$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2a4a8690-2dc0-3359-85f6-e5b79a0abb86.roa File: 2a4a8690-2dc0-3359-85f6-e5b79a0abb86.roa (raw, json) Hash identifier: 1fnYzRPwggK8aY4JMYbZvirwCCANIJXqBAVJxIQzZfs= Subject key identifier: 1C:EE:AE:26:20:4E:56:4D:04:4B:28:CF:C0:97:18:60:B6:60:71:84 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858493C093892E9CD040444AA0100 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2a4a8690-2dc0-3359-85f6-e5b79a0abb86.roa Signing time: Wed 19 Mar 2025 01:00:40 +0000 ROA not before: Wed 19 Mar 2025 01:00:40 +0000 ROA not after: Tue 17 Jun 2025 01:00:40 +0000 asID: 16276 IP address blocks: 136.0.248.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:3c:09:38:92:e9:cd:04:04:44:aa:01:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 19 01:00:40 2025 GMT Not After : Jun 17 01:00:40 2025 GMT Subject: CN=276da1f0-1805-4ada-a705-23ae6e250ce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4b:af:3d:9b:ee:f2:61:ba:ad:4e:11:ba:f9: 87:46:de:3d:8a:75:a3:57:21:db:5f:86:4a:54:0c: 58:fe:29:df:53:03:22:74:9e:60:c2:38:1f:5a:ae: 9c:ee:56:35:b6:b5:f5:83:bb:17:7c:14:6d:0b:c3: 53:00:2f:56:4c:26:3f:96:3c:7f:d1:19:f0:6c:b0: ec:85:d0:1d:6e:ad:da:00:18:06:2b:cd:19:4e:94: 26:4b:63:90:6a:44:06:7c:e2:0f:08:71:33:f1:6b: 92:26:ba:f7:32:ca:78:35:46:44:3c:2e:38:1f:7b: 0a:70:78:dc:46:fb:72:2b:8f:d9:6b:ca:ff:85:c1: 17:a0:63:67:c3:bf:c8:19:65:4b:e9:58:eb:2d:96: fd:f8:bb:50:5c:d5:2a:eb:48:3b:55:32:f3:23:8a: 8c:2b:79:da:0c:26:98:ea:5b:da:86:20:64:b2:c3: 74:65:8f:ea:41:ef:ba:14:69:40:e8:d0:d4:9e:76: db:99:b7:3e:4d:13:67:d2:28:fa:26:fb:42:0c:86: 71:7d:f3:6c:2c:0c:eb:8e:8a:19:c6:fd:95:73:82: ed:11:bb:7a:76:6d:c1:04:a7:bd:fe:d7:a6:f8:05: a3:51:06:6e:f0:1f:95:20:7a:15:02:17:c2:c4:3d: b1:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:EE:AE:26:20:4E:56:4D:04:4B:28:CF:C0:97:18:60:B6:60:71:84 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2a4a8690-2dc0-3359-85f6-e5b79a0abb86.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.248.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:68:91:24:7f:1a:bd:38:48:ec:b3:fc:63:0b:f0:b5:61:5b: a3:0f:11:77:d1:49:bf:04:5b:e1:13:fc:26:1d:17:d1:20:31: a3:0b:18:94:d0:1d:5a:a0:37:be:f7:d5:d7:04:ad:f9:05:5d: a6:04:89:4d:32:08:ee:03:a4:e1:10:1b:83:21:19:db:af:aa: 15:67:bd:86:98:02:7d:1c:bc:91:71:81:47:52:8c:e0:66:71: 05:f3:16:d8:f9:b5:71:5d:45:58:82:a1:04:35:ae:85:49:63: 00:6c:26:84:f8:ea:8f:38:91:01:65:5a:00:c0:6a:10:9f:2c: 88:59:b7:da:38:dd:e3:36:47:56:ab:94:1c:43:d3:86:ae:89: 6f:fa:5e:9e:9f:04:23:05:d8:93:3c:07:d6:94:34:a1:ef:66: bc:ac:92:3e:02:ec:5a:6e:dd:1a:07:f6:c7:40:da:14:0d:6e: 88:2d:20:05:a8:95:35:be:54:06:fd:59:74:c2:d1:21:09:88: 7f:ea:cb:19:3c:65:25:db:66:4d:40:6b:9f:a1:7b:8a:25:9f: 3d:b4:06:3a:4e:52:b5:e9:95:f5:26:18:6b:11:f4:3b:e0:ec: 13:4e:bc:07:4f:2f:b8:d8:a0:34:69:46:03:ad:9a:4f:a6:19: 62:97:81:43 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CTiS6c0EBESqAQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk Mjc2ZGExZjAtMTgwNS00YWRhLWE3MDUtMjNhZTZlMjUwY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkuvPZvu8mG6rU4RuvmHRt49inWjVyHbX4ZK VAxY/infUwMidJ5gwjgfWq6c7lY1trX1g7sXfBRtC8NTAC9WTCY/ljx/0RnwbLDs hdAdbq3aABgGK80ZTpQmS2OQakQGfOIPCHEz8WuSJrr3Msp4NUZEPC44H3sKcHjc RvtyK4/Za8r/hcEXoGNnw7/IGWVL6VjrLZb9+LtQXNUq60g7VTLzI4qMK3naDCaY 6lvahiBkssN0ZY/qQe+6FGlA6NDUnnbbmbc+TRNn0ij6JvtCDIZxffNsLAzrjooZ xv2Vc4LtEbt6dm3BBKe9/tem+AWjUQZu8B+VIHoVAhfCxD2xPwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBzuriYgTlZNBEsoz8CXGGC2YHGEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmE0YTg2OTAtMmRjMC0z MzU5LTg1ZjYtZTViNzlhMGFiYjg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACdokSR/Gr04SOyz/GML8LVhW6MPEXfRSb8EW+ET/CYdF9EgMaMLGJTQ HVqgN7731dcErfkFXaYEiU0yCO4DpOEQG4MhGduvqhVnvYaYAn0cvJFxgUdSjOBm cQXzFtj5tXFdRViCoQQ1roVJYwBsJoT46o84kQFlWgDAahCfLIhZt9o43eM2R1ar lBxD04auiW/6Xp6fBCMF2JM8B9aUNKHvZryskj4C7Fpu3RoH9sdA2hQNbogtIAWo lTW+VAb9WXTC0SEJiH/qyxk8ZSXbZk1Aa5+he4olnz20BjpOUrXplfUmGGsR9Dvg 7BNOvAdPL7jYoDRpRgOtmk+mGWKXgUM= -----END CERTIFICATE-----Generated at Sat Apr 5 04:39:36 2025 by rpki-client