$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c35633a-9d7f-3aa7-bf4d-2a45402346f2.roa File: 2c35633a-9d7f-3aa7-bf4d-2a45402346f2.roa (raw, json) Hash identifier: q7RB4nDoH3SZ8BaVI+zBlEYhODaG4cNNDbRP67VOsq8= Subject key identifier: F7:5C:15:66:0A:96:A3:04:52:98:E3:55:5E:35:F2:C1:BE:E1:00:AC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584886B072C7ED442960CD4B5300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c35633a-9d7f-3aa7-bf4d-2a45402346f2.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 401152 IP address blocks: 136.0.140.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:72:c7:ed:44:29:60:cd:4b:53:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=ed26ec83-5bbd-4c74-858e-020109d4b200 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:6a:64:99:06:f2:c1:5e:11:4e:56:1b:29:3e: 8a:0b:b8:3f:0e:be:de:fb:ad:fc:a9:8e:53:68:82: 0d:b7:c4:82:fe:a6:f7:cb:c7:eb:79:96:5b:66:f7: 88:0c:72:72:4f:75:da:e0:2c:44:92:ad:a6:86:f9: 33:67:5c:33:57:9e:52:75:a5:d7:c6:a8:db:35:e8: 6d:53:09:7b:d5:4f:ff:2f:5d:b8:8c:06:97:73:86: 06:6b:f8:46:eb:01:c1:04:30:c9:7c:f0:2e:94:07: 1b:71:b1:e1:eb:20:f9:0b:c7:41:05:ea:23:8d:6f: fc:5c:e4:49:52:71:6f:5f:12:3c:5d:58:72:ec:52: b0:d7:eb:45:cc:65:c5:70:52:0b:b7:ad:56:71:41: 43:3e:c7:71:b9:bc:0b:17:72:41:4e:50:44:75:ed: 3c:d1:c3:78:4f:ce:1a:0a:72:1c:23:2b:6a:8c:67: 11:21:0d:fa:9d:77:78:61:c3:ff:6c:fd:ee:c6:9f: 7d:ec:bd:ac:63:da:c9:26:6b:f2:8f:33:c5:50:41: ce:e9:72:b2:26:a4:8e:2e:3f:05:33:4f:94:cb:1f: 32:5f:9f:9b:48:fa:8d:69:c2:f4:05:61:fc:2a:04: d3:4c:a0:ad:c3:fe:9f:25:43:cd:34:27:1a:d2:e0: e0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:5C:15:66:0A:96:A3:04:52:98:E3:55:5E:35:F2:C1:BE:E1:00:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2c35633a-9d7f-3aa7-bf4d-2a45402346f2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.140.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:04:ff:4c:43:27:ef:70:1a:2d:84:c4:41:3d:5d:63:c1:aa: e6:ce:00:76:15:4f:08:d7:7f:9d:f6:74:2e:f5:c5:9a:97:2d: 61:fa:db:88:c6:53:ac:74:3d:dd:7e:24:e0:f0:f9:24:3c:f4: d3:43:ef:10:0f:7d:f7:e2:49:8e:ce:e1:3a:1b:b6:24:e4:16: 24:2f:2a:2e:6c:8b:ed:41:46:d2:b8:91:aa:c4:56:16:f9:7a: c5:31:d3:9e:ca:51:55:1e:84:12:e6:dd:60:86:ae:e3:32:0a: 16:eb:c3:75:07:8a:75:d9:ec:58:1b:ca:11:a7:2a:5c:90:b1: 7b:ea:85:7e:00:4f:59:16:e2:d6:ff:38:73:dc:66:ad:7e:ae: 7b:d5:c0:58:f2:6e:e1:cb:5e:94:49:4c:14:a9:25:5a:89:56: 07:a1:d5:0a:b2:ac:6e:08:3d:34:db:c8:f3:8f:88:e6:d0:a5: 39:35:78:4c:24:02:05:86:7b:2c:95:f7:21:5f:65:f8:a6:80: 63:8b:ff:e9:f4:2d:96:2d:c5:25:02:fa:b8:32:3b:4e:2a:8a: 72:5d:23:7b:14:b5:83:1c:53:8a:d9:8b:74:ff:41:d2:45:b7: 9f:d2:b9:c7:88:d2:e6:a6:51:09:a2:4b:c5:f0:c2:45:19:4e: ce:71:27:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHLH7UQpYM1LUwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk ZWQyNmVjODMtNWJiZC00Yzc0LTg1OGUtMDIwMTA5ZDRiMjAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAompkmQbywV4RTlYbKT6KC7g/Dr7e+638qY5T aIINt8SC/qb3y8freZZbZveIDHJyT3Xa4CxEkq2mhvkzZ1wzV55SdaXXxqjbNeht Uwl71U//L124jAaXc4YGa/hG6wHBBDDJfPAulAcbcbHh6yD5C8dBBeojjW/8XORJ UnFvXxI8XVhy7FKw1+tFzGXFcFILt61WcUFDPsdxubwLF3JBTlBEde080cN4T84a CnIcIytqjGcRIQ36nXd4YcP/bP3uxp997L2sY9rJJmvyjzPFUEHO6XKyJqSOLj8F M0+Uyx8yX5+bSPqNacL0BWH8KgTTTKCtw/6fJUPNNCca0uDgGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPdcFWYKlqMEUpjjVV418sG+4QCsMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmMzNTYzM2EtOWQ3Zi0z YWE3LWJmNGQtMmE0NTQwMjM0NmYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoE/0xDJ+9wGi2ExEE9XWPBqubOAHYVTwjXf532dC71xZqXLWH624jG U6x0Pd1+JODw+SQ89NND7xAPfffiSY7O4TobtiTkFiQvKi5si+1BRtK4karEVhb5 esUx057KUVUehBLm3WCGruMyChbrw3UHinXZ7FgbyhGnKlyQsXvqhX4AT1kW4tb/ OHPcZq1+rnvVwFjybuHLXpRJTBSpJVqJVgeh1QqyrG4IPTTbyPOPiObQpTk1eEwk AgWGeyyV9yFfZfimgGOL/+n0LZYtxSUC+rgyO04qinJdI3sUtYMcU4rZi3T/QdJF t5/SuceI0uamUQmiS8XwwkUZTs5xJ/o= -----END CERTIFICATE-----Generated at Sun Feb 16 15:35:27 2025 by rpki-client