$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa File: 17be945b-e292-3a74-bba1-c34b82ed01e4.roa (raw, json) Hash identifier: z4cGAdZ5TFxBOyz3sxvapPfVQxU1HyEmBgoxHBSXrjM= Subject key identifier: 1A:5E:6B:DA:D0:7F:3D:E5:CA:8B:F9:3F:E6:39:18:F0:66:28:CC:A9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B87435744CCD0F3581080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 6939 IP address blocks: 136.0.37.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 10 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:87:43:57:44:cc:d0:f3:58:10:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=40f9146b-d717-46b2-8d65-e851822fcd26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:14:39:71:9a:b4:fc:cf:d1:cf:69:91:db:ea: 23:db:6a:d6:fa:c9:55:ed:d9:7c:65:9b:8b:99:bc: 72:06:75:67:ce:37:02:57:5c:99:fe:a5:02:69:4a: e0:ac:55:ac:46:36:30:76:f7:02:5a:2c:c1:cd:39: 18:af:db:29:97:6c:10:f1:98:ae:a6:67:36:42:67: f1:66:32:2b:3a:12:35:d9:4b:ac:d3:3b:b6:88:32: c8:17:ac:34:ca:f8:de:ba:52:eb:9e:7d:de:7f:19: 2b:21:ef:27:fd:8d:62:60:8c:78:a7:4f:48:7a:01: 3f:f5:cf:8c:e3:81:a6:ef:87:45:9f:19:05:fd:77: 45:7f:4e:75:82:47:1e:0c:d4:92:e2:52:20:b6:6d: 98:16:b9:92:2e:69:3f:91:7d:d8:25:3d:e3:18:27: 62:89:ce:ee:a5:8d:d4:52:00:0e:77:80:c3:04:06: 00:b3:3c:a3:8d:b9:fa:de:cc:bc:88:7a:6d:1b:26: e4:ec:32:72:3b:cc:dc:5b:37:01:f7:ee:16:32:48: a6:17:96:62:a1:f4:58:64:d4:ba:43:74:93:65:32: 3b:f5:f3:12:31:8c:c0:af:8c:6f:ca:88:c6:4b:3d: 0c:41:7a:08:3f:a1:32:e6:2b:73:c8:62:1b:64:6d: 95:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:5E:6B:DA:D0:7F:3D:E5:CA:8B:F9:3F:E6:39:18:F0:66:28:CC:A9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.37.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:ee:af:1e:22:a8:06:10:08:6c:26:89:4f:d6:0a:e0:fd:0d: 68:7e:e4:02:30:5d:fb:ea:1a:83:0e:0a:00:68:48:09:78:44: 8b:78:d0:15:21:68:ee:07:d6:ab:a9:74:36:94:9a:59:08:73: a3:cf:20:ed:a7:f0:23:81:c0:85:5a:d3:6b:74:4b:97:97:99: 60:28:43:43:38:55:54:0e:69:83:29:29:25:c2:0c:43:9f:a8: c9:47:5e:08:1c:a8:05:ba:e9:56:dd:bb:30:40:b7:03:41:ee: 5c:3e:08:d1:1f:fd:90:03:9a:9a:f8:d8:f6:de:83:92:f2:a3: fa:0f:92:f9:a2:a5:41:cf:44:b9:9e:9b:20:9a:8d:49:98:e8: 17:40:51:32:5f:27:4b:95:19:13:38:08:88:15:85:7a:e4:a7: dd:ac:dd:26:e1:72:68:34:c9:b0:dd:24:12:f4:fc:a5:59:6d: 33:0b:44:cf:6a:d9:c7:71:78:ed:3d:07:f9:2b:7c:26:80:06: f2:55:69:f1:99:13:33:96:e6:df:57:db:cf:05:9f:5c:70:d9: 01:82:20:d6:ea:eb:02:81:58:ab:a4:36:d1:50:d5:36:1a:8a: 9a:29:44:6c:90:89:99:2f:1d:de:b1:80:39:08:d8:9d:3f:9c: 04:b0:d6:ad -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4dDV0TM0PNYEIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk NDBmOTE0NmItZDcxNy00NmIyLThkNjUtZTg1MTgyMmZjZDI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhQ5cZq0/M/Rz2mR2+oj22rW+slV7dl8ZZuL mbxyBnVnzjcCV1yZ/qUCaUrgrFWsRjYwdvcCWizBzTkYr9spl2wQ8Ziupmc2Qmfx ZjIrOhI12Uus0zu2iDLIF6w0yvjeulLrnn3efxkrIe8n/Y1iYIx4p09IegE/9c+M 44Gm74dFnxkF/XdFf051gkceDNSS4lIgtm2YFrmSLmk/kX3YJT3jGCdiic7upY3U UgAOd4DDBAYAszyjjbn63sy8iHptGybk7DJyO8zcWzcB9+4WMkimF5ZiofRYZNS6 Q3STZTI79fMSMYzAr4xvyojGSz0MQXoIP6Ey5itzyGIbZG2VsQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBpea9rQfz3lyov5P+Y5GPBmKMypMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTdiZTk0NWItZTI5Mi0z YTc0LWJiYTEtYzM0YjgyZWQwMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAlMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACzurx4iqAYQCGwmiU/WCuD9DWh+5AIwXfvqGoMOCgBoSAl4RIt40BUh aO4H1qupdDaUmlkIc6PPIO2n8COBwIVa02t0S5eXmWAoQ0M4VVQOaYMpKSXCDEOf qMlHXggcqAW66VbduzBAtwNB7lw+CNEf/ZADmpr42Pbeg5Lyo/oPkvmipUHPRLme myCajUmY6BdAUTJfJ0uVGRM4CIgVhXrkp92s3Sbhcmg0ybDdJBL0/KVZbTMLRM9q 2cdxeO09B/krfCaABvJVafGZEzOW5t9X288Fn1xw2QGCINbq6wKBWKukNtFQ1TYa ipopRGyQiZkvHd6xgDkI2J0/nASw1q0= -----END CERTIFICATE-----Generated at Wed Apr 9 09:19:33 2025 by rpki-client