$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa File: fec06e6b-355e-3207-9516-1dc2330a28af.roa (raw, json) Hash identifier: USFKPVWEtqoFIyD/pzDSEe7tSr83oflLOWCCOD77rW4= Subject key identifier: AF:52:13:33:C0:4A:4E:E5:24:76:D9:16:86:58:29:5C:6F:49:91:36 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858494F93F235A2B83FEF9DD96AA0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 8881 IP address blocks: 136.0.149.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:f2:35:a2:b8:3f:ef:9d:d9:6a:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=a1a770d5-4daf-457e-ae64-329423da1ce7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:dc:19:f0:01:27:2a:8b:a3:9e:5b:9a:cc:ec: de:19:ad:c9:12:a8:88:f9:55:ef:f5:b0:22:4e:53: 4a:83:18:25:a5:09:f3:dd:10:de:52:94:36:39:5f: 65:9d:1f:b1:be:36:4f:a1:c9:12:dd:2f:1a:3b:f0: ec:37:d1:0b:dc:42:a4:2f:b7:5f:a2:c0:65:4e:65: 12:46:45:ce:64:a6:15:37:bf:40:47:28:e4:11:92: ae:3e:0b:2f:7b:89:1c:9d:92:77:4a:c9:71:58:9a: f4:2e:34:3a:88:2a:2a:ca:6b:ce:18:40:f5:67:41: 3f:19:ad:f4:1f:49:49:83:41:c9:97:84:42:5c:28: 56:cd:57:d6:3d:87:a3:a3:c1:ab:6a:ba:a3:dd:b9: ab:12:5b:ae:4d:84:ad:ed:10:15:37:7b:eb:57:32: cb:f1:c2:d4:d4:8d:33:49:97:9e:9b:8b:3a:16:30: 74:95:3b:15:61:b0:ce:32:77:43:72:60:e3:b8:4c: ab:67:1a:76:08:6a:89:e0:b5:43:c2:07:2a:7d:31: 8f:d8:d3:c0:10:e3:78:63:40:95:3b:7c:8b:d4:58: ac:0f:10:12:77:27:d8:96:84:2d:5d:39:89:56:a0: cb:83:55:1c:d2:75:31:43:32:03:92:f1:49:70:80: 02:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:52:13:33:C0:4A:4E:E5:24:76:D9:16:86:58:29:5C:6F:49:91:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fec06e6b-355e-3207-9516-1dc2330a28af.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.149.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 39:12:29:98:68:3b:3a:88:6f:16:ad:4b:46:93:2e:9e:dc:eb: e3:af:98:e2:35:1c:8f:96:91:27:17:aa:0b:9c:ba:e4:59:35: 51:7f:56:f0:5e:c7:e9:67:3a:79:08:02:bd:be:b2:96:ba:b9: 76:ae:d1:e1:9d:4e:26:d4:a3:fd:9c:75:28:57:d4:9f:95:e3: 9a:6b:a7:31:4b:02:d1:b6:68:56:fe:94:32:55:ef:5a:52:4b: 68:e0:40:f9:07:ec:19:d0:a6:73:d7:59:3f:f2:be:0c:41:a1: 9f:50:f7:d0:32:d0:2d:13:b0:7d:bc:12:d3:a9:06:1f:59:99: ce:07:5e:46:30:5d:88:bc:d2:ab:e0:54:07:0f:ef:80:cb:c1: 28:55:0a:f9:1f:f3:0b:26:fb:f8:b9:88:cf:52:b4:5d:57:76: 4c:1e:ee:a1:0c:1d:53:cc:37:d9:12:76:40:00:93:26:a5:d0: 12:0d:48:55:fc:60:ae:78:1e:d3:04:b1:63:56:44:47:6a:bc: a3:a3:c3:75:67:78:c6:ff:7d:94:22:a6:47:ee:f1:ca:e2:d8: 1c:40:5d:e6:cc:1f:a5:38:ef:6a:73:4f:ae:c7:e1:3c:12:32: bb:d2:02:80:b3:b8:78:0f:03:eb:dc:2b:23:39:ae:0a:17:0b: 67:d5:4c:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk/I1org/753ZaqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YTFhNzcwZDUtNGRhZi00NTdlLWFlNjQtMzI5NDIzZGExY2U3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9wZ8AEnKoujnluazOzeGa3JEqiI+VXv9bAi TlNKgxglpQnz3RDeUpQ2OV9lnR+xvjZPockS3S8aO/DsN9EL3EKkL7dfosBlTmUS RkXOZKYVN79ARyjkEZKuPgsve4kcnZJ3SslxWJr0LjQ6iCoqymvOGED1Z0E/Ga30 H0lJg0HJl4RCXChWzVfWPYejo8Grarqj3bmrEluuTYSt7RAVN3vrVzLL8cLU1I0z SZeem4s6FjB0lTsVYbDOMndDcmDjuEyrZxp2CGqJ4LVDwgcqfTGP2NPAEON4Y0CV O3yL1FisDxASdyfYloQtXTmJVqDLg1Uc0nUxQzIDkvFJcIAC1wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9SEzPASk7lJHbZFoZYKVxvSZE2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmVjMDZlNmItMzU1ZS0z MjA3LTk1MTYtMWRjMjMzMGEyOGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADkSKZhoOzqIbxatS0aTLp7c6+OvmOI1HI+WkScXqgucuuRZNVF/VvBe x+lnOnkIAr2+spa6uXau0eGdTibUo/2cdShX1J+V45prpzFLAtG2aFb+lDJV71pS S2jgQPkH7BnQpnPXWT/yvgxBoZ9Q99Ay0C0TsH28EtOpBh9Zmc4HXkYwXYi80qvg VAcP74DLwShVCvkf8wsm+/i5iM9StF1Xdkwe7qEMHVPMN9kSdkAAkyal0BINSFX8 YK54HtMEsWNWREdqvKOjw3VneMb/fZQipkfu8cri2BxAXebMH6U472pzT67H4TwS MrvSAoCzuHgPA+vcKyM5rgoXC2fVTH0= -----END CERTIFICATE-----Generated at Sun Apr 27 05:49:01 2025 by rpki-client