$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7edea7e-9f0d-30ed-9475-66918a720111.roa File: d7edea7e-9f0d-30ed-9475-66918a720111.roa (raw, json) Hash identifier: KoqskKfObHT2wQ++Ez1h7yA9XUqfQ4ZVK+VHHREQZr0= Subject key identifier: DE:38:4B:64:35:BF:86:CA:8D:AB:A1:D2:25:A6:AF:12:17:84:11:E7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B57B2AB87D1C230E4B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7edea7e-9f0d-30ed-9475-66918a720111.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3561 IP address blocks: 136.0.218.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b5:7b:2a:b8:7d:1c:23:0e:4b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=7e4e2dd0-e692-478d-b5ec-da27d224f3be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:54:08:07:ba:a7:77:f3:5a:b3:76:38:21:83: 14:17:c1:dd:8e:1c:fe:e1:27:a8:61:f5:49:7d:0c: 9e:9a:35:ee:06:86:93:ea:f4:ba:5b:31:74:2f:0f: 8d:ca:d9:ef:f5:67:a2:22:3b:1a:b5:8b:0b:8f:4b: 07:db:49:43:59:82:92:c1:b5:6b:21:8e:8d:ef:5b: 46:ba:74:f0:07:bf:15:87:ee:d0:9c:8c:72:ad:47: ce:0e:30:02:e8:37:8d:7d:7b:c0:3e:ef:d3:e9:b0: 9d:05:f8:a3:c6:41:40:28:fa:6d:ee:8f:17:86:3f: f3:e3:e4:df:28:f2:c8:f8:fb:ed:2f:c4:16:e0:af: 6e:ae:53:89:15:bd:e4:91:cf:b4:bf:c8:e5:6e:54: 64:59:67:41:3e:4d:72:a8:47:c3:c4:6a:28:7b:ae: 26:64:a9:b2:59:b0:d6:ab:1a:72:68:6f:ea:92:0b: ff:00:42:d4:dd:88:75:d8:ae:0e:d0:24:29:e9:65: 48:74:35:05:89:e1:6d:f1:b5:59:ec:bc:50:43:98: db:1b:e5:51:6c:cb:cb:6d:ac:14:5f:8f:d8:41:5e: bb:46:d2:1b:1a:75:bb:06:00:47:34:58:41:2c:4d: ee:4c:e7:23:12:c0:f1:87:04:f5:4c:16:c7:c8:0e: 6d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:38:4B:64:35:BF:86:CA:8D:AB:A1:D2:25:A6:AF:12:17:84:11:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d7edea7e-9f0d-30ed-9475-66918a720111.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.218.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:23:14:10:23:be:e6:f1:08:40:8c:99:40:1c:ad:4f:8d:ed: 49:1b:16:77:f9:c8:4b:ad:36:59:e3:c3:29:3f:8c:3d:cf:69: 1a:63:37:28:a6:af:08:d8:eb:8d:31:ef:f8:de:da:5a:03:fb: 86:ae:16:73:0d:28:30:6f:94:e3:0d:3a:2a:3c:3b:88:8a:16: 3e:a5:de:26:3f:24:d6:2d:ca:76:2b:ac:50:dc:a2:c1:e5:45: c7:ce:89:e6:59:0a:5c:72:5c:85:38:98:29:3c:ca:fb:93:b9: 01:e4:a8:05:5d:df:a3:72:82:2f:9e:4b:35:24:a3:5d:b0:ec: 44:84:90:78:ef:49:cc:c9:09:cd:b3:d5:c4:94:0b:3c:06:72: 2d:32:5f:e8:f6:f7:bb:fe:41:54:3c:74:f9:f7:fe:5c:00:4d: be:bf:03:b9:76:16:f0:36:3b:f4:d4:da:a1:3b:cd:4a:5d:9f: 15:d0:27:da:e2:84:bc:df:53:56:16:c4:ff:aa:57:3e:ea:81: fb:fc:4b:8b:90:f2:3c:f7:15:b1:33:35:0a:ca:30:a8:d1:70: b8:c6:21:a5:5e:f9:77:aa:70:2d:6c:ab:dc:3d:83:0b:e1:55: c3:72:8e:ed:9b:ee:a0:17:30:25:91:b1:ba:e3:0f:22:d0:fa: d3:a3:a8:64 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLV7Krh9HCMOSwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk N2U0ZTJkZDAtZTY5Mi00NzhkLWI1ZWMtZGEyN2QyMjRmM2JlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVQIB7qnd/Nas3Y4IYMUF8Hdjhz+4SeoYfVJ fQyemjXuBoaT6vS6WzF0Lw+Nytnv9WeiIjsatYsLj0sH20lDWYKSwbVrIY6N71tG unTwB78Vh+7QnIxyrUfODjAC6DeNfXvAPu/T6bCdBfijxkFAKPpt7o8Xhj/z4+Tf KPLI+PvtL8QW4K9urlOJFb3kkc+0v8jlblRkWWdBPk1yqEfDxGooe64mZKmyWbDW qxpyaG/qkgv/AELU3Yh12K4O0CQp6WVIdDUFieFt8bVZ7LxQQ5jbG+VRbMvLbawU X4/YQV67RtIbGnW7BgBHNFhBLE3uTOcjEsDxhwT1TBbHyA5t/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN44S2Q1v4bKjauh0iWmrxIXhBHnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDdlZGVhN2UtOWYwZC0z MGVkLTk0NzUtNjY5MThhNzIwMTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMjFBAjvubxCECMmUAcrU+N7UkbFnf5yEutNlnjwyk/jD3PaRpjNyim rwjY640x7/je2loD+4auFnMNKDBvlOMNOio8O4iKFj6l3iY/JNYtynYrrFDcosHl RcfOieZZClxyXIU4mCk8yvuTuQHkqAVd36Nygi+eSzUko12w7ESEkHjvSczJCc2z 1cSUCzwGci0yX+j297v+QVQ8dPn3/lwATb6/A7l2FvA2O/TU2qE7zUpdnxXQJ9ri hLzfU1YWxP+qVz7qgfv8S4uQ8jz3FbEzNQrKMKjRcLjGIaVe+XeqcC1sq9w9gwvh VcNyju2b7qAXMCWRsbrjDyLQ+tOjqGQ= -----END CERTIFICATE-----Generated at Sun Apr 27 02:11:30 2025 by rpki-client