$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa File: a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa (raw, json) Hash identifier: bgXEgEaMRVhwlFkvxFPr/kVJWNsvBwKoGBHlLczaNZk= Subject key identifier: 5D:DD:AC:91:6A:E6:F3:89:9C:E8:A9:60:0B:A7:23:8A:05:4D:4C:07 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B5A79EA7FD2CE26ECE80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 6939 IP address blocks: 136.0.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b5:a7:9e:a7:fd:2c:e2:6e:ce:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=c84c28f0-e3e8-4095-8fbb-95d6d709f175 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:f6:db:dd:f2:f0:73:cb:d2:61:7f:3a:8b:ea: d2:24:1c:b8:7c:a1:d2:94:84:17:02:99:4e:fb:62: 01:a0:73:5f:14:d2:b5:7c:f3:2b:fe:04:83:67:66: b7:0c:54:23:88:bf:8e:b8:01:0d:ee:9c:d4:59:fe: 26:25:3a:55:4c:54:0e:a3:f8:7d:08:a1:5b:48:03: df:a1:16:d8:43:11:24:91:f0:25:de:9e:7b:ed:41: 51:80:40:88:dc:d3:e4:88:6e:17:4e:3c:c2:94:92: e9:13:4f:98:df:8a:e3:4f:0a:81:45:db:49:17:6f: 40:27:a2:20:5e:cc:c0:30:12:60:df:70:31:a8:66: 60:3f:93:30:32:50:01:97:5c:94:b9:57:a8:2b:65: 82:0a:6b:81:7a:10:58:67:f0:7c:27:10:ec:72:93: 23:2b:7d:67:02:4d:5a:1e:fb:2b:cb:01:55:58:2e: 62:13:66:9e:00:6b:f5:f8:e7:38:3f:fa:b1:8b:1b: 38:62:f7:51:c8:f3:a8:3f:1c:76:2d:71:b9:64:41: 7e:2f:da:f8:0b:ce:26:26:42:e9:45:be:30:e5:27: b5:8d:7e:6a:96:bc:d7:01:49:c5:9d:09:63:06:d8: 86:e3:12:9c:e7:75:b4:4b:13:0a:24:3c:e2:85:57: 43:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:DD:AC:91:6A:E6:F3:89:9C:E8:A9:60:0B:A7:23:8A:05:4D:4C:07 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:b1:9b:45:6e:00:0c:e2:fe:fe:d2:87:a4:2c:1b:4b:e2:48: a8:58:fa:b1:a4:fd:d7:a3:a0:f5:97:e4:33:a2:25:01:4b:46: ce:b2:b2:55:4e:42:1b:0f:2d:25:9f:d5:37:fa:49:1a:9c:54: 21:9a:da:56:ea:93:75:94:c9:72:62:e6:93:72:f9:f3:5f:3e: 93:b8:40:f2:07:a9:88:3e:8c:fb:71:11:5a:64:0f:65:01:c3: c3:e3:10:1d:0e:0d:0e:60:bd:73:68:b2:37:7d:be:dc:a3:45: b6:8b:a3:9e:45:dc:a8:4d:3f:26:d3:b9:f3:5b:da:d5:34:fe: 2f:87:cf:7c:c0:9f:c1:19:4f:76:ad:8b:a0:4e:3a:a3:47:7b: df:b9:85:7b:41:48:3c:5c:79:79:1c:c3:b7:ff:fd:f7:7e:17: 37:88:34:82:90:26:6b:c8:99:7c:f6:cc:19:65:56:69:47:90: 30:68:ad:48:4d:a5:f7:05:d8:bd:3b:47:aa:c6:9e:cd:89:9e: 21:f4:e2:d8:a7:af:97:5c:21:bb:e4:d7:46:c7:70:10:0a:32: ef:c7:72:cb:34:cd:21:6d:36:16:ef:d2:d9:b7:e7:3a:09:3a: 06:c3:fa:a7:8c:bc:a4:2f:69:60:ea:a9:82:fe:3a:5b:c8:57: 0a:f5:00:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLWnnqf9LOJuzoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk Yzg0YzI4ZjAtZTNlOC00MDk1LThmYmItOTVkNmQ3MDlmMTc1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPbb3fLwc8vSYX86i+rSJBy4fKHSlIQXAplO +2IBoHNfFNK1fPMr/gSDZ2a3DFQjiL+OuAEN7pzUWf4mJTpVTFQOo/h9CKFbSAPf oRbYQxEkkfAl3p577UFRgECI3NPkiG4XTjzClJLpE0+Y34rjTwqBRdtJF29AJ6Ig XszAMBJg33AxqGZgP5MwMlABl1yUuVeoK2WCCmuBehBYZ/B8JxDscpMjK31nAk1a HvsrywFVWC5iE2aeAGv1+Oc4P/qxixs4YvdRyPOoPxx2LXG5ZEF+L9r4C84mJkLp Rb4w5Se1jX5qlrzXAUnFnQljBtiG4xKc53W0SxMKJDzihVdDhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3drJFq5vOJnOipYAunI4oFTUwHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTdjYjVhYTUtYjdjZS0z YWY3LTk3ZjEtZTU4Mjg5MjdlYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaxm0VuAAzi/v7Sh6QsG0viSKhY+rGk/dejoPWX5DOiJQFLRs6yslVO QhsPLSWf1Tf6SRqcVCGa2lbqk3WUyXJi5pNy+fNfPpO4QPIHqYg+jPtxEVpkD2UB w8PjEB0ODQ5gvXNosjd9vtyjRbaLo55F3KhNPybTufNb2tU0/i+Hz3zAn8EZT3at i6BOOqNHe9+5hXtBSDxceXkcw7f//fd+FzeINIKQJmvImXz2zBllVmlHkDBorUhN pfcF2L07R6rGns2JniH04tinr5dcIbvk10bHcBAKMu/Hcss0zSFtNhbv0tm35zoJ OgbD+qeMvKQvaWDqqYL+OlvIVwr1ADA= -----END CERTIFICATE-----Generated at Sun Apr 27 01:08:50 2025 by rpki-client