$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/326afa24-ba0d-3002-b60c-b1b71b1199ec.roa File: 326afa24-ba0d-3002-b60c-b1b71b1199ec.roa (raw, json) Hash identifier: lyIJPc2rvDR58Ee0PIMTUJpIDQpv8yMa10kxXB8maK0= Subject key identifier: A1:79:21:23:88:B9:B0:11:08:EE:18:31:6F:AD:14:2C:2F:83:C7:77 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584868134B24CC02C42A6C214900 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/326afa24-ba0d-3002-b60c-b1b71b1199ec.roa Signing time: Thu 02 Jan 2025 02:49:50 +0000 ROA not before: Thu 02 Jan 2025 02:49:50 +0000 ROA not after: Wed 02 Apr 2025 01:49:50 +0000 asID: 397032 IP address blocks: 136.0.251.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 07 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:68:13:4b:24:cc:02:c4:2a:6c:21:49:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 2 02:49:50 2025 GMT Not After : Apr 2 01:49:50 2025 GMT Subject: CN=77cf9287-d3dd-413b-906e-e2d94c2dc75a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:92:2f:73:08:e5:c5:e7:9e:e7:8f:cf:ee:ca: 51:d7:e3:98:e4:a2:1b:15:00:ec:5a:7b:7e:7b:6e: 3d:a1:17:9b:18:c8:78:60:3d:10:57:7f:70:30:60: ad:73:2e:11:f9:42:79:69:a9:cf:9c:2a:c9:57:0b: 2f:7a:2b:e1:5f:a3:5d:3d:24:73:8d:f8:f7:4b:a5: 83:a3:f1:0e:ce:80:7a:13:70:56:5d:2f:87:de:64: d6:d7:4e:79:06:79:86:71:4d:0f:b0:74:f3:a7:96: 6e:c3:c6:8b:cc:f9:4d:86:f0:9b:14:16:5f:1d:39: 77:2c:83:d8:fd:e8:72:74:d8:14:93:db:b7:72:ff: 42:cb:4e:d0:04:0b:39:b6:8f:2c:ff:f8:2e:b7:3f: 5c:80:ea:a6:4d:19:3c:a4:df:4a:aa:14:8b:9d:fb: 49:a8:d0:ea:61:21:99:0d:61:1a:df:7d:ad:95:eb: f6:fd:a6:4b:97:a7:5a:31:09:99:fc:62:3b:85:95: 78:a7:15:b6:06:00:ca:a3:bc:be:f0:8a:19:7f:26: 99:b2:07:8d:54:8b:40:d9:be:23:98:d7:49:e2:07: fd:53:fe:25:46:93:7b:fb:94:a5:8c:35:80:77:c6: c5:42:e0:22:71:10:ee:ae:dd:a8:e0:77:59:44:1e: 3e:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:79:21:23:88:B9:B0:11:08:EE:18:31:6F:AD:14:2C:2F:83:C7:77 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/326afa24-ba0d-3002-b60c-b1b71b1199ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.251.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:68:9d:a6:de:71:13:9a:43:03:16:16:84:80:bb:11:c8:25: 59:0a:d1:60:a9:21:1d:97:c5:c7:9a:4b:74:69:46:85:b3:c0: d0:4b:be:3a:18:76:77:73:74:43:82:be:f8:bf:16:7d:6f:b8: bb:0d:28:12:f6:94:be:d4:62:02:c3:6c:b6:df:c8:7b:d1:8f: 7a:8f:6e:89:c1:63:c2:4c:a2:9d:56:e2:4b:ff:f3:d5:50:bb: 65:d6:49:0f:33:6a:fb:27:96:57:60:00:4e:26:f3:a2:a7:ce: 1e:d1:a7:97:7e:57:a0:f0:f4:ff:e7:a6:f0:50:5a:b7:3a:f5: f3:85:bc:0e:b5:91:df:8e:38:b3:e4:d7:46:35:4a:ef:70:65: 63:68:94:a6:4e:f9:30:c5:ce:24:fb:f8:12:aa:0a:35:8a:ef: 4d:0d:37:bf:57:15:d8:fa:b5:2a:08:59:6a:26:43:f7:02:f6: c7:f5:b3:57:fe:f8:0d:ce:39:d7:21:d5:63:39:f8:00:93:54: 01:a3:a7:58:21:ac:35:5c:6e:aa:25:91:91:4d:9d:7d:9e:b7: d4:59:8d:cb:d0:03:43:ba:56:18:76:f0:8e:79:37:8f:84:0d: 29:cb:6a:5a:f5:e0:7f:0b:48:62:a5:bd:2f:cf:2d:7f:ee:fa: 97:59:ca:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhoE0skzALEKmwhSQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwMjAyNDk1MFoXDTI1MDQwMjAxNDk1MFowLzEtMCsGA1UEAxMk NzdjZjkyODctZDNkZC00MTNiLTkwNmUtZTJkOTRjMmRjNzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk5Ivcwjlxeee54/P7spR1+OY5KIbFQDsWnt+ e249oRebGMh4YD0QV39wMGCtcy4R+UJ5aanPnCrJVwsveivhX6NdPSRzjfj3S6WD o/EOzoB6E3BWXS+H3mTW1055BnmGcU0PsHTzp5Zuw8aLzPlNhvCbFBZfHTl3LIPY /ehydNgUk9u3cv9Cy07QBAs5to8s//gutz9cgOqmTRk8pN9KqhSLnftJqNDqYSGZ DWEa332tlev2/aZLl6daMQmZ/GI7hZV4pxW2BgDKo7y+8IoZfyaZsgeNVItA2b4j mNdJ4gf9U/4lRpN7+5SljDWAd8bFQuAicRDurt2o4HdZRB4+VwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKF5ISOIubARCO4YMW+tFCwvg8d3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzI2YWZhMjQtYmEwZC0z MDAyLWI2MGMtYjFiNzFiMTE5OWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD7MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINonabecROaQwMWFoSAuxHIJVkK0WCpIR2XxceaS3RpRoWzwNBLvjoY dndzdEOCvvi/Fn1vuLsNKBL2lL7UYgLDbLbfyHvRj3qPbonBY8JMop1W4kv/89VQ u2XWSQ8zavsnlldgAE4m86Knzh7Rp5d+V6Dw9P/npvBQWrc69fOFvA61kd+OOLPk 10Y1Su9wZWNolKZO+TDFziT7+BKqCjWK700NN79XFdj6tSoIWWomQ/cC9sf1s1f+ +A3OOdch1WM5+ACTVAGjp1ghrDVcbqolkZFNnX2et9RZjcvQA0O6Vhh28I55N4+E DSnLalr14H8LSGKlvS/PLX/u+pdZyvk= -----END CERTIFICATE-----Generated at Wed Feb 5 19:03:14 2025 by rpki-client