$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa File: 6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa (raw, json) Hash identifier: 84JPXJFEe+m0kePq6rGBFfi5KeaIeTgO1O8EwbAxeyM= Subject key identifier: 69:57:36:53:D6:BF:8E:69:71:EF:8C:E1:4C:4F:CC:FA:B5:48:5F:76 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B8878E7F8FE1F60FC5480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 3561 IP address blocks: 136.0.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:88:78:e7:f8:fe:1f:60:fc:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=86a7c34d-4b10-402f-9d47-57dd5debacf8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:3d:bf:73:63:0d:88:52:e1:fb:69:48:37:35: 06:a0:1a:cd:d3:b8:6b:1a:e4:eb:31:67:c5:93:58: 69:5a:d1:aa:69:57:10:c7:ce:b8:18:01:fb:22:95: 5a:c1:1c:f7:be:da:4d:de:da:4f:65:13:08:3f:bd: 38:ad:2f:15:c8:04:9e:64:d8:4e:27:d6:7c:06:d4: 89:18:08:8a:4e:c3:97:40:3f:fd:d5:81:b9:63:eb: 52:06:55:8e:20:1e:7e:7b:93:d5:b1:e9:07:cd:36: dc:bf:90:92:47:52:37:59:c3:4f:d1:80:3e:de:35: 86:7c:13:88:b1:7a:d7:bf:c1:d6:33:74:37:ba:cf: ac:f1:37:4a:55:b1:64:85:ab:ce:5c:c1:9d:b0:32: 52:97:52:2d:55:5e:76:27:35:aa:44:c7:35:87:33: c8:0b:11:d4:c5:68:a3:cc:4b:99:42:83:15:a0:71: 3f:d5:1c:c9:fb:7f:8c:f1:a4:d8:e4:af:ff:29:7b: 1d:f9:91:fe:37:0c:90:62:37:da:4d:9f:36:92:55: e9:71:1f:f4:84:99:7f:c4:b8:5e:02:74:f2:85:95: 92:b5:15:a8:30:f4:a7:73:75:3b:c3:11:2d:d7:d6: 52:09:7b:19:c4:d2:62:5f:ef:8a:ef:e0:bd:b0:3c: 91:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:57:36:53:D6:BF:8E:69:71:EF:8C:E1:4C:4F:CC:FA:B5:48:5F:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:2a:ef:c9:9b:cc:62:97:45:cc:dd:39:15:e0:31:70:26:b9: d5:32:97:8c:b8:26:db:2e:b0:76:29:db:94:00:79:35:63:0e: b7:f1:90:0e:5a:95:aa:44:21:5b:21:49:55:cd:87:37:b2:1d: 5f:91:a4:5c:04:52:cb:4c:eb:9e:a1:e7:d4:1a:cb:bf:a6:2e: 76:c5:a2:21:38:8f:8b:e9:b0:44:2c:7b:95:7e:18:d3:8c:7e: 46:19:a8:41:53:90:4e:18:e0:7a:1f:38:ee:9a:a9:ba:0c:f8: fa:02:1a:88:b9:81:da:16:9f:88:b9:fd:bd:91:4c:f2:15:38: 8c:7f:30:71:db:49:7c:38:0f:a9:ef:80:31:c4:cb:ac:4e:92: f7:d0:f3:bb:83:2b:4d:ef:43:9b:14:fd:69:f9:ce:17:52:ea: 67:53:bd:93:c3:cf:54:1d:69:56:a1:87:e2:cf:92:8e:46:08: 56:39:66:c2:e9:09:b2:46:d9:12:2f:7f:59:19:55:c7:02:95: 5d:90:52:7f:5f:fd:c3:c8:e8:46:8d:a1:84:15:c4:cc:ad:ca: ce:dd:75:32:22:79:6b:68:9c:c1:ae:98:ab:a4:c7:0e:80:3e: d0:60:df:76:22:a8:0a:dd:92:9f:8c:71:85:cd:c2:2b:6b:8d: 96:6a:08:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4h45/j+H2D8VIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk ODZhN2MzNGQtNGIxMC00MDJmLTlkNDctNTdkZDVkZWJhY2Y4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgD2/c2MNiFLh+2lINzUGoBrN07hrGuTrMWfF k1hpWtGqaVcQx864GAH7IpVawRz3vtpN3tpPZRMIP704rS8VyASeZNhOJ9Z8BtSJ GAiKTsOXQD/91YG5Y+tSBlWOIB5+e5PVsekHzTbcv5CSR1I3WcNP0YA+3jWGfBOI sXrXv8HWM3Q3us+s8TdKVbFkhavOXMGdsDJSl1ItVV52JzWqRMc1hzPICxHUxWij zEuZQoMVoHE/1RzJ+3+M8aTY5K//KXsd+ZH+NwyQYjfaTZ82klXpcR/0hJl/xLhe AnTyhZWStRWoMPSnc3U7wxEt19ZSCXsZxNJiX++K7+C9sDyRxQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGlXNlPWv45pce+M4UxPzPq1SF92MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjc4OGI5ZmMtNGRjMi0z YTU5LWFhNTUtNjdiYTA0ODM4YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEgq78mbzGKXRczdORXgMXAmudUyl4y4JtsusHYp25QAeTVjDrfxkA5a lapEIVshSVXNhzeyHV+RpFwEUstM656h59Qay7+mLnbFoiE4j4vpsEQse5V+GNOM fkYZqEFTkE4Y4HofOO6aqboM+PoCGoi5gdoWn4i5/b2RTPIVOIx/MHHbSXw4D6nv gDHEy6xOkvfQ87uDK03vQ5sU/Wn5zhdS6mdTvZPDz1QdaVahh+LPko5GCFY5ZsLp CbJG2RIvf1kZVccClV2QUn9f/cPI6EaNoYQVxMytys7ddTIieWtonMGumKukxw6A PtBg33YiqArdkp+McYXNwitrjZZqCNs= -----END CERTIFICATE-----Generated at Sat Apr 5 04:38:25 2025 by rpki-client