$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa File: a319c139-1f08-32b0-b642-e4482a7a84e2.roa (raw, json) Hash identifier: GYxnqTtSqze3ajPRvd6cIPSX11o7Mw6Wqd3wadFExn0= Subject key identifier: 82:E0:42:A9:0D:29:6A:A3:74:9A:FF:5F:46:09:EF:8D:C4:17:72:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858498CFF24278DE961962C056F40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa Signing time: Thu 17 Apr 2025 01:00:45 +0000 ROA not before: Thu 17 Apr 2025 01:00:45 +0000 ROA not after: Wed 16 Jul 2025 01:00:45 +0000 asID: 10753 IP address blocks: 136.0.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:8c:ff:24:27:8d:e9:61:96:2c:05:6f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 17 01:00:45 2025 GMT Not After : Jul 16 01:00:45 2025 GMT Subject: CN=2e3c9a6a-66b7-4c5a-8a7e-94ed6c6dc072 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:2f:64:b8:c9:b2:d1:17:9d:fd:a5:3d:14:90: 18:6b:6e:8f:e5:27:fd:c0:ed:2c:95:f9:0f:05:6f: 4b:90:02:3f:30:ee:fe:7d:58:4a:59:48:b1:88:e8: 8b:b8:f3:96:09:d7:ab:68:3d:2a:1a:c3:ed:2f:6a: fa:04:5b:57:52:99:53:dc:de:36:13:ff:d8:74:7e: ed:5d:4a:e2:5b:43:2c:82:56:f1:f4:5f:e9:f1:12: 0c:81:57:09:33:d6:fe:cd:f0:8e:d3:d5:6d:27:e6: a8:0c:a1:25:3d:80:f9:62:4e:0c:e4:1e:98:ab:f7: 27:66:9f:68:8d:d0:4f:b6:7d:e3:57:59:81:e1:ba: 06:1e:fb:88:3c:77:ac:78:29:07:f7:cc:f4:d3:10: d7:79:67:1f:3f:d7:1c:72:b1:83:20:60:df:6d:98: d5:3c:12:17:db:f4:69:9d:53:c0:38:b0:5c:04:69: 87:ac:32:6a:60:e9:8f:ec:f6:25:85:21:9a:d7:85: 66:14:24:08:10:6b:67:f8:6d:38:91:c0:42:50:ea: 9c:cc:69:a1:b0:41:df:bc:49:bb:08:ab:ca:45:7d: de:6b:8b:2b:b0:e2:e5:13:0d:68:62:8c:ea:c3:ca: 75:39:42:54:71:51:9b:b5:dc:a6:5c:05:3e:c5:8a: 21:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:E0:42:A9:0D:29:6A:A3:74:9A:FF:5F:46:09:EF:8D:C4:17:72:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:c8:7f:89:84:36:b9:85:e0:f7:4c:47:4d:a1:b0:2c:21:8e: 0d:b3:47:66:79:3c:fb:2e:95:d6:a4:97:74:01:54:32:65:cf: f6:c2:05:86:b7:62:2b:39:8c:58:50:1f:65:5d:a7:20:09:ef: 25:0c:7b:b3:3a:e3:ad:11:26:ee:ef:4b:42:c2:1f:16:1c:5e: 08:9f:fb:9e:05:1e:32:f2:70:62:9e:b2:de:db:a5:4b:fa:95: e0:2c:ee:61:e8:9c:77:37:45:50:9e:75:de:00:e3:2e:9f:ff: 3d:da:02:d8:11:a0:75:44:01:28:70:6f:25:d5:71:dc:dc:c8: 6b:fd:7a:49:b2:5f:bc:47:62:c7:7a:12:9b:09:d2:94:d3:a1: 18:7f:fc:be:a1:80:29:3a:98:cc:0e:a8:72:42:81:a6:7a:23: c7:ed:35:38:ea:12:11:b5:15:85:1a:28:22:57:66:1e:3c:e9: 9a:99:e2:d7:eb:8b:eb:e0:0d:b3:4d:59:c5:d5:5f:85:c9:41: 6a:35:f7:51:92:ad:9c:39:1f:d0:d7:8a:54:a0:52:8e:cb:f1: ea:4d:04:ab:d9:8b:ab:1f:e3:0e:b9:6b:7c:2f:0e:0c:ad:65: bf:d7:a0:7d:90:73:e5:f9:37:e4:e0:16:1b:51:87:a3:55:ca: b5:92:a4:5d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/yQnjelhliwFb0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk MmUzYzlhNmEtNjZiNy00YzVhLThhN2UtOTRlZDZjNmRjMDcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxS9kuMmy0Red/aU9FJAYa26P5Sf9wO0slfkP BW9LkAI/MO7+fVhKWUixiOiLuPOWCderaD0qGsPtL2r6BFtXUplT3N42E//YdH7t XUriW0Msglbx9F/p8RIMgVcJM9b+zfCO09VtJ+aoDKElPYD5Yk4M5B6Yq/cnZp9o jdBPtn3jV1mB4boGHvuIPHeseCkH98z00xDXeWcfP9cccrGDIGDfbZjVPBIX2/Rp nVPAOLBcBGmHrDJqYOmP7PYlhSGa14VmFCQIEGtn+G04kcBCUOqczGmhsEHfvEm7 CKvKRX3ea4srsOLlEw1oYozqw8p1OUJUcVGbtdymXAU+xYohHwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFILgQqkNKWqjdJr/X0YJ743EF3ICMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMxOWMxMzktMWYwOC0z MmIwLWI2NDItZTQ0ODJhN2E4NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPIf4mENrmF4PdMR02hsCwhjg2zR2Z5PPsuldakl3QBVDJlz/bCBYa3 Yis5jFhQH2VdpyAJ7yUMe7M6460RJu7vS0LCHxYcXgif+54FHjLycGKest7bpUv6 leAs7mHonHc3RVCedd4A4y6f/z3aAtgRoHVEAShwbyXVcdzcyGv9ekmyX7xHYsd6 EpsJ0pTToRh//L6hgCk6mMwOqHJCgaZ6I8ftNTjqEhG1FYUaKCJXZh486ZqZ4tfr i+vgDbNNWcXVX4XJQWo191GSrZw5H9DXilSgUo7L8epNBKvZi6sf4w65a3wvDgyt Zb/XoH2Qc+X5N+TgFhtRh6NVyrWSpF0= -----END CERTIFICATE-----Generated at Mon Apr 28 00:35:02 2025 by rpki-client