9/37xVidEGf3OoN4uETjxLrgtNjS+ 911YUtYOe9JoQTmaI47FQQA9T0nQH6d6Ukv+iA7PR5H5PEX4Sa9o2+cRdkkyP+xm eRyFJXTXqJ6Mc3dq44/guhCy4HRmT1N1HItyz7MsUq8HARcni1Ng3Vay+bJrj7Ql qkR81q5hdBETGDPgnv4ClHFxK+dyyMaBym+0PvQL87gJ+UkpIHjoN6pnQWP0nLSe ePTRxrdrtZCQt0C11tUbKqAfeZzxLUPu9n9hH107TLKISBFyW/d9Q7Vq6wwmAt6u 10uJWWQ7zwrHtftdJf/cLmZP1+MDgGU= -----END CERTIFICATE-----Generated at Mon Jun 16 22:04:57 2025 by rpki-client