$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa File: f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa (raw, json) Hash identifier: Ry1PmsEL/u4td7j0HkEqAIRB4/l1do5+79HOlRBS2U0= Subject key identifier: 79:5F:A5:EF:C7:46:8F:E7:FD:47:8F:FB:3C:0C:4E:63:2B:39:3C:6D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294AC046C3C3956402B54C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 136.0.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ac:04:6c:3c:39:56:40:2b:54:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=eec2b40f-a2f0-41d2-a3bf-120d6c249fe2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:80:ef:7d:84:63:00:6f:79:bb:8e:b0:11:12: fc:c7:9b:48:be:a3:01:f4:7e:1a:6b:19:e6:1b:53: 28:ab:cd:80:17:f4:3e:fe:d4:5b:cf:fc:91:55:ad: 80:75:a3:76:d1:4f:d3:e8:d3:0f:07:f9:23:e0:99: 4f:e5:b0:dd:19:8a:d3:e2:61:68:3c:e4:b0:c7:13: 69:9d:14:81:57:17:0b:20:5a:1d:62:de:0e:52:9b: 48:a7:a3:82:01:94:40:fb:a4:75:85:18:c4:ad:6c: bb:73:8f:e7:10:bd:8c:18:37:cb:94:ee:64:8a:30: e2:2d:67:98:4d:1f:d1:81:8d:44:2f:2c:c9:8d:19: 1e:b1:bf:d0:fb:a8:09:78:e0:9a:84:92:3b:0d:b3: ae:e2:b9:36:11:42:a0:de:79:51:14:9a:9b:38:97: 26:ad:7b:f3:8c:61:d8:b5:77:91:1b:e0:10:ed:2a: df:70:50:ae:56:60:07:5f:96:30:a2:b4:66:9c:9a: dd:0c:df:bd:77:ed:0d:09:45:cf:b2:e0:ed:39:03: db:d5:63:c2:fa:67:11:13:0f:9d:68:57:09:7a:2a: 07:c6:08:7f:b1:ae:e4:cf:02:67:c4:a0:f0:8c:2c: 08:d4:73:cb:0e:7d:dd:d9:0a:ac:33:97:1a:5d:fc: cf:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:5F:A5:EF:C7:46:8F:E7:FD:47:8F:FB:3C:0C:4E:63:2B:39:3C:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5d:e7:f1:af:78:40:9a:19:10:8a:ad:a0:00:27:3d:53:ee:ee: 2e:78:4b:33:bc:6b:8e:07:3a:5e:23:37:96:1c:92:9a:41:ce: 03:cf:4b:b4:4b:8a:12:97:1f:14:09:54:cb:b0:10:b0:60:b6: ee:6b:cf:84:a5:29:3c:4c:dc:4d:db:a6:df:f3:53:89:d1:7d: 82:7b:f5:42:37:61:b3:85:2e:23:52:16:ff:4a:76:22:2a:b5: fd:a2:a6:53:f3:5d:8c:27:82:6e:ac:71:8b:df:1e:4d:9b:f8: a6:2f:78:a3:c8:45:02:b3:b1:e8:c3:08:8b:97:6c:44:fc:66: ca:18:c5:69:4b:5e:0f:37:c6:e1:6d:40:b4:ba:e4:c3:9c:60: b6:5d:5b:cb:12:89:c0:55:dc:22:c0:f8:c4:b8:33:46:f8:a3: c9:84:0f:61:cb:b0:20:84:a7:62:03:8f:30:08:df:af:eb:cf: 59:26:d9:f1:c6:45:e8:f2:da:7e:59:87:df:66:4f:95:0c:a1: 50:ff:dc:0e:92:92:ca:89:71:4a:46:3b:b3:02:bf:1e:2e:ee: bd:c2:bb:e8:a0:32:5a:55:96:cc:16:1b:73:32:bd:1a:34:17: 6b:48:c5:41:0e:87:62:f2:3c:25:ff:b9:b0:df:b8:a1:0b:37: 54:33:ef:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKwEbDw5VkArVMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk ZWVjMmI0MGYtYTJmMC00MWQyLWEzYmYtMTIwZDZjMjQ5ZmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIDvfYRjAG95u46wERL8x5tIvqMB9H4aaxnm G1Moq82AF/Q+/tRbz/yRVa2AdaN20U/T6NMPB/kj4JlP5bDdGYrT4mFoPOSwxxNp nRSBVxcLIFodYt4OUptIp6OCAZRA+6R1hRjErWy7c4/nEL2MGDfLlO5kijDiLWeY TR/RgY1ELyzJjRkesb/Q+6gJeOCahJI7DbOu4rk2EUKg3nlRFJqbOJcmrXvzjGHY tXeRG+AQ7SrfcFCuVmAHX5YworRmnJrdDN+9d+0NCUXPsuDtOQPb1WPC+mcREw+d aFcJeioHxgh/sa7kzwJnxKDwjCwI1HPLDn3d2QqsM5caXfzPNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHlfpe/HRo/n/UeP+zwMTmMrOTxtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIxZjFlODUtNzM2My0z YzNhLWJiNzAtYjViYTEyNGNiOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF3n8a94QJoZEIqtoAAnPVPu7i54SzO8a44HOl4jN5YckppBzgPPS7RL ihKXHxQJVMuwELBgtu5rz4SlKTxM3E3bpt/zU4nRfYJ79UI3YbOFLiNSFv9KdiIq tf2iplPzXYwngm6scYvfHk2b+KYveKPIRQKzsejDCIuXbET8ZsoYxWlLXg83xuFt QLS65MOcYLZdW8sSicBV3CLA+MS4M0b4o8mED2HLsCCEp2IDjzAI36/rz1km2fHG Rejy2n5Zh99mT5UMoVD/3A6SksqJcUpGO7MCvx4u7r3Cu+igMlpVlswWG3MyvRo0 F2tIxUEOh2LyPCX/ubDfuKELN1Qz7+c= -----END CERTIFICATE-----Generated at Sun Apr 27 01:57:56 2025 by rpki-client