$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b177f2b-3da7-33d1-b124-bb21e220052e.roa File: 2b177f2b-3da7-33d1-b124-bb21e220052e.roa (raw, json) Hash identifier: xLXMrJjegAyiWrneLKeq++jhmTcWBYTZ7QkdhQjzBk4= Subject key identifier: B2:D5:BA:55:DA:A5:2D:EA:3B:36:90:CB:9F:CF:13:6F:D4:7B:6B:35 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B87C7131A7DFB906C4140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b177f2b-3da7-33d1-b124-bb21e220052e.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 6939 IP address blocks: 136.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:87:c7:13:1a:7d:fb:90:6c:41:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=106061d1-ceb3-4c5f-90d8-fb5c7b017fa3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:a2:80:5e:8f:00:b8:bd:9a:a6:22:dc:b0:15: 30:83:4d:56:ce:92:12:9b:c2:2b:ac:97:c5:ad:00: bf:bb:06:3e:41:74:2e:2a:17:87:b2:7d:7a:55:fa: 60:fd:c8:9f:30:81:65:bc:be:d0:1b:04:e2:af:db: fe:59:66:d2:45:53:cc:fb:52:f6:11:fa:7a:da:e1: 57:b8:ad:73:06:af:5e:d2:51:86:8c:ff:f5:ce:10: 83:c9:76:c8:f6:c9:fb:a5:01:62:fa:99:95:68:89: a4:0a:4c:23:ce:72:4e:5c:c9:ec:2e:b1:ab:b2:a6: a1:a6:d6:28:71:e4:8a:14:38:b6:c7:a1:38:ac:50: 96:e3:89:5f:a5:1d:fc:6d:3a:ad:a6:df:55:3e:33: fd:42:3e:7d:aa:cb:a1:af:5a:d3:6f:77:94:de:65: 35:91:88:a9:7d:65:f7:25:ff:c2:5d:54:4e:81:22: ea:a8:81:13:49:59:31:42:50:a0:34:a5:bd:17:21: 22:e9:30:9e:74:c1:3c:9e:d6:9d:4a:65:1f:c8:96: 5f:51:b8:69:71:61:21:27:0e:76:28:d4:d4:75:19: 7b:d4:c3:3b:71:0a:85:89:d3:be:c3:68:5b:7c:c3: af:36:21:0f:1b:0d:32:d5:a1:e6:64:18:2c:1c:04: d8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:D5:BA:55:DA:A5:2D:EA:3B:36:90:CB:9F:CF:13:6F:D4:7B:6B:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2b177f2b-3da7-33d1-b124-bb21e220052e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:ad:7c:d9:61:53:74:fb:a4:89:10:b8:98:80:3b:14:c1:da: 01:a6:07:46:9f:5d:a0:b9:9a:62:e1:78:d9:f9:ff:8d:20:5b: 6b:33:3d:36:d2:32:c7:07:eb:f7:34:20:28:47:8e:c1:ab:56: 54:1f:6e:38:b3:97:f4:5a:bb:1e:9a:3c:d2:8b:3a:64:2d:cf: de:0c:96:fd:76:39:dd:e3:c4:1f:48:a3:5f:0d:c2:90:93:d8: 3d:34:cc:d1:bd:83:c5:28:6b:17:07:ad:ff:4f:42:9b:8f:e5: b6:79:25:ea:20:19:fa:79:4b:f5:25:ed:b1:93:fc:32:5e:51: c2:f1:8c:54:9a:d0:b2:0b:d7:fa:19:72:b3:45:71:63:9d:ed: 46:73:d3:23:ee:05:42:c9:85:59:35:7e:55:b3:fd:d0:7b:4f: 93:6c:5d:48:0c:ed:4a:7d:4f:c8:fa:9d:e0:a7:c4:3b:33:f4: d7:20:43:c7:61:87:2e:6a:43:d0:81:a9:67:fa:75:70:12:1d: 1e:f7:8a:14:17:64:c0:10:ba:a1:61:08:dc:ad:58:ec:32:c7: a9:53:de:43:10:29:b8:d9:6a:19:3f:f5:66:d1:a8:de:fd:10: 60:35:f1:14:72:59:62:7c:2c:89:9d:9c:16:3a:72:7b:e6:7e: 1f:d0:e0:cf -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4fHExp9+5BsQUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk MTA2MDYxZDEtY2ViMy00YzVmLTkwZDgtZmI1YzdiMDE3ZmEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKKAXo8AuL2apiLcsBUwg01WzpISm8IrrJfF rQC/uwY+QXQuKheHsn16Vfpg/cifMIFlvL7QGwTir9v+WWbSRVPM+1L2Efp62uFX uK1zBq9e0lGGjP/1zhCDyXbI9sn7pQFi+pmVaImkCkwjznJOXMnsLrGrsqahptYo ceSKFDi2x6E4rFCW44lfpR38bTqtpt9VPjP9Qj59qsuhr1rTb3eU3mU1kYipfWX3 Jf/CXVROgSLqqIETSVkxQlCgNKW9FyEi6TCedME8ntadSmUfyJZfUbhpcWEhJw52 KNTUdRl71MM7cQqFidO+w2hbfMOvNiEPGw0y1aHmZBgsHATYfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLVulXapS3qOzaQy5/PE2/Ue2s1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmIxNzdmMmItM2RhNy0z M2QxLWIxMjQtYmIyMWUyMjAwNTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqtfNlhU3T7pIkQuJiAOxTB2gGmB0afXaC5mmLheNn5/40gW2szPTbS MscH6/c0IChHjsGrVlQfbjizl/Raux6aPNKLOmQtz94Mlv12Od3jxB9Io18NwpCT 2D00zNG9g8UoaxcHrf9PQpuP5bZ5JeogGfp5S/Ul7bGT/DJeUcLxjFSa0LIL1/oZ crNFcWOd7UZz0yPuBULJhVk1flWz/dB7T5NsXUgM7Up9T8j6neCnxDsz9NcgQ8dh hy5qQ9CBqWf6dXASHR73ihQXZMAQuqFhCNytWOwyx6lT3kMQKbjZahk/9WbRqN79 EGA18RRyWWJ8LImdnBY6cnvmfh/Q4M8= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:01 2025 by rpki-client