$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa File: 587e7538-3a60-3852-8cff-069822dc3627.roa (raw, json) Hash identifier: zgndkr0FjrabOR4Xkw7pAMjSXWZhpC2xU4ZpLSHWRTE= Subject key identifier: FC:AD:5F:FE:B7:AD:C9:88:9F:D9:5D:58:16:36:DB:F1:EF:52:8C:A4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848F4F81E0C583DD860B609DC80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa Signing time: Fri 21 Feb 2025 14:00:50 +0000 ROA not before: Fri 21 Feb 2025 14:00:50 +0000 ROA not after: Thu 22 May 2025 13:00:50 +0000 asID: 149440 IP address blocks: 136.0.0.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:f4:f8:1e:0c:58:3d:d8:60:b6:09:dc:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 21 14:00:50 2025 GMT Not After : May 22 13:00:50 2025 GMT Subject: CN=ab78a7bc-0b71-42fc-8d85-41202d293240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:08:ac:9c:e0:11:bf:a2:17:30:ec:d0:23:8c: 53:8e:c6:1b:93:41:46:07:a3:7b:bc:b6:13:a7:3c: 59:8e:3c:47:76:b0:7b:5b:89:88:72:fb:de:53:e4: 09:be:40:10:83:75:52:b1:d2:bb:44:d5:6c:37:b5: 1d:f2:66:76:43:b1:16:62:0a:bd:10:3c:9e:e1:70: 77:84:fe:aa:e7:27:10:0a:4b:6d:24:ba:66:03:d8: de:25:f8:e1:fb:8e:5e:f3:ad:cd:e2:d5:1d:d4:65: 80:0a:f8:2d:db:c3:ed:5f:47:f4:ab:80:ff:dc:8f: d5:0a:90:3a:03:f1:c1:d4:65:7f:79:8b:7f:1b:7b: e3:61:e3:13:1d:52:a9:f0:ed:bd:50:76:43:52:ca: cc:b3:f3:5d:92:bb:83:27:ff:00:45:18:82:14:6c: 3f:4d:b6:91:98:32:3d:6b:d5:61:ee:d7:f6:98:a4: c2:98:b2:c6:66:92:8f:16:fd:6a:ff:86:b2:24:f3: ca:28:41:54:7d:f1:6e:7a:4d:94:e2:4b:1a:d2:d2: d4:d3:fc:27:50:b2:8e:1d:f9:99:fa:b7:ba:1a:5c: b4:5d:b2:cf:15:8a:22:b6:58:3e:51:53:87:78:52: 41:31:be:d1:82:84:0a:86:5c:63:e0:dd:79:f8:a7: c2:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:AD:5F:FE:B7:AD:C9:88:9F:D9:5D:58:16:36:DB:F1:EF:52:8C:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/587e7538-3a60-3852-8cff-069822dc3627.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.0.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:9f:2e:6c:e8:12:5e:18:10:77:e4:da:a3:91:de:5b:3d:9a: 80:b4:b7:9b:3e:32:96:4d:2b:8e:60:c2:94:f2:4c:c3:d6:c8: 1b:ef:38:8f:95:06:9f:2a:fe:6e:d7:df:f6:c3:21:62:3a:31: 34:3c:74:e7:4a:db:d0:ac:2b:3e:fe:b8:46:76:f3:b4:88:d3: 99:48:d8:c3:1b:f4:5b:f3:22:e1:5e:5a:19:ea:1e:01:8e:f0: d2:2d:f8:52:82:dc:3e:b7:2d:e3:0c:1d:18:b2:f5:91:98:2f: fa:5e:c7:c1:5e:d1:ce:84:64:83:69:46:19:eb:30:35:c8:4e: 7d:99:78:1c:dc:bd:28:a6:28:94:06:42:6f:10:3c:41:7c:f2: 1c:96:90:6b:e3:6b:90:e1:61:6b:6e:9b:32:35:75:00:f3:6b: 78:3e:f5:46:53:29:78:69:2d:1f:6a:c9:db:85:ae:51:65:c2: e3:f3:30:f6:c4:87:8b:f1:e9:42:5c:aa:37:a5:38:76:68:04: 3a:d3:2a:fa:1e:4c:ca:16:6d:3c:fb:5b:54:aa:50:82:63:01: f4:37:d1:45:e7:04:50:bb:37:ed:eb:96:50:76:22:16:06:43: 91:96:e8:67:9a:2c:ff:ef:f7:78:75:78:b1:c4:e2:83:8c:4d: af:5e:72:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj0+B4MWD3YYLYJ3IAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk YWI3OGE3YmMtMGI3MS00MmZjLThkODUtNDEyMDJkMjkzMjQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAygisnOARv6IXMOzQI4xTjsYbk0FGB6N7vLYT pzxZjjxHdrB7W4mIcvveU+QJvkAQg3VSsdK7RNVsN7Ud8mZ2Q7EWYgq9EDye4XB3 hP6q5ycQCkttJLpmA9jeJfjh+45e863N4tUd1GWACvgt28PtX0f0q4D/3I/VCpA6 A/HB1GV/eYt/G3vjYeMTHVKp8O29UHZDUsrMs/NdkruDJ/8ARRiCFGw/TbaRmDI9 a9Vh7tf2mKTCmLLGZpKPFv1q/4ayJPPKKEFUffFuek2U4ksa0tLU0/wnULKOHfmZ +re6Gly0XbLPFYoitlg+UVOHeFJBMb7RgoQKhlxj4N15+KfC/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPytX/63rcmIn9ldWBY22/HvUoykMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTg3ZTc1MzgtM2E2MC0z ODUyLThjZmYtMDY5ODIyZGMzNjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFufLmzoEl4YEHfk2qOR3ls9moC0t5s+MpZNK45gwpTyTMPWyBvvOI+V Bp8q/m7X3/bDIWI6MTQ8dOdK29CsKz7+uEZ287SI05lI2MMb9FvzIuFeWhnqHgGO 8NIt+FKC3D63LeMMHRiy9ZGYL/pex8Fe0c6EZINpRhnrMDXITn2ZeBzcvSimKJQG Qm8QPEF88hyWkGvja5DhYWtumzI1dQDza3g+9UZTKXhpLR9qyduFrlFlwuPzMPbE h4vx6UJcqjelOHZoBDrTKvoeTMoWbTz7W1SqUIJjAfQ30UXnBFC7N+3rllB2IhYG Q5GW6GeaLP/v93h1eLHE4oOMTa9ecmE= -----END CERTIFICATE-----Generated at Sat Apr 26 16:32:58 2025 by rpki-client