$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa File: 1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa (raw, json) Hash identifier: MPchxigH7ANNt2vKk07xBQaQEEkH87dB7qHAfCNIyE8= Subject key identifier: 5D:CA:E4:C6:04:95:E7:8F:5A:8D:4B:24:C3:D5:B0:92:AD:0E:39:63 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584862659406E5398360C15CCFB0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa Signing time: Tue 31 Dec 2024 02:00:40 +0000 ROA not before: Tue 31 Dec 2024 02:00:40 +0000 ROA not after: Mon 31 Mar 2025 01:00:40 +0000 asID: 149440 IP address blocks: 136.0.10.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:62:65:94:06:e5:39:83:60:c1:5c:cf:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Dec 31 02:00:40 2024 GMT Not After : Mar 31 01:00:40 2025 GMT Subject: CN=03885455-7fd7-42eb-9198-a084f191da71 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:b2:40:fa:38:dc:1a:98:75:5c:8e:40:82:49: dc:d0:6e:02:89:80:16:15:d8:93:04:71:53:4e:ce: c0:a2:f5:f3:07:fc:33:4f:02:0b:b2:02:8d:f9:37: 00:1f:60:b7:5f:9b:c8:c3:4e:c8:83:86:06:76:ce: a8:d1:92:a2:69:6f:0d:6d:13:0f:fc:f0:e5:95:f4: f8:4f:7e:06:16:fd:36:95:60:29:5d:fb:e7:b9:f6: 24:ae:08:18:ba:a5:03:3e:8a:c7:67:3e:83:b1:9c: b1:16:fa:21:86:1e:a2:1a:9f:cd:dd:cd:b3:89:5b: d5:3d:04:f5:bc:7f:9b:9a:1f:61:99:81:69:89:bc: 52:9e:2d:b1:49:fe:68:64:e1:ad:b3:ad:a4:5c:a8: 75:5f:8a:ba:99:5e:01:9d:8d:7d:e5:29:6f:1f:4c: 2c:f9:e5:c3:9c:84:40:06:ef:d6:b4:f0:16:ea:5d: aa:11:90:2b:fe:f2:a3:a1:d9:b9:db:37:c9:27:46: d3:77:14:8e:e4:b6:2e:39:37:3d:c7:95:ba:08:84: f1:25:7e:0a:02:f0:18:e8:31:29:3a:8a:13:d9:76: 99:57:62:8a:86:91:10:da:63:43:ef:7f:ea:a3:ac: 0c:a8:fb:44:98:6e:97:9c:89:66:bb:99:6d:ee:14: cf:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:CA:E4:C6:04:95:E7:8F:5A:8D:4B:24:C3:D5:B0:92:AD:0E:39:63 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1ffe9ccb-7fa3-3e68-b497-dd5c09a9c67c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.10.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:1b:67:53:16:23:70:d0:6a:67:64:0f:1e:d9:94:8c:92:94: 95:c0:dd:53:e9:d9:af:ae:be:d2:1c:de:c8:92:cb:d2:98:5e: d9:7d:b4:a1:2c:6b:cd:5d:72:c1:11:15:02:fb:60:31:70:68: 3a:97:cb:bc:3b:22:0d:b4:57:42:99:84:07:db:2b:b9:84:18: 7a:65:c6:e7:1b:38:de:61:ae:d1:0e:97:b6:61:4d:75:e3:76: 0b:1d:b6:95:cc:dc:1f:17:72:41:74:af:d2:af:f5:73:c0:fd: 12:8f:b3:b6:ea:f3:3c:d7:1f:18:d8:47:21:08:8e:af:6a:c1: 9c:eb:e0:79:06:b9:a7:d8:63:34:8a:59:e4:48:e5:e4:6a:e6: 81:14:b9:93:c1:e6:2d:55:63:14:b4:cd:57:2b:7e:e4:74:ab: 78:e9:12:8e:50:bb:ec:b9:47:e7:6e:8a:9e:3a:b4:6c:97:a2: e9:49:d9:21:4d:97:1a:fe:0f:d4:64:3e:0a:83:b2:f7:0d:85: 8b:c4:c6:d9:0c:79:b1:06:a1:1f:c5:6b:a0:e5:e8:93:35:57: a3:16:51:05:19:58:51:5b:fb:85:7f:89:8e:ad:7d:06:36:ca: 6a:e9:9b:66:52:9c:d0:26:36:c8:da:92:ce:c3:ce:d7:3a:63: 47:f4:9a:7e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhiZZQG5TmDYMFcz7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI0MTIzMTAyMDA0MFoXDTI1MDMzMTAxMDA0MFowLzEtMCsGA1UEAxMk MDM4ODU0NTUtN2ZkNy00MmViLTkxOTgtYTA4NGYxOTFkYTcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbJA+jjcGph1XI5Agknc0G4CiYAWFdiTBHFT Ts7AovXzB/wzTwILsgKN+TcAH2C3X5vIw07Ig4YGds6o0ZKiaW8NbRMP/PDllfT4 T34GFv02lWApXfvnufYkrggYuqUDPorHZz6DsZyxFvohhh6iGp/N3c2ziVvVPQT1 vH+bmh9hmYFpibxSni2xSf5oZOGts62kXKh1X4q6mV4BnY195SlvH0ws+eXDnIRA Bu/WtPAW6l2qEZAr/vKjodm52zfJJ0bTdxSO5LYuOTc9x5W6CITxJX4KAvAY6DEp OooT2XaZV2KKhpEQ2mND73/qo6wMqPtEmG6XnIlmu5lt7hTPxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF3K5MYEleePWo1LJMPVsJKtDjljMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWZmZTljY2ItN2ZhMy0z ZTY4LWI0OTctZGQ1YzA5YTljNjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAEbZ1MWI3DQamdkDx7ZlIySlJXA3VPp2a+uvtIc3siSy9KYXtl9tKEs a81dcsERFQL7YDFwaDqXy7w7Ig20V0KZhAfbK7mEGHplxucbON5hrtEOl7ZhTXXj dgsdtpXM3B8XckF0r9Kv9XPA/RKPs7bq8zzXHxjYRyEIjq9qwZzr4HkGuafYYzSK WeRI5eRq5oEUuZPB5i1VYxS0zVcrfuR0q3jpEo5Qu+y5R+duip46tGyXoulJ2SFN lxr+D9RkPgqDsvcNhYvExtkMebEGoR/Fa6Dl6JM1V6MWUQUZWFFb+4V/iY6tfQY2 ymrpm2ZSnNAmNsjaks7Dztc6Y0f0mn4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:33:43 2025 by rpki-client