$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa File: bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa (raw, json) Hash identifier: /IkxH1GMJZs7rYoIqR6mYDIlz7ybOX5oh0KyJLL2dv8= Subject key identifier: F4:3A:D5:81:9E:C1:DA:CF:29:50:25:1C:ED:38:89:76:FD:78:EF:9E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858494F93F259731D66197CEC5E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 8881 IP address blocks: 136.0.152.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:f2:59:73:1d:66:19:7c:ec:5e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=a0db8a67-f41a-4f1f-8575-22b26509a14d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:dc:ad:62:42:e7:82:4e:fa:e8:34:dc:60:95: 13:09:a6:9e:42:e8:2f:89:3e:e7:e2:1f:bd:cb:03: 6a:71:ba:b1:75:3c:52:a0:39:55:f4:30:a3:16:7c: 0b:9f:c7:06:99:3d:a7:a7:68:c5:d8:6b:5e:4f:d4: 0a:e6:91:1c:f5:7c:b6:af:ea:f0:4c:e9:6d:10:f6: ac:fd:df:c3:83:36:36:b9:6c:ea:b2:0b:40:c3:13: ab:bd:a4:db:a6:df:1a:8a:68:43:6b:fb:42:f3:2b: 1e:b0:55:4d:cc:36:5b:43:c1:9c:3c:a1:70:7d:f3: 8d:08:b9:4e:d1:c1:7a:e9:e4:3d:a5:5c:20:5d:6d: 3d:54:29:4c:11:9b:70:13:67:fe:aa:51:74:54:04: d3:7f:4d:81:ef:be:5e:c6:20:53:1d:91:51:49:a4: f4:26:a3:8b:d6:b9:8b:06:b2:24:45:e4:7c:95:5d: 50:19:95:2f:15:f6:eb:0e:0d:92:bb:0c:e0:d4:16: c5:b5:38:31:36:64:02:8f:0c:2d:96:98:c9:7f:5b: 83:6c:08:4b:83:6a:d8:93:24:e4:00:e2:5d:5d:68: 58:86:91:56:a7:b1:bf:f3:1e:ee:2a:23:af:e1:0d: d5:41:6e:f7:29:06:62:34:aa:a5:1b:80:7d:38:58: f5:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:3A:D5:81:9E:C1:DA:CF:29:50:25:1C:ED:38:89:76:FD:78:EF:9E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/bfed80fa-8777-330f-b7dd-b19ee4c84af5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.152.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1d:15:ad:cd:d1:d0:20:7f:40:86:12:31:b5:a1:5e:76:31:22: f6:20:21:72:45:96:13:77:be:73:f3:c7:b8:e8:44:e5:a7:85: 56:07:54:0e:d2:3b:ea:a2:96:c5:95:a1:db:9c:cd:ab:fa:80: 64:59:40:42:02:38:4c:46:a8:b7:0b:52:a8:8f:99:2b:a7:60: b6:09:5e:9e:94:67:80:57:6d:02:33:44:01:ff:4b:8e:55:e5: 0e:a0:c0:b1:83:3a:74:18:1d:d7:a9:c5:19:0a:9a:5b:24:50: ee:64:cc:76:56:6f:5b:86:a4:5c:0b:14:bf:19:47:07:1e:1e: d3:f1:23:3d:81:03:b8:fc:72:52:b2:ca:93:05:06:9f:a0:a7: 01:7e:11:0a:5b:fc:fa:a5:bb:01:14:29:d2:de:ba:b0:6c:0a: 08:e2:0e:98:07:b6:a3:b1:29:a6:28:17:23:88:de:36:94:9c: e1:6b:c9:c3:ec:b3:a3:ea:53:6a:ae:72:00:1a:d3:a4:1d:d4: f5:65:35:b2:8e:9d:b8:93:37:38:fe:78:cc:42:86:41:eb:df: 13:ab:37:ad:88:3c:9e:ae:d5:ce:bf:8d:ae:38:b7:f2:22:a1: 34:01:f4:d1:fb:b7:8e:a4:09:87:e6:d8:a5:44:1c:1a:7c:bd: c8:67:26:22 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk/JZcx1mGXzsXgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YTBkYjhhNjctZjQxYS00ZjFmLTg1NzUtMjJiMjY1MDlhMTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptytYkLngk766DTcYJUTCaaeQugviT7n4h+9 ywNqcbqxdTxSoDlV9DCjFnwLn8cGmT2np2jF2GteT9QK5pEc9Xy2r+rwTOltEPas /d/DgzY2uWzqsgtAwxOrvaTbpt8aimhDa/tC8ysesFVNzDZbQ8GcPKFwffONCLlO 0cF66eQ9pVwgXW09VClMEZtwE2f+qlF0VATTf02B775exiBTHZFRSaT0JqOL1rmL BrIkReR8lV1QGZUvFfbrDg2Suwzg1BbFtTgxNmQCjwwtlpjJf1uDbAhLg2rYkyTk AOJdXWhYhpFWp7G/8x7uKiOv4Q3VQW73KQZiNKqlG4B9OFj1ewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPQ61YGewdrPKVAlHO04iXb9eO+eMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYmZlZDgwZmEtODc3Ny0z MzBmLWI3ZGQtYjE5ZWU0Yzg0YWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB0Vrc3R0CB/QIYSMbWhXnYxIvYgIXJFlhN3vnPzx7joROWnhVYHVA7S O+qilsWVoduczav6gGRZQEICOExGqLcLUqiPmSunYLYJXp6UZ4BXbQIzRAH/S45V 5Q6gwLGDOnQYHdepxRkKmlskUO5kzHZWb1uGpFwLFL8ZRwceHtPxIz2BA7j8clKy ypMFBp+gpwF+EQpb/PqluwEUKdLeurBsCgjiDpgHtqOxKaYoFyOI3jaUnOFrycPs s6PqU2qucgAa06Qd1PVlNbKOnbiTNzj+eMxChkHr3xOrN62IPJ6u1c6/ja44t/Ii oTQB9NH7t46kCYfm2KVEHBp8vchnJiI= -----END CERTIFICATE-----Generated at Sun Apr 27 13:03:45 2025 by rpki-client