$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7d9c914-4c1a-3bd4-9c80-c020ed090cab.roa File: d7d9c914-4c1a-3bd4-9c80-c020ed090cab.roa (raw, json) Hash identifier: dgAQAN8FRB5VlGwZ/qpB37AWyg5snT71et4lJsHL28A= Subject key identifier: E7:0F:89:BE:B0:18:1B:C5:08:41:E0:A0:9B:19:7B:E5:21:B0:CF:93 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B4495FC49FE16A0B452E Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7d9c914-4c1a-3bd4-9c80-c020ed090cab.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 6939 IP address blocks: 136.0.53.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b4:49:5f:c4:9f:e1:6a:0b:45:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=25f70ac0-5915-4715-bffc-3fb79a367a12 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:90:74:9f:76:f6:44:c9:35:5a:b8:0f:49:13: f5:2b:64:5c:d3:d6:f0:7a:2b:66:0a:67:51:19:b4: 52:b4:53:a6:9a:4c:b7:8a:03:6c:09:6b:3b:ea:fc: 2e:ac:d1:8c:27:f3:25:be:a7:3a:36:28:13:f3:71: 6f:6f:f9:ba:ea:36:40:f3:2c:47:b8:57:06:09:83: 48:f9:69:f5:6e:ae:0a:10:04:69:ca:d1:94:b8:7f: 82:03:b8:8d:7e:be:05:58:7d:fa:bd:64:aa:01:e7: 99:55:fc:b0:1f:34:30:2b:2b:c4:68:23:73:bb:c3: 95:84:3d:92:e8:2f:23:24:3b:04:b0:0f:48:d7:68: 00:21:96:50:f5:72:66:65:23:40:36:02:d1:98:18: 0e:05:01:9e:46:45:f1:f9:2f:67:f6:59:04:ad:06: 6b:fb:59:0f:74:21:60:8f:7f:48:0c:40:87:06:a5: 9c:62:2a:13:9c:32:1c:39:57:8d:ae:f7:4e:4a:e7: ce:11:2b:ef:a6:fc:53:4c:49:69:a5:d3:f2:98:f6: e2:5c:29:b3:3e:8f:08:74:f9:7a:ce:03:f9:b0:e7: 81:14:7d:0b:c6:c3:36:4c:11:ba:1d:58:24:64:74: 82:76:be:bc:fc:84:3e:ca:8f:bc:92:a9:48:da:46: 65:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:0F:89:BE:B0:18:1B:C5:08:41:E0:A0:9B:19:7B:E5:21:B0:CF:93 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7d9c914-4c1a-3bd4-9c80-c020ed090cab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.53.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:e7:4a:97:42:85:82:14:50:03:34:0b:e0:0d:75:53:2b:8d: 78:09:0f:fa:df:d8:71:de:11:07:2b:97:85:a5:13:81:3a:1c: 88:06:03:ef:94:6b:5c:95:1b:8e:0e:cd:3e:8d:ab:07:07:3b: 00:72:43:63:12:e8:46:09:49:ce:aa:97:e1:46:2d:6a:c4:b5: 1d:5a:45:59:21:d7:60:c2:5d:6f:ab:0a:18:70:21:ec:09:af: 9d:73:2b:ed:37:97:2d:ef:7f:3a:82:ac:23:6d:1f:f7:47:72: 33:68:17:97:7e:3e:98:45:1c:d1:8e:e2:a2:33:1f:34:b0:5f: 0b:53:fa:6a:66:c2:30:42:08:69:ee:17:ba:b2:e6:ef:28:36: fe:fe:fd:e9:a7:69:74:84:ae:cd:c1:a7:8f:50:f2:2d:ba:19: 05:8d:a5:37:9d:01:c5:a5:8e:0b:e2:59:4d:14:ab:58:24:0b: 11:27:52:7b:a2:e9:95:7e:f4:68:bd:26:77:90:ea:ad:07:30: 8b:52:ee:85:06:6d:a3:1d:7d:91:b5:c5:91:3a:3f:51:e0:46: c1:40:b4:73:5e:86:d7:ae:68:02:2a:19:af:88:17:0f:a2:8b: 53:60:dd:27:aa:96:02:79:69:34:d5:af:80:8f:4a:ef:95:e5: 7c:e9:9e:09 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLRJX8Sf4WoLRS4wDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk MjVmNzBhYzAtNTkxNS00NzE1LWJmZmMtM2ZiNzlhMzY3YTEyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5B0n3b2RMk1WrgPSRP1K2Rc09bweitmCmdR GbRStFOmmky3igNsCWs76vwurNGMJ/Mlvqc6NigT83Fvb/m66jZA8yxHuFcGCYNI +Wn1bq4KEARpytGUuH+CA7iNfr4FWH36vWSqAeeZVfywHzQwKyvEaCNzu8OVhD2S 6C8jJDsEsA9I12gAIZZQ9XJmZSNANgLRmBgOBQGeRkXx+S9n9lkErQZr+1kPdCFg j39IDECHBqWcYioTnDIcOVeNrvdOSufOESvvpvxTTElppdPymPbiXCmzPo8IdPl6 zgP5sOeBFH0LxsM2TBG6HVgkZHSCdr68/IQ+yo+8kqlI2kZlCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOcPib6wGBvFCEHgoJsZe+UhsM+TMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDdkOWM5MTQtNGMxYS0z YmQ0LTljODAtYzAyMGVkMDkwY2FiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACjnSpdChYIUUAM0C+ANdVMrjXgJD/rf2HHeEQcrl4WlE4E6HIgGA++U a1yVG44OzT6NqwcHOwByQ2MS6EYJSc6ql+FGLWrEtR1aRVkh12DCXW+rChhwIewJ r51zK+03ly3vfzqCrCNtH/dHcjNoF5d+PphFHNGO4qIzHzSwXwtT+mpmwjBCCGnu F7qy5u8oNv7+/emnaXSErs3Bp49Q8i26GQWNpTedAcWljgviWU0Uq1gkCxEnUnui 6ZV+9Gi9JneQ6q0HMItS7oUGbaMdfZG1xZE6P1HgRsFAtHNehteuaAIqGa+IFw+i i1Ng3SeqlgJ5aTTVr4CPSu+V5Xzpngk= -----END CERTIFICATE-----Generated at Sun Apr 27 23:01:13 2025 by rpki-client