$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa File: 5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa (raw, json) Hash identifier: KZH/dUmxzDc3mOJ1H33YG7WSFbNBCqi8zkg/YvS9jBg= Subject key identifier: 66:36:81:EF:F8:AB:46:8E:F4:80:B0:CB:56:ED:D0:29:68:1B:C8:28 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A21E92DCE1C63D697480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 136.0.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a2:1e:92:dc:e1:c6:3d:69:74:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=4b60580c-80e9-47ff-8f8f-7db57940c63a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:ff:82:4d:2c:1e:f5:92:0e:2f:eb:b5:03: fe:a7:39:bb:eb:7c:83:7e:9a:0e:8d:2e:dc:0b:d8: ac:d9:e1:72:98:72:e9:6f:95:3c:fd:21:22:5d:96: 98:2c:94:b9:35:ad:5f:a3:69:5a:44:5c:5f:c7:08: a1:e3:0e:5e:25:86:9b:50:68:c5:34:fd:f1:44:54: 1b:df:00:d6:23:af:74:ca:98:18:9a:f9:60:4e:f8: 81:e7:e4:62:7a:4c:83:ee:30:96:b3:3d:c8:7a:e6: 75:29:f8:dc:93:53:27:92:c7:1d:f4:55:c2:9d:4d: 4a:b4:23:04:1d:93:c0:4f:e5:51:0f:34:69:9a:a7: 21:fe:c5:c1:a4:1d:15:24:a9:43:7f:c2:c4:07:0a: 9a:47:4e:56:2d:59:1e:56:d3:af:0e:01:50:33:54: 0a:66:11:e3:16:e5:30:00:ee:6e:85:9f:7c:17:61: 34:5a:ce:df:3f:b0:bf:4d:c7:4d:cb:b2:70:a8:1e: 5c:5a:7a:f8:af:b1:77:0b:5b:b4:69:a7:eb:33:8e: 41:cd:47:d1:b3:04:51:3e:79:5f:f7:d2:86:f9:5c: 75:f2:3e:aa:a3:76:30:7b:fe:3f:5e:aa:b1:0d:70: b6:a6:1f:5f:d5:18:dd:50:63:df:df:d8:1a:2a:0b: 13:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:36:81:EF:F8:AB:46:8E:F4:80:B0:CB:56:ED:D0:29:68:1B:C8:28 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:48:ce:52:ec:2f:59:5f:cf:ee:6b:cc:12:73:5f:43:8e:bc: af:76:7a:5d:b7:12:bb:41:d4:47:9d:a6:83:92:be:64:d8:22: 74:aa:7a:2f:1d:14:a2:a8:b8:35:2f:26:0e:cd:9c:ca:12:65: 6a:57:9e:55:04:0d:f7:0a:58:e9:44:71:bc:45:ae:48:b9:2b: 0e:79:c4:fd:2a:a1:ce:e8:78:d3:9e:f7:9e:4d:08:62:0e:44: 9b:77:61:89:8d:53:37:96:b4:2c:34:32:6c:01:8c:03:7a:61: 58:90:19:4f:d1:f9:1d:82:ae:d8:a0:6d:51:17:cd:f0:af:7b: 4f:0e:98:b9:fe:96:f8:53:b7:96:ea:a5:a9:51:f5:b4:19:b0: 0a:9c:45:04:40:ca:86:3b:27:ae:bd:bb:6c:3d:5f:59:2b:cd: 2b:79:24:9f:40:a6:bf:4f:26:e0:0a:be:03:a1:d0:d9:f7:fd: dc:3d:a1:57:e8:50:fc:05:ae:ac:78:2a:25:49:35:8d:bf:01: aa:22:8d:b4:b7:6f:ff:83:b7:3f:3c:c3:f1:95:51:1e:97:dc: d6:d5:9a:81:4c:eb:73:d8:21:94:67:f4:54:63:cf:bb:e5:4c: bf:0c:b1:33:21:20:e6:93:b6:38:78:06:46:62:03:f3:ba:ec: e4:8a:df:15 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKIektzhxj1pdIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk NGI2MDU4MGMtODBlOS00N2ZmLThmOGYtN2RiNTc5NDBjNjNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgz/gk0sHvWSDi/rtQP+pzm763yDfpoOjS7c C9is2eFymHLpb5U8/SEiXZaYLJS5Na1fo2laRFxfxwih4w5eJYabUGjFNP3xRFQb 3wDWI690ypgYmvlgTviB5+RiekyD7jCWsz3IeuZ1Kfjck1Mnkscd9FXCnU1KtCME HZPAT+VRDzRpmqch/sXBpB0VJKlDf8LEBwqaR05WLVkeVtOvDgFQM1QKZhHjFuUw AO5uhZ98F2E0Ws7fP7C/TcdNy7JwqB5cWnr4r7F3C1u0aafrM45BzUfRswRRPnlf 99KG+Vx18j6qo3Ywe/4/XqqxDXC2ph9f1RjdUGPf39gaKgsT3QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGY2ge/4q0aO9ICwy1bt0CloG8goMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIyOGQ2ZTAtOGEwZi0z Njk1LWJlODAtOGNkY2I5N2U4ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBIzlLsL1lfz+5rzBJzX0OOvK92el23ErtB1EedpoOSvmTYInSqei8d FKKouDUvJg7NnMoSZWpXnlUEDfcKWOlEcbxFrki5Kw55xP0qoc7oeNOe955NCGIO RJt3YYmNUzeWtCw0MmwBjAN6YViQGU/R+R2CrtigbVEXzfCve08OmLn+lvhTt5bq palR9bQZsAqcRQRAyoY7J669u2w9X1krzSt5JJ9Apr9PJuAKvgOh0Nn3/dw9oVfo UPwFrqx4KiVJNY2/AaoijbS3b/+Dtz88w/GVUR6X3NbVmoFM63PYIZRn9FRjz7vl TL8MsTMhIOaTtjh4BkZiA/O67OSK3xU= -----END CERTIFICATE-----Generated at Sun Apr 27 01:10:56 2025 by rpki-client