$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa File: 4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa (raw, json) Hash identifier: 2uyF3oXJkBtVOZU7t+2EIfrjj1+InwCx4cUoS6jpT5w= Subject key identifier: 5B:5C:91:9E:98:ED:35:3D:12:39:98:4D:4C:1D:32:A4:33:5F:B5:CF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B74508CFB7FD4A1818280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 136.0.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:74:50:8c:fb:7f:d4:a1:81:82:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=bc1fffd6-3708-4c9c-bf4c-3a47633f5dd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:2a:ed:03:2c:27:e6:e5:17:0c:2c:bf:af:12: 38:ff:61:00:58:e7:22:e2:73:47:a4:b1:20:59:f4: 35:e1:fd:09:40:a9:9b:eb:0a:a3:d9:05:b9:c9:b1: 49:c0:e8:b9:af:b2:31:ae:e2:a8:c1:97:bd:f8:07: 74:5b:e5:b0:a9:01:ec:93:55:95:7b:bd:80:7c:e6: 84:63:d1:6e:1e:9a:c2:46:8f:25:14:32:05:d8:b2: 4b:61:19:95:79:0a:54:ec:94:1c:8e:4e:18:84:16: 0f:82:53:36:c2:69:52:a8:2f:9b:5b:25:b0:0e:be: 4d:c2:9f:40:0c:cf:cf:9b:da:dc:30:d4:c6:9e:fd: 17:2f:11:ba:dd:86:6b:51:ab:f1:9c:a6:8f:29:2b: 3c:77:14:ce:30:f8:56:a0:0d:32:01:a3:f0:30:52: 59:b6:cb:fb:29:c9:3e:62:ee:1d:3d:19:af:6a:e1: 2a:b0:17:b8:91:e5:71:dd:75:33:4b:81:36:38:7b: 60:58:8e:33:65:69:d2:cc:71:31:75:f0:1b:01:08: 2b:dd:bd:23:d2:f1:41:12:7c:38:5d:da:35:8c:c1: 73:dd:4a:c8:46:24:9a:c3:bb:c0:bc:9a:55:7f:6b: a6:87:15:f8:d2:7d:a2:95:43:b5:6e:18:77:c7:c6: ff:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:5C:91:9E:98:ED:35:3D:12:39:98:4D:4C:1D:32:A4:33:5F:B5:CF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:e6:e2:81:8e:fb:ce:4e:09:ad:da:31:66:26:2a:be:d8:17: 55:e1:85:51:42:4e:60:9a:78:f8:32:50:c3:d5:cf:10:6f:07: 3e:a6:66:d0:53:c2:a5:94:31:2b:97:2b:a6:6f:74:41:a3:dc: 54:1f:f1:ab:68:58:a1:0a:91:22:2e:73:2f:3c:9c:95:24:bb: 94:e3:77:72:5d:1f:f6:db:ea:8e:5c:f5:37:64:09:99:47:7b: 46:bd:84:23:34:77:2d:f5:93:a3:73:ec:c6:81:43:39:e5:7d: ce:25:e9:00:2f:56:75:a5:3c:76:fc:3b:c7:3a:8e:7d:13:07: d9:04:34:95:b2:3e:f9:6a:2e:0b:1f:40:ac:6b:62:db:42:b1: ff:5d:dc:d7:51:c7:fb:ca:8b:01:93:ad:11:f4:99:4c:bc:21: bc:f6:4a:3f:2c:bb:f1:20:59:7a:bf:21:29:41:5d:44:d9:e7: b6:07:a8:a1:17:cd:ad:6b:8f:a1:42:8a:cf:b5:95:f7:3d:40: ab:bd:e0:ad:9b:09:c6:c9:f8:2e:0b:dc:37:41:aa:9c:07:07: 9b:95:3e:ab:7e:ae:ad:c8:c5:3a:14:2f:6a:32:07:8a:29:6e: 94:db:f4:d2:7a:48:be:10:a9:8e:02:b8:03:48:a1:b2:54:78: 25:e3:da:94 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3RQjPt/1KGBgoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmMxZmZmZDYtMzcwOC00YzljLWJmNGMtM2E0NzYzM2Y1ZGQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCrtAywn5uUXDCy/rxI4/2EAWOci4nNHpLEg WfQ14f0JQKmb6wqj2QW5ybFJwOi5r7IxruKowZe9+Ad0W+WwqQHsk1WVe72AfOaE Y9FuHprCRo8lFDIF2LJLYRmVeQpU7JQcjk4YhBYPglM2wmlSqC+bWyWwDr5Nwp9A DM/Pm9rcMNTGnv0XLxG63YZrUavxnKaPKSs8dxTOMPhWoA0yAaPwMFJZtsv7Kck+ Yu4dPRmvauEqsBe4keVx3XUzS4E2OHtgWI4zZWnSzHExdfAbAQgr3b0j0vFBEnw4 Xdo1jMFz3UrIRiSaw7vAvJpVf2umhxX40n2ilUO1bhh3x8b/TwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFtckZ6Y7TU9EjmYTUwdMqQzX7XPMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDUyMmZhYzEtZWYxZS0z NzgxLTgzMzctOWEzY2M5MWViOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDm4oGO+85OCa3aMWYmKr7YF1XhhVFCTmCaePgyUMPVzxBvBz6mZtBT wqWUMSuXK6ZvdEGj3FQf8atoWKEKkSIucy88nJUku5Tjd3JdH/bb6o5c9TdkCZlH e0a9hCM0dy31k6Nz7MaBQznlfc4l6QAvVnWlPHb8O8c6jn0TB9kENJWyPvlqLgsf QKxrYttCsf9d3NdRx/vKiwGTrRH0mUy8Ibz2Sj8su/EgWXq/ISlBXUTZ57YHqKEX za1rj6FCis+1lfc9QKu94K2bCcbJ+C4L3DdBqpwHB5uVPqt+rq3IxToUL2oyB4op bpTb9NJ6SL4QqY4CuANIobJUeCXj2pQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:16:16 2025 by rpki-client