$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa File: f0d0695f-744b-383e-af40-aaa149e0105b.roa (raw, json) Hash identifier: l7r7NHBE65uzbkPtRhPqSvSCih5u+BnxAvri7OeiFik= Subject key identifier: 83:2F:29:4E:63:D1:27:26:EE:F3:6A:B8:86:66:CE:B5:98:3D:6C:1B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849552959607E59A8C98F08E500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa Signing time: Fri 28 Mar 2025 01:00:41 +0000 ROA not before: Fri 28 Mar 2025 01:00:41 +0000 ROA not after: Thu 26 Jun 2025 01:00:41 +0000 asID: 149440 IP address blocks: 136.0.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:55:29:59:60:7e:59:a8:c9:8f:08:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 28 01:00:41 2025 GMT Not After : Jun 26 01:00:41 2025 GMT Subject: CN=6c377e94-2cdf-41c6-b52c-ad4c6acaabd5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:41:78:74:cb:2b:3e:ef:9b:57:39:c6:b7:b0: 92:48:2b:80:11:e0:fb:6f:3c:ec:ce:f1:cb:a1:9b: 91:79:7d:ed:ed:e7:92:ef:0c:56:9d:ef:01:98:3c: 79:8f:50:8c:46:37:2f:20:fc:73:5f:b2:08:45:96: 70:25:3a:2b:c7:35:4d:62:ac:1e:90:a9:54:75:1e: 47:0f:f3:93:11:34:39:d8:c3:10:43:26:31:b1:6c: a8:97:3f:90:cd:a0:b9:d6:0f:d2:4b:03:ef:b0:61: d8:92:01:31:92:b5:27:89:cf:2b:11:5b:f9:8e:99: 81:bc:b1:da:16:ca:4c:a0:b2:0e:f9:83:9a:4d:9a: 57:e1:5d:22:2a:d9:09:90:d3:bb:00:fc:20:3c:ce: 74:e0:82:3e:77:ce:ff:92:44:7a:d8:e0:36:e5:d3: 13:20:be:33:37:46:99:6c:80:31:8d:23:6b:cb:3b: f5:d5:16:99:ae:20:02:9e:c2:3c:fb:e4:a7:c1:2b: c2:6a:11:67:fe:61:41:8b:26:7a:cf:ea:9b:c4:c6: 5a:c8:72:67:d9:c3:f1:f9:f1:50:6d:22:be:0f:b5: 20:c8:3a:55:e6:da:39:80:b2:39:92:77:05:55:3c: 92:20:e2:d9:df:e4:1e:9c:32:76:e5:45:a4:7a:49: a1:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:2F:29:4E:63:D1:27:26:EE:F3:6A:B8:86:66:CE:B5:98:3D:6C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 47:84:a3:90:9a:cb:d6:71:e3:1a:9a:2e:e2:cd:e4:e1:84:01: 09:b8:b6:a5:e4:db:40:9b:53:53:d5:0d:91:ef:72:98:02:8b: df:c8:cf:63:70:0d:3f:b5:ab:69:35:50:dd:75:fa:14:8e:1c: 6a:6e:13:c7:c1:5d:db:dc:9c:53:2a:a3:2a:38:5b:d1:ee:6e: ed:d5:1c:b3:0c:7a:a3:ce:40:4f:56:86:6d:fe:77:6c:e7:e0: 4c:b5:fc:da:9b:0a:95:5d:db:a9:88:df:9a:5b:6c:48:e2:e4: 77:b4:70:98:ff:4b:61:69:82:26:fc:45:00:62:4e:78:f4:4f: 4c:7a:ab:1d:e0:05:c0:f0:3a:ea:f3:76:b6:0e:ec:d4:6b:dd: e3:c1:eb:00:5a:0b:14:53:9b:fe:ca:e8:a4:f7:89:77:06:f0: 79:ab:bd:06:e7:1b:2a:86:1a:d6:cb:41:b8:12:e2:47:47:df: 3b:1f:1c:65:4c:78:89:40:d7:2d:d6:e8:b6:e3:14:93:14:b9: ae:6e:a3:55:2e:cb:26:5a:d6:90:f1:15:78:07:bf:43:af:f2: f9:07:73:06:83:6f:9f:31:60:3a:db:d1:2d:c9:10:15:cc:35: 3e:48:d3:1a:20:47:1e:8e:5e:29:42:21:95:d1:fb:a1:b9:d0: dc:cd:94:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElVKVlgflmoyY8I5QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyODAxMDA0MVoXDTI1MDYyNjAxMDA0MVowLzEtMCsGA1UEAxMk NmMzNzdlOTQtMmNkZi00MWM2LWI1MmMtYWQ0YzZhY2FhYmQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0F4dMsrPu+bVznGt7CSSCuAEeD7bzzszvHL oZuReX3t7eeS7wxWne8BmDx5j1CMRjcvIPxzX7IIRZZwJTorxzVNYqwekKlUdR5H D/OTETQ52MMQQyYxsWyolz+QzaC51g/SSwPvsGHYkgExkrUnic8rEVv5jpmBvLHa FspMoLIO+YOaTZpX4V0iKtkJkNO7APwgPM504II+d87/kkR62OA25dMTIL4zN0aZ bIAxjSNryzv11RaZriACnsI8++SnwSvCahFn/mFBiyZ6z+qbxMZayHJn2cPx+fFQ bSK+D7UgyDpV5to5gLI5kncFVTySIOLZ3+QenDJ25UWkekmhJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIMvKU5j0Scm7vNquIZmzrWYPWwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjBkMDY5NWYtNzQ0Yi0z ODNlLWFmNDAtYWFhMTQ5ZTAxMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEeEo5Cay9Zx4xqaLuLN5OGEAQm4tqXk20CbU1PVDZHvcpgCi9/Iz2Nw DT+1q2k1UN11+hSOHGpuE8fBXdvcnFMqoyo4W9Hubu3VHLMMeqPOQE9Whm3+d2zn 4Ey1/NqbCpVd26mI35pbbEji5He0cJj/S2Fpgib8RQBiTnj0T0x6qx3gBcDwOurz drYO7NRr3ePB6wBaCxRTm/7K6KT3iXcG8HmrvQbnGyqGGtbLQbgS4kdH3zsfHGVM eIlA1y3W6LbjFJMUua5uo1UuyyZa1pDxFXgHv0Ov8vkHcwaDb58xYDrb0S3JEBXM NT5I0xogRx6OXilCIZXR+6G50NzNlCM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:11:20 2025 by rpki-client