$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa File: 9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa (raw, json) Hash identifier: 42lgdVGsbd76/6rjMi/iw4DS/TAYlcmkTarsjywHDrc= Subject key identifier: 3C:24:0F:70:95:82:D6:3D:1E:75:70:EF:8F:A6:85:33:C5:C3:06:BC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498E64A2107E6F61BB37ADFE80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa Signing time: Thu 17 Apr 2025 13:01:00 +0000 ROA not before: Thu 17 Apr 2025 13:01:00 +0000 ROA not after: Wed 16 Jul 2025 13:01:00 +0000 asID: 18779 IP address blocks: 136.0.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8e:64:a2:10:7e:6f:61:bb:37:ad:fe:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 13:01:00 2025 GMT Not After : Jul 16 13:01:00 2025 GMT Subject: CN=b4a18b31-cc9a-4f6c-abc2-8f4104f8eadb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:10:2f:2f:51:5d:e5:0a:4c:5a:80:e7:a3:63: 86:e9:61:73:c3:2a:ec:77:5a:5a:8f:98:e9:5f:78: 5c:7b:63:00:a7:96:4b:5d:4a:67:2d:32:f3:57:3d: 89:5f:ac:90:db:a1:11:d7:32:29:f9:73:7c:ae:32: 50:5b:74:77:75:ea:2b:1e:36:00:f1:c8:83:25:f5: a0:6b:30:1f:b9:b8:83:57:e4:79:de:ec:81:99:8d: 78:8d:72:03:c1:5e:c6:36:a7:36:b4:46:e3:69:a5: 75:65:13:60:4f:9a:5f:b7:37:a4:dd:9d:79:31:bf: 14:5d:fd:02:68:f4:9e:f3:b1:2d:1b:cb:48:e7:56: c5:f7:cf:5e:7c:fe:c3:e4:36:fb:25:af:f6:bd:cb: f4:78:37:57:14:bc:22:88:d6:ff:82:7b:c1:cf:9f: 4a:01:5d:f0:1e:a6:cc:74:32:85:d5:36:5f:34:19: 09:38:7c:f6:f2:39:fb:70:fa:80:cc:85:6b:86:ba: 2b:6d:65:5b:d6:9a:f8:3a:8d:37:12:0c:12:3e:2a: d6:d1:60:8d:0a:17:c3:7b:f0:5a:65:c3:65:c6:2a: 8a:ad:89:e7:6e:cf:c4:3f:d4:58:7b:93:2f:ea:81: 7b:2a:87:b5:80:a1:1b:7c:3a:bf:f5:5f:1d:70:16: b6:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:24:0F:70:95:82:D6:3D:1E:75:70:EF:8F:A6:85:33:C5:C3:06:BC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:bb:9c:a7:73:24:97:25:87:ff:2d:f9:5e:93:e2:ca:5c:9e: 7a:bf:86:e5:60:46:59:59:00:23:55:58:59:78:49:11:72:89: 24:fe:e1:2e:1a:7b:5e:61:ca:6c:c9:66:70:25:73:30:8a:d5: e8:20:f1:b4:eb:58:2e:79:2c:72:aa:e9:c9:dd:3f:63:cd:10: 71:e9:ff:8f:8e:c5:60:8c:c8:99:e2:4d:eb:1a:72:3b:6e:ba: de:f3:0b:7a:d0:08:ca:71:c8:56:9c:3d:9b:e8:a3:5b:41:2e: f5:07:7c:c4:c5:09:73:77:d4:13:26:4b:d0:93:87:b0:4b:5f: 40:f9:97:9d:a4:f5:6f:59:ec:f8:6d:ab:ca:63:50:bd:26:56: bd:b5:81:0d:82:6d:6b:b2:ad:2c:58:a7:23:ba:0a:82:70:67: 3a:01:b2:0c:80:f5:f2:4c:87:6d:9c:e5:4f:b2:16:62:6f:38: 88:87:1a:5d:eb:0d:1c:fd:9e:87:87:38:b4:e3:e3:36:eb:91: 72:f9:2f:3f:83:b0:d1:1a:06:b4:e9:b2:db:9b:df:61:a9:58: b6:f3:4b:1e:b4:6a:92:08:57:ba:cd:68:0a:f8:7d:98:82:02: 82:a1:be:93:38:97:06:a0:fd:91:13:c4:a0:22:51:e6:55:2a: e8:90:64:8a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmOZKIQfm9huzet/oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzEzMDEwMFoXDTI1MDcxNjEzMDEwMFowLzEtMCsGA1UEAxMk YjRhMThiMzEtY2M5YS00ZjZjLWFiYzItOGY0MTA0ZjhlYWRiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihAvL1Fd5QpMWoDno2OG6WFzwyrsd1paj5jp X3hce2MAp5ZLXUpnLTLzVz2JX6yQ26ER1zIp+XN8rjJQW3R3deorHjYA8ciDJfWg azAfubiDV+R53uyBmY14jXIDwV7GNqc2tEbjaaV1ZRNgT5pftzek3Z15Mb8UXf0C aPSe87EtG8tI51bF989efP7D5Db7Ja/2vcv0eDdXFLwiiNb/gnvBz59KAV3wHqbM dDKF1TZfNBkJOHz28jn7cPqAzIVrhrorbWVb1pr4Oo03EgwSPirW0WCNChfDe/Ba ZcNlxiqKrYnnbs/EP9RYe5Mv6oF7Koe1gKEbfDq/9V8dcBa2eQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDwkD3CVgtY9HnVw74+mhTPFwwa8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWI2YTIyOTctMGRkMy0z MmFiLWI2ZGQtYTliNGEzNTkwNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADu7nKdzJJclh/8t+V6T4spcnnq/huVgRllZACNVWFl4SRFyiST+4S4a e15hymzJZnAlczCK1egg8bTrWC55LHKq6cndP2PNEHHp/4+OxWCMyJniTesacjtu ut7zC3rQCMpxyFacPZvoo1tBLvUHfMTFCXN31BMmS9CTh7BLX0D5l52k9W9Z7Pht q8pjUL0mVr21gQ2CbWuyrSxYpyO6CoJwZzoBsgyA9fJMh22c5U+yFmJvOIiHGl3r DRz9noeHOLTj4zbrkXL5Lz+DsNEaBrTpstub32GpWLbzSx60apIIV7rNaAr4fZiC AoKhvpM4lwag/ZETxKAiUeZVKuiQZIo= -----END CERTIFICATE-----Generated at Sun Apr 27 07:04:07 2025 by rpki-client