$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f4b790f-a2ba-3bc2-a6b6-377599a479a9.roa File: 6f4b790f-a2ba-3bc2-a6b6-377599a479a9.roa (raw, json) Hash identifier: OZ8sWhkORaboTpvaogzEyyRC7EFwLAZEhmPFI6NqfEc= Subject key identifier: 24:A1:7B:C7:44:EA:3F:AE:4D:26:14:16:6A:0C:FB:23:35:BC:7E:D8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B7462F5CF13ED57417D58 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f4b790f-a2ba-3bc2-a6b6-377599a479a9.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 136.0.240.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:74:62:f5:cf:13:ed:57:41:7d:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=bb4a005a-728c-4052-b51e-a68f3fc4dfd7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:38:27:c3:a4:29:4f:e7:f5:41:ca:5e:74:29: 9f:d1:e3:fe:26:57:1a:2f:15:02:aa:fb:9d:0f:87: d4:7e:b7:06:a3:a3:09:46:9b:33:94:a6:61:ab:d0: 56:60:f1:53:61:ff:6d:35:9b:5f:b9:12:d8:7f:cd: 47:7c:96:6e:6b:c1:90:51:ce:3d:5c:90:0f:c4:59: 09:58:c5:f2:9d:4a:3a:52:10:45:6f:07:c7:ba:b4: 77:a7:f4:f0:1b:93:25:91:76:37:85:2c:bf:58:48: 15:f7:66:1e:7f:86:db:0f:a6:ea:12:f2:07:ac:62: 10:30:eb:ba:a5:0b:ac:7f:e0:58:6d:2e:76:63:71: f1:ae:3a:8d:53:72:df:af:61:92:87:f6:d1:5e:a7: 17:2d:54:83:14:c1:b7:6b:48:b6:fc:94:86:ba:94: 08:17:4d:50:70:05:82:ef:3f:2f:bb:c6:65:5f:0c: 67:77:54:fe:6b:b0:b3:a5:dc:8e:87:28:2b:20:00: d1:e5:9e:95:43:64:12:5c:f7:57:b1:93:11:87:85: 06:6d:5e:18:b4:44:39:46:a8:21:af:97:04:05:e8: af:5a:3e:46:2a:29:1a:25:fb:3c:80:ea:35:7f:c1: 3b:30:62:20:28:d6:e2:b2:a5:83:c1:5a:60:98:3d: 1c:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:A1:7B:C7:44:EA:3F:AE:4D:26:14:16:6A:0C:FB:23:35:BC:7E:D8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6f4b790f-a2ba-3bc2-a6b6-377599a479a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.240.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:40:d9:dd:9a:96:ce:da:09:ea:ec:df:31:9d:d1:db:e6:a7: 18:57:92:cd:1a:38:47:59:f4:5b:9c:6d:ff:67:db:25:dc:5d: 17:52:d8:88:c2:37:3a:15:e2:34:fa:0d:4a:b1:eb:21:4b:55: 66:75:b0:ec:d1:98:11:70:9e:f9:67:39:15:bb:40:ff:a2:01: 42:f7:55:e8:8a:6c:be:a6:78:51:58:b0:9c:51:f8:55:0a:f6: da:34:64:8c:31:07:2e:f3:74:1f:74:94:3c:c3:79:23:f9:ff: 42:5a:cf:16:75:4d:00:32:12:0b:1e:0f:0b:33:2f:ae:23:47: 45:48:d9:e2:7a:ed:77:4b:41:70:9d:82:31:13:f0:07:ad:d4: 99:66:8f:d5:72:b8:ee:76:8d:02:bb:39:d3:1b:1c:e1:95:d8: 7e:db:8b:7a:57:91:55:36:9f:17:a0:9b:0b:b2:17:c2:fe:59: 90:27:54:d5:02:0b:08:f2:54:58:bf:ae:61:00:bb:68:fe:ca: a4:78:09:c3:83:2b:54:51:20:fd:68:2c:f1:6a:4b:37:dd:e0: 15:bf:dd:c4:fd:c6:7b:fe:5d:bb:86:5f:3b:8c:68:ed:4a:37: 5c:37:de:1b:67:f5:ea:35:8b:14:e5:fb:9f:48:dd:af:0a:e6: 13:9a:36:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3Ri9c8T7VdBfVgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk YmI0YTAwNWEtNzI4Yy00MDUyLWI1MWUtYTY4ZjNmYzRkZmQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAizgnw6QpT+f1QcpedCmf0eP+JlcaLxUCqvud D4fUfrcGo6MJRpszlKZhq9BWYPFTYf9tNZtfuRLYf81HfJZua8GQUc49XJAPxFkJ WMXynUo6UhBFbwfHurR3p/TwG5MlkXY3hSy/WEgV92Yef4bbD6bqEvIHrGIQMOu6 pQusf+BYbS52Y3HxrjqNU3Lfr2GSh/bRXqcXLVSDFMG3a0i2/JSGupQIF01QcAWC 7z8vu8ZlXwxnd1T+a7CzpdyOhygrIADR5Z6VQ2QSXPdXsZMRh4UGbV4YtEQ5Rqgh r5cEBeivWj5GKikaJfs8gOo1f8E7MGIgKNbisqWDwVpgmD0cuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCShe8dE6j+uTSYUFmoM+yM1vH7YMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNmY0Yjc5MGYtYTJiYS0z YmMyLWE2YjYtMzc3NTk5YTQ3OWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADwMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAINA2d2als7aCers3zGd0dvmpxhXks0aOEdZ9Fucbf9n2yXcXRdS2IjC NzoV4jT6DUqx6yFLVWZ1sOzRmBFwnvlnORW7QP+iAUL3VeiKbL6meFFYsJxR+FUK 9to0ZIwxBy7zdB90lDzDeSP5/0JazxZ1TQAyEgseDwszL64jR0VI2eJ67XdLQXCd gjET8Aet1Jlmj9VyuO52jQK7OdMbHOGV2H7bi3pXkVU2nxegmwuyF8L+WZAnVNUC CwjyVFi/rmEAu2j+yqR4CcODK1RRIP1oLPFqSzfd4BW/3cT9xnv+XbuGXzuMaO1K N1w33htn9eo1ixTl+59I3a8K5hOaNo0= -----END CERTIFICATE-----Generated at Sun Feb 16 15:49:23 2025 by rpki-client