$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4135da2-afdd-3ff2-86e9-44177b4ddc38.roa File: c4135da2-afdd-3ff2-86e9-44177b4ddc38.roa (raw, json) Hash identifier: 3JXI+oKOne2pyLj8r21bobmy5rv/HLMU+g+mo2w+eoQ= Subject key identifier: A1:3F:3B:2F:97:65:CD:44:D1:32:73:A1:5C:54:55:8A:A3:45:D2:23 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B41CF2D75F9AAE8B9BC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4135da2-afdd-3ff2-86e9-44177b4ddc38.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 54252 IP address blocks: 136.0.46.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b4:1c:f2:d7:5f:9a:ae:8b:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=0b309c03-f35d-4cd1-bb5a-1fda2e87d10c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:17:f1:a1:01:45:88:bb:84:fc:92:3d:41:d2: e9:8a:de:58:47:18:ba:bb:df:1b:6d:32:e7:20:fa: eb:b5:10:15:97:63:cf:67:04:b3:3a:96:29:87:6d: 84:84:05:ec:73:34:aa:e5:7e:65:37:e4:d6:0c:94: e5:64:79:47:f2:61:37:50:25:88:27:9e:37:5f:e2: c2:9b:79:94:2a:30:cf:de:79:4a:49:5a:12:6b:ad: 49:76:cb:a2:c9:d0:ee:29:1f:03:5c:d9:fb:3c:9b: 80:86:65:ed:bd:26:22:1b:28:5f:20:1f:5b:d5:3b: b1:d3:e7:30:d5:01:6b:0a:53:9d:9b:67:fb:09:a4: fb:16:bc:75:8b:06:0f:84:d3:d7:fc:e6:c5:16:46: 01:f9:58:91:6b:bc:fe:a5:4d:8a:2f:96:67:02:54: a7:0b:c7:27:d0:1e:59:54:3f:84:1b:e5:8c:94:fa: 13:34:a2:03:b0:76:5c:98:29:6a:31:ef:e4:1e:56: 1e:d5:b4:14:41:03:2b:d2:c1:b4:df:8a:4a:7a:ac: b6:cb:76:3b:15:f3:7f:69:3f:4a:80:17:21:5b:60: a4:78:e7:80:7b:fc:a6:4d:a6:6c:a4:ca:b5:68:80: 05:2f:3e:08:3b:ea:59:40:45:b2:83:c6:b8:f9:d5: 45:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:3F:3B:2F:97:65:CD:44:D1:32:73:A1:5C:54:55:8A:A3:45:D2:23 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c4135da2-afdd-3ff2-86e9-44177b4ddc38.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.46.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:11:84:0e:ce:99:51:82:bf:0f:8d:2d:a1:d6:53:65:f8:97: b8:df:d3:12:3f:95:64:08:fd:d2:29:40:51:34:a2:f5:48:cb: 36:ee:f1:79:bf:98:81:29:e6:5e:22:a2:21:72:15:37:c6:17: 27:48:67:b5:74:ca:ce:b8:50:b3:7c:e6:ec:15:b6:8b:16:b6: 7b:50:89:54:de:ba:c6:18:b2:1c:c6:46:50:dd:fb:6f:37:a8: f6:9f:be:cc:ed:be:d1:5a:65:31:77:ed:81:07:ee:21:14:ae: ae:90:a0:a8:e1:ba:99:b3:2f:17:fa:11:2c:b0:ef:a8:f2:95: 4c:9f:7b:53:e6:41:cc:99:d9:20:08:22:00:66:b3:65:d1:e7: ab:e1:27:5c:b8:42:5c:31:f5:4a:09:e0:3b:77:fc:5a:b5:92: 60:c6:73:2b:5e:98:de:32:7a:65:03:a7:95:6f:4b:40:3e:ca: 8d:a7:3c:a8:a4:83:d5:47:40:c1:bd:00:33:60:c4:94:c7:08: da:78:ef:62:30:d1:81:e2:eb:c4:8b:a8:5e:51:a3:f7:35:c8: 2b:8a:a3:08:17:75:f7:94:05:ee:4f:a4:bb:15:2f:ed:91:a7: a8:8a:36:66:cf:85:92:8b:b2:b2:ac:20:aa:a4:01:d8:84:6d: 40:97:e3:82 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLQc8tdfmq6Lm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MGIzMDljMDMtZjM1ZC00Y2QxLWJiNWEtMWZkYTJlODdkMTBjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjxfxoQFFiLuE/JI9QdLpit5YRxi6u98bbTLn IPrrtRAVl2PPZwSzOpYph22EhAXsczSq5X5lN+TWDJTlZHlH8mE3UCWIJ543X+LC m3mUKjDP3nlKSVoSa61JdsuiydDuKR8DXNn7PJuAhmXtvSYiGyhfIB9b1Tux0+cw 1QFrClOdm2f7CaT7Frx1iwYPhNPX/ObFFkYB+ViRa7z+pU2KL5ZnAlSnC8cn0B5Z VD+EG+WMlPoTNKIDsHZcmClqMe/kHlYe1bQUQQMr0sG034pKeqy2y3Y7FfN/aT9K gBchW2CkeOeAe/ymTaZspMq1aIAFLz4IO+pZQEWyg8a4+dVFpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKE/Oy+XZc1E0TJzoVxUVYqjRdIjMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzQxMzVkYTItYWZkZC0z ZmYyLTg2ZTktNDQxNzdiNGRkYzM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAuMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFERhA7OmVGCvw+NLaHWU2X4l7jf0xI/lWQI/dIpQFE0ovVIyzbu8Xm/ mIEp5l4ioiFyFTfGFydIZ7V0ys64ULN85uwVtosWtntQiVTeusYYshzGRlDd+283 qPafvsztvtFaZTF37YEH7iEUrq6QoKjhupmzLxf6ESyw76jylUyfe1PmQcyZ2SAI IgBms2XR56vhJ1y4Qlwx9UoJ4Dt3/Fq1kmDGcytemN4yemUDp5VvS0A+yo2nPKik g9VHQMG9ADNgxJTHCNp472Iw0YHi68SLqF5Ro/c1yCuKowgXdfeUBe5PpLsVL+2R p6iKNmbPhZKLsrKsIKqkAdiEbUCX44I= -----END CERTIFICATE-----Generated at Sat Apr 26 19:10:38 2025 by rpki-client