$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/40460197-7d5a-39c3-9813-677d86ea5fe4.roa File: 40460197-7d5a-39c3-9813-677d86ea5fe4.roa (raw, json) Hash identifier: STiWBboBcw73HlzzszkZIvpTy1IP4P+V8GtP0zwGhkg= Subject key identifier: 0D:BC:33:5B:BA:01:12:13:08:3C:46:1A:6F:E8:79:5D:09:75:68:81 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584886B0736861F3294AE2696AC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/40460197-7d5a-39c3-9813-677d86ea5fe4.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 401152 IP address blocks: 136.0.177.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:73:68:61:f3:29:4a:e2:69:6a:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=98add9a2-7808-4fb8-9669-9df46511cce4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:54:71:05:83:52:23:02:16:c0:4c:c3:c3:9a: ea:ce:9c:a8:17:f6:f3:8b:ba:a5:5d:13:00:02:53: a8:7e:65:d9:80:9f:51:26:65:b5:ae:0c:40:15:62: c3:34:e1:ad:42:6d:6d:7a:ad:f1:c9:10:47:1c:dd: ce:46:34:5d:d1:32:51:ac:86:63:1b:11:42:13:d8: 83:f9:dd:5f:a8:28:47:06:32:13:07:c3:dc:7c:19: e6:f2:ef:93:b8:5b:df:fd:4a:93:38:33:19:6a:8d: 1b:5f:33:eb:e7:de:03:77:fb:67:ee:14:c3:4d:5d: 4d:30:1f:6f:c5:99:15:23:09:64:90:bb:30:67:ed: a6:a9:6c:b3:fc:cc:c8:ae:fa:d8:b3:23:1b:0c:2a: 95:23:9e:19:94:59:89:ba:8e:16:a7:c7:ef:f6:00: c7:9f:88:1f:23:01:2b:69:ab:88:0a:f8:5e:d7:47: 78:07:f9:11:b8:de:01:45:2f:6c:57:5a:7a:ac:ac: 3b:44:15:eb:ee:13:c2:54:c1:ef:cc:72:bc:f4:45: ab:61:5e:fd:ca:ae:c3:ed:a6:ba:6a:48:dd:e1:1d: ef:62:f2:8b:b2:b9:a0:f5:7d:3a:5c:cc:41:52:a9: 19:36:a8:76:9e:da:2a:17:1b:e6:01:98:6e:6f:d3: 33:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:BC:33:5B:BA:01:12:13:08:3C:46:1A:6F:E8:79:5D:09:75:68:81 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/40460197-7d5a-39c3-9813-677d86ea5fe4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.177.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 53:1c:3d:73:1e:9c:e8:0c:09:37:1b:da:fc:32:df:e4:df:35: 31:5f:14:ae:1a:a6:fb:d8:fc:83:52:a7:10:66:1d:f8:d8:fa: 2c:9c:08:c2:f8:68:9f:33:33:b9:7d:c5:c9:aa:95:46:24:ef: d6:bd:29:63:a5:31:fa:75:71:0a:1e:3e:6f:0b:3e:3f:5a:ad: 62:7f:cd:0e:ad:9c:5e:39:06:18:59:c2:59:ff:0f:98:22:95: c5:c5:5d:3e:1d:24:f0:3b:1e:35:db:6a:f4:9e:3f:ec:21:9f: 42:80:c6:22:e5:9f:ea:79:0a:fd:99:36:dd:92:af:1a:49:97: 12:f0:7f:01:1b:4d:c3:4d:75:4b:7a:cd:49:66:4c:e6:2b:83: 00:0c:46:92:80:13:db:85:b7:c3:68:dc:14:e0:63:d6:03:79: 84:63:18:e9:8c:18:89:ac:36:b0:fe:10:93:74:a7:d0:e1:ad: 10:a9:b3:17:44:06:4d:8b:84:64:b5:58:4d:0a:73:31:4b:b3: 8e:19:e7:d1:16:fb:f2:8c:6e:d0:5f:11:a6:f1:d0:91:17:db: 0f:71:e4:ae:62:0b:89:13:3c:fc:d9:54:7d:03:bc:9c:94:34: 31:10:d7:5b:2f:65:e0:29:0b:1c:4a:c5:5a:ba:59:2d:3e:97: 0f:6e:47:20 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHNoYfMpSuJpasAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk OThhZGQ5YTItNzgwOC00ZmI4LTk2NjktOWRmNDY1MTFjY2U0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklRxBYNSIwIWwEzDw5rqzpyoF/bzi7qlXRMA AlOofmXZgJ9RJmW1rgxAFWLDNOGtQm1teq3xyRBHHN3ORjRd0TJRrIZjGxFCE9iD +d1fqChHBjITB8PcfBnm8u+TuFvf/UqTODMZao0bXzPr594Dd/tn7hTDTV1NMB9v xZkVIwlkkLswZ+2mqWyz/MzIrvrYsyMbDCqVI54ZlFmJuo4Wp8fv9gDHn4gfIwEr aauICvhe10d4B/kRuN4BRS9sV1p6rKw7RBXr7hPCVMHvzHK89EWrYV79yq7D7aa6 akjd4R3vYvKLsrmg9X06XMxBUqkZNqh2ntoqFxvmAZhub9MzewIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFA28M1u6ARITCDxGGm/oeV0JdWiBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDA0NjAxOTctN2Q1YS0z OWMzLTk4MTMtNjc3ZDg2ZWE1ZmU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFMcPXMenOgMCTcb2vwy3+TfNTFfFK4apvvY/INSpxBmHfjY+iycCML4 aJ8zM7l9xcmqlUYk79a9KWOlMfp1cQoePm8LPj9arWJ/zQ6tnF45BhhZwln/D5gi lcXFXT4dJPA7HjXbavSeP+whn0KAxiLln+p5Cv2ZNt2SrxpJlxLwfwEbTcNNdUt6 zUlmTOYrgwAMRpKAE9uFt8No3BTgY9YDeYRjGOmMGImsNrD+EJN0p9DhrRCpsxdE Bk2LhGS1WE0KczFLs44Z59EW+/KMbtBfEabx0JEX2w9x5K5iC4kTPPzZVH0DvJyU NDEQ11svZeApCxxKxVq6WS0+lw9uRyA= -----END CERTIFICATE-----Generated at Sun Feb 16 15:31:30 2025 by rpki-client