$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa File: c820322a-1d0d-39d2-b297-a3df5b800d1e.roa (raw, json) Hash identifier: eo2ZLvUdylPGTsIeUl1yv9dKL3yVWBzfSslgRY4jC0g= Subject key identifier: 1B:37:8C:68:1D:1D:50:62:A0:51:66:14:03:0A:8C:15:1F:46:A5:F9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294ACC93B01774DCC74A800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 136.0.250.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ac:c9:3b:01:77:4d:cc:74:a8:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=44656489-eebb-4159-aace-3b1bd1afb080 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:3a:08:19:61:13:b7:e7:8a:24:0d:20:0e:a0: 33:e5:1d:36:1e:e0:bd:fb:92:26:b9:0e:9c:8c:28: ba:8d:d1:20:7b:25:61:ca:47:38:aa:93:a1:c1:28: f2:db:34:7a:06:2e:dd:e8:d9:7e:26:2e:31:49:ec: 8d:07:35:d8:63:a6:bd:01:c8:70:78:87:bc:4d:98: e0:2b:4d:84:7e:46:a7:9a:be:e8:66:af:aa:98:a2: 44:5c:57:5e:69:22:d5:1b:9f:08:aa:a4:7c:ca:3c: 9e:b8:86:26:19:4c:6b:fd:d8:5e:b0:9c:d2:c8:b4: e7:31:03:19:59:f8:12:9a:96:b3:74:51:e1:e6:a3: a7:c3:ea:1a:97:54:0c:b0:71:5e:f7:f2:ea:5e:0b: 8e:be:3a:99:e1:23:be:b6:3a:66:3f:cd:b2:2a:f2: 12:c9:74:ea:25:60:3b:17:51:50:9f:ce:45:0b:a7: cc:d0:fb:ef:0d:2a:79:fc:f6:99:6e:83:1e:7a:3d: 47:26:5d:6b:13:31:07:b2:70:ed:a0:f5:02:92:e8: 38:e0:ab:70:68:34:1d:b6:36:48:f0:9b:a4:38:57: 57:be:ac:92:de:b0:bb:49:b7:77:c7:43:09:8e:c9: 75:b2:1f:e7:7c:61:4d:09:8d:25:cb:5e:2f:bb:b8: 8d:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:37:8C:68:1D:1D:50:62:A0:51:66:14:03:0A:8C:15:1F:46:A5:F9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c820322a-1d0d-39d2-b297-a3df5b800d1e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.250.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:f4:cc:0b:c0:aa:04:9c:10:0e:51:7d:e7:23:ee:cd:41:cb: 42:cd:04:de:fe:ec:45:1f:9b:da:b5:38:96:f4:59:20:9b:7a: 79:57:99:ff:5d:49:71:c3:4e:57:00:8c:c7:aa:fb:b0:f8:4b: 6c:3a:f4:fa:b8:93:a0:d4:99:a0:d6:27:df:9e:90:ca:7a:11: 52:f5:50:0b:ba:0c:9b:0e:a6:79:bd:9a:1b:17:74:17:16:2f: 9c:c8:03:0a:71:1c:40:cd:00:1b:be:4c:0f:33:a7:0b:58:6b: 20:43:ba:aa:11:be:e3:a6:93:8c:5b:6a:4b:f7:a9:9c:7c:fb: 46:1c:34:02:80:6a:89:eb:70:e2:34:e4:0e:8d:29:38:8e:20: c7:ec:f9:ee:f4:f6:7c:79:51:e5:84:ea:85:c4:42:f8:b3:ac: 2e:11:d0:9f:67:93:01:f2:74:9c:1d:4b:72:4b:3a:e5:91:01: 74:f2:37:78:63:22:84:d1:e1:9a:60:f0:79:cb:e4:0e:36:66: f5:b5:ad:75:62:c5:a9:01:ed:f2:cd:3a:bc:09:79:23:63:f6: fa:5f:84:8f:47:7d:52:2f:33:3a:46:a4:e5:57:e5:33:a4:32: 87:f1:45:2e:a0:8b:67:11:9d:96:29:8c:b8:df:18:84:36:2e: 56:15:40:0c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKzJOwF3Tcx0qAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NDQ2NTY0ODktZWViYi00MTU5LWFhY2UtM2IxYmQxYWZiMDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjoIGWETt+eKJA0gDqAz5R02HuC9+5ImuQ6c jCi6jdEgeyVhykc4qpOhwSjy2zR6Bi7d6Nl+Ji4xSeyNBzXYY6a9AchweIe8TZjg K02Efkanmr7oZq+qmKJEXFdeaSLVG58IqqR8yjyeuIYmGUxr/dhesJzSyLTnMQMZ WfgSmpazdFHh5qOnw+oal1QMsHFe9/LqXguOvjqZ4SO+tjpmP82yKvISyXTqJWA7 F1FQn85FC6fM0PvvDSp5/PaZboMeej1HJl1rEzEHsnDtoPUCkug44KtwaDQdtjZI 8JukOFdXvqyS3rC7Sbd3x0MJjsl1sh/nfGFNCY0ly14vu7iNLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBs3jGgdHVBioFFmFAMKjBUfRqX5MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzgyMDMyMmEtMWQwZC0z OWQyLWIyOTctYTNkZjViODAwZDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAH0zAvAqgScEA5Rfecj7s1By0LNBN7+7EUfm9q1OJb0WSCbenlXmf9d SXHDTlcAjMeq+7D4S2w69Pq4k6DUmaDWJ9+ekMp6EVL1UAu6DJsOpnm9mhsXdBcW L5zIAwpxHEDNABu+TA8zpwtYayBDuqoRvuOmk4xbakv3qZx8+0YcNAKAaonrcOI0 5A6NKTiOIMfs+e709nx5UeWE6oXEQvizrC4R0J9nkwHydJwdS3JLOuWRAXTyN3hj IoTR4Zpg8HnL5A42ZvW1rXVixakB7fLNOrwJeSNj9vpfhI9HfVIvMzpGpOVX5TOk MofxRS6gi2cRnZYpjLjfGIQ2LlYVQAw= -----END CERTIFICATE-----Generated at Sun Apr 27 01:22:36 2025 by rpki-client