$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e13659a-ff71-3087-8baa-f46721bc5c7d.roa File: 2e13659a-ff71-3087-8baa-f46721bc5c7d.roa (raw, json) Hash identifier: dif8qJWNFih+4H2RSKhP5bGBH1q5i+7lqjK0N3932VQ= Subject key identifier: 17:F6:63:90:6E:37:24:64:C9:7A:56:74:55:4B:EE:33:51:67:B9:4B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B870C96C7F4D9C13C80C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e13659a-ff71-3087-8baa-f46721bc5c7d.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 149440 IP address blocks: 136.0.9.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:87:0c:96:c7:f4:d9:c1:3c:80:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=a337c94c-1b1f-44fe-b481-4fc95a384db6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f9:f9:5d:da:47:02:b8:be:9e:b2:65:d2:40:37: 4b:22:25:bb:3e:dd:81:d4:9a:5c:1b:22:7e:69:d6: 3f:7f:fb:1a:8c:ce:17:21:b7:78:82:da:d2:64:97: 04:17:64:d3:da:69:19:87:53:57:1e:47:08:ec:d8: 94:70:46:92:2b:24:e6:07:ed:4c:b6:a0:50:f8:02: 0e:33:48:c0:cd:64:8c:1d:e5:a6:ee:7d:56:3c:70: 3c:38:e5:78:a7:77:46:83:75:90:cb:db:7b:f1:5c: f3:46:44:20:c8:dd:84:41:fc:3d:2c:79:57:24:4b: 0e:6d:61:52:b2:9f:94:a9:f9:66:1f:d8:3d:67:cf: f1:08:87:9f:0a:52:2e:9e:42:2d:b8:56:68:6b:84: 0e:b9:c7:4d:1b:53:df:39:3f:89:08:a9:4e:4f:00: fe:f1:31:f6:b8:9e:e3:06:4e:1d:17:41:5e:13:9f: 84:7d:f6:de:11:60:b6:1d:00:a4:25:22:b8:62:8b: e1:ec:ac:ab:8f:4b:dc:b9:98:f1:ea:e4:a8:4e:5e: 22:9a:a4:b1:4d:66:f9:e6:5c:5b:c4:75:09:54:72: 3e:7b:e8:60:35:93:0c:64:ab:ef:57:04:32:5c:48: 30:df:58:a5:01:63:b2:77:b7:46:65:11:d9:53:e2: 9f:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:F6:63:90:6E:37:24:64:C9:7A:56:74:55:4B:EE:33:51:67:B9:4B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2e13659a-ff71-3087-8baa-f46721bc5c7d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.9.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:29:e9:27:da:56:67:0f:be:18:d6:2f:e3:7c:1d:83:17:ef: 24:84:6a:45:41:3d:46:e3:12:bf:87:20:ec:a5:ba:16:8d:22: ff:96:21:8e:a2:df:d3:ee:e1:ea:66:8f:a4:30:30:0f:0a:0c: 0b:21:c7:74:7a:37:b1:a1:a3:53:82:37:e8:95:a5:7e:8e:d3: 27:da:94:d2:74:c3:2a:87:b0:97:ce:7a:c3:98:d4:91:51:18: 11:ff:cf:45:a9:fc:63:51:ff:59:86:92:40:70:4b:3e:75:4c: 0c:b3:8a:d7:1e:61:8b:27:a0:70:48:29:62:19:79:1c:c3:40: fe:cf:de:26:14:b6:04:35:3d:a4:9f:1e:53:2e:54:e5:e0:41: 9e:04:f4:ba:87:1b:72:0c:2d:61:2e:4b:b2:3b:d1:5b:b4:45: 97:33:12:ff:28:3e:2d:27:5a:be:37:08:7f:35:09:bb:e8:5d: 6e:9c:a6:a1:4e:50:f3:95:67:ec:7d:05:14:80:3d:df:b0:f8: fc:bc:52:39:7b:08:24:3f:90:56:f2:79:ba:6b:74:44:88:e2: 0a:a1:d5:b2:c7:35:ed:32:b8:d6:23:81:5b:88:55:fb:de:50: b6:35:b5:11:1f:72:16:39:74:6c:c2:8d:f2:73:89:31:f7:4a: 9d:4c:74:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4cMlsf02cE8gMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YTMzN2M5NGMtMWIxZi00NGZlLWI0ODEtNGZjOTVhMzg0ZGI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+fld2kcCuL6esmXSQDdLIiW7Pt2B1JpcGyJ+ adY/f/sajM4XIbd4gtrSZJcEF2TT2mkZh1NXHkcI7NiUcEaSKyTmB+1MtqBQ+AIO M0jAzWSMHeWm7n1WPHA8OOV4p3dGg3WQy9t78VzzRkQgyN2EQfw9LHlXJEsObWFS sp+UqflmH9g9Z8/xCIefClIunkItuFZoa4QOucdNG1PfOT+JCKlOTwD+8TH2uJ7j Bk4dF0FeE5+EffbeEWC2HQCkJSK4Yovh7Kyrj0vcuZjx6uSoTl4imqSxTWb55lxb xHUJVHI+e+hgNZMMZKvvVwQyXEgw31ilAWOyd7dGZRHZU+KfPQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBf2Y5BuNyRkyXpWdFVL7jNRZ7lLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmUxMzY1OWEtZmY3MS0z MDg3LThiYWEtZjQ2NzIxYmM1YzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABop6SfaVmcPvhjWL+N8HYMX7ySEakVBPUbjEr+HIOyluhaNIv+WIY6i 39Pu4epmj6QwMA8KDAshx3R6N7Gho1OCN+iVpX6O0yfalNJ0wyqHsJfOesOY1JFR GBH/z0Wp/GNR/1mGkkBwSz51TAyzitceYYsnoHBIKWIZeRzDQP7P3iYUtgQ1PaSf HlMuVOXgQZ4E9LqHG3IMLWEuS7I70Vu0RZczEv8oPi0nWr43CH81CbvoXW6cpqFO UPOVZ+x9BRSAPd+w+Py8Ujl7CCQ/kFbyebprdESI4gqh1bLHNe0yuNYjgVuIVfve ULY1tREfchY5dGzCjfJziTH3Sp1MdAs= -----END CERTIFICATE-----Generated at Sun Feb 16 15:07:32 2025 by rpki-client