$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/532bd0af-c009-31ee-b3a7-2aad69d5cd8a.roa File: 532bd0af-c009-31ee-b3a7-2aad69d5cd8a.roa (raw, json) Hash identifier: ztK+CnZv/PTSLzrOjbmeF6oESSyGR3EeVnnKldFskps= Subject key identifier: B2:E3:33:F6:34:98:B3:9B:60:17:38:C2:25:D5:F5:C5:FD:10:19:6D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848AF2B9E064325BDE2058B2A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/532bd0af-c009-31ee-b3a7-2aad69d5cd8a.roa Signing time: Mon 27 Jan 2025 14:00:52 +0000 ROA not before: Mon 27 Jan 2025 14:00:52 +0000 ROA not after: Sun 27 Apr 2025 13:00:52 +0000 asID: 18779 IP address blocks: 136.0.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:af:2b:9e:06:43:25:bd:e2:05:8b:2a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 27 14:00:52 2025 GMT Not After : Apr 27 13:00:52 2025 GMT Subject: CN=2b28961d-972f-4daf-8d5b-479e0eab1417 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:c0:35:93:72:d7:6f:5c:13:54:80:68:96:58: db:18:87:c4:75:dc:f3:d3:25:6c:ca:53:56:f8:93: bc:d7:a5:37:6b:40:c8:02:e1:a7:70:f7:f4:f0:b7: 5b:3d:c1:ef:49:f4:ec:6b:75:77:3e:05:35:74:b6: 2a:7c:eb:6e:9c:9f:a8:83:cd:4a:cc:a4:78:0d:cc: c9:c5:86:8d:39:ee:ec:29:ca:ee:9d:a4:7a:78:c1: bf:37:5b:e6:39:26:15:9e:8d:f5:66:70:c5:74:8d: 19:30:76:93:18:5c:25:ce:32:49:07:aa:48:27:a7: 68:17:22:77:88:2b:e9:4c:e0:70:d4:9d:48:c1:05: 7d:e4:c7:46:04:d4:62:78:1b:ef:f0:04:7c:41:6a: 3d:f3:62:30:d8:9a:04:13:27:24:5e:10:37:ee:5b: 0a:d2:94:14:9f:e3:35:0b:42:46:6c:40:92:9d:0c: dd:00:2b:70:68:30:97:08:1a:03:e9:37:f5:97:1f: 17:0f:09:2a:89:53:ef:32:a3:a8:3d:3e:79:a8:b7: 0c:d4:bb:1e:ea:23:de:1d:be:7d:f9:82:59:49:21: 4e:0e:c2:77:3a:8c:0d:a6:64:d9:09:60:11:71:4f: 52:8c:ed:97:c3:a0:26:3f:68:83:27:43:a0:00:17: 3e:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:E3:33:F6:34:98:B3:9B:60:17:38:C2:25:D5:F5:C5:FD:10:19:6D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/532bd0af-c009-31ee-b3a7-2aad69d5cd8a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:92:ce:8c:2a:75:69:73:b2:3b:0d:73:0f:2b:b0:0b:97:70: f6:87:ea:9c:82:49:4f:92:a1:f5:67:8a:57:1f:a1:7a:4f:ad: b0:b5:ee:51:5e:4b:59:bd:2b:df:98:f4:d7:78:a5:07:f2:3b: 41:23:a9:e8:85:22:0d:de:18:2c:41:58:b2:89:da:02:63:40: 2a:c3:c2:e6:27:d6:36:88:3d:bf:35:f1:11:94:44:1a:44:ec: 7c:27:62:6b:e0:d1:7a:35:68:6f:a0:1f:e4:7a:4c:c8:15:56: 77:86:22:63:a8:78:12:1e:83:16:35:87:98:5c:89:40:49:71: 8b:07:0e:26:8d:09:45:98:1e:64:47:95:2f:19:89:b0:fe:2e: 13:5c:a3:61:af:a4:f0:f9:16:7e:6c:89:ed:ca:64:1f:74:08: b5:3a:5f:66:61:be:38:a7:00:07:b0:de:56:e8:10:74:38:f6: 01:a9:3a:9f:be:84:77:1e:9e:b5:e2:10:0b:4e:51:f9:41:df: a9:15:51:84:84:a1:c8:2a:0c:ef:74:89:59:31:e1:1b:0b:99: b5:01:9e:ce:15:b3:b4:ac:37:d0:a5:04:57:74:0d:2e:0c:b7: 00:8b:6e:4f:8b:dc:dc:7a:01:9c:d4:dd:55:15:58:8a:d8:6a: 37:46:14:60 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK54GQyW94gWLKgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk MmIyODk2MWQtOTcyZi00ZGFmLThkNWItNDc5ZTBlYWIxNDE3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj8A1k3LXb1wTVIBolljbGIfEddzz0yVsylNW +JO816U3a0DIAuGncPf08LdbPcHvSfTsa3V3PgU1dLYqfOtunJ+og81KzKR4DczJ xYaNOe7sKcrunaR6eMG/N1vmOSYVno31ZnDFdI0ZMHaTGFwlzjJJB6pIJ6doFyJ3 iCvpTOBw1J1IwQV95MdGBNRieBvv8AR8QWo982Iw2JoEEyckXhA37lsK0pQUn+M1 C0JGbECSnQzdACtwaDCXCBoD6Tf1lx8XDwkqiVPvMqOoPT55qLcM1Lse6iPeHb59 +YJZSSFODsJ3OowNpmTZCWARcU9SjO2Xw6AmP2iDJ0OgABc+MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLjM/Y0mLObYBc4wiXV9cX9EBltMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTMyYmQwYWYtYzAwOS0z MWVlLWIzYTctMmFhZDY5ZDVjZDhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqSzowqdWlzsjsNcw8rsAuXcPaH6pyCSU+SofVnilcfoXpPrbC17lFe S1m9K9+Y9Nd4pQfyO0EjqeiFIg3eGCxBWLKJ2gJjQCrDwuYn1jaIPb818RGURBpE 7HwnYmvg0Xo1aG+gH+R6TMgVVneGImOoeBIegxY1h5hciUBJcYsHDiaNCUWYHmRH lS8ZibD+LhNco2GvpPD5Fn5sie3KZB90CLU6X2ZhvjinAAew3lboEHQ49gGpOp++ hHcenrXiEAtOUflB36kVUYSEocgqDO90iVkx4RsLmbUBns4Vs7SsN9ClBFd0DS4M twCLbk+L3Nx6AZzU3VUVWIrYajdGFGA= -----END CERTIFICATE-----Generated at Fri Apr 4 19:55:43 2025 by rpki-client