$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa File: 729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa (raw, json) Hash identifier: N0PlXwuM+IGWtSmVxMVpXgftSHCE7tMM77qa1eeKqh8= Subject key identifier: EB:35:C4:76:08:9C:45:A8:6E:FC:94:79:9D:F2:AD:5A:BC:0C:09:00 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B88FB8BF10E128A738380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 18530 IP address blocks: 136.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:88:fb:8b:f1:0e:12:8a:73:83:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b93b2fdd-dd52-4e23-b147-ce198eca1e08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:98:13:13:83:51:da:b1:23:0c:8a:85:9f:b8: a2:a0:f1:c1:4c:39:e6:fb:fa:6c:e8:26:4f:61:5d: 2a:2d:56:e4:c6:85:0f:c6:ec:4c:7c:d4:33:d7:3f: 5e:3f:53:2f:ab:7c:ca:73:c9:e0:b9:7d:9a:7f:29: 6a:f5:af:52:fd:a4:9f:f7:d8:9c:1e:7d:56:fb:2e: 59:56:8e:72:83:08:f3:03:cf:01:ae:b1:d2:03:e6: 8a:cc:39:a2:fe:76:ac:d9:26:77:0a:80:13:a1:e1: 43:45:8f:6a:e4:b4:0e:87:f7:21:ab:43:13:6e:ba: 30:7e:e1:ca:4e:bb:39:bf:d7:40:a5:d3:b7:3c:bc: 89:80:cc:eb:b0:3b:ff:cc:57:2e:e2:fe:5e:33:34: 30:e4:d0:d8:bc:c0:5e:db:8d:db:fb:7d:df:9b:c4: 7d:97:54:26:8a:c1:c5:8c:46:3a:3c:06:cb:09:a4: a8:15:34:0f:65:a0:b3:e9:fc:05:19:e0:16:59:d2: 44:e1:2a:27:1d:8a:2b:42:27:03:14:35:4c:3e:75: 24:18:b7:79:af:23:41:b9:0a:17:04:83:86:07:54: fc:90:70:3a:73:09:21:62:f2:a2:2e:de:1b:ce:3e: d3:a9:82:dd:26:17:61:a5:8f:a6:76:8c:c2:8a:44: 8a:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:35:C4:76:08:9C:45:A8:6E:FC:94:79:9D:F2:AD:5A:BC:0C:09:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/729f1276-dc64-39c5-9b67-e31aa4eaf6bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 92:3a:65:69:6a:45:a9:d8:f0:0c:75:a7:f0:7d:2a:2d:4d:d7: 02:4b:52:9c:10:88:87:83:fa:60:2d:6f:35:6c:a3:2f:7d:af: 00:94:1b:ed:9b:48:a9:9d:47:e8:33:85:af:52:e0:5b:23:7a: 25:c4:cc:38:19:de:c4:ef:a2:a5:c8:1c:b7:88:b2:37:dd:df: 26:f6:37:9d:c9:87:65:a5:25:71:54:07:50:c6:a7:c7:e4:c5: e7:3e:5f:c3:55:82:99:f1:7e:a5:94:d2:d5:5f:6b:d0:9d:1e: ac:00:da:5c:69:5b:cb:f7:29:e7:58:76:b6:c2:63:c4:94:b1: e1:e4:84:1a:44:07:ce:73:03:ba:f9:9e:5b:7b:89:49:e6:0c: a5:29:bf:bf:99:73:81:c6:bb:9f:37:b7:59:85:7a:ac:81:9f: 69:a1:9b:df:83:ef:95:31:d6:e2:b4:0c:0a:6d:a4:d5:4c:a8: c1:d7:32:2e:21:5c:a0:d0:7c:cb:c1:d4:b0:a1:29:80:61:75: da:b5:85:c2:2a:64:11:ef:c5:84:39:ed:59:04:00:7f:a1:c8: fd:64:24:73:65:12:d4:ee:68:c2:fb:5f:6c:40:23:83:fa:16: a9:9d:2b:c7:f0:1d:ce:e0:bc:0a:0a:00:3e:cd:77:07:db:7e: 3c:f0:01:9e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4j7i/EOEopzg4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjkzYjJmZGQtZGQ1Mi00ZTIzLWIxNDctY2UxOThlY2ExZTA4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZgTE4NR2rEjDIqFn7iioPHBTDnm+/ps6CZP YV0qLVbkxoUPxuxMfNQz1z9eP1Mvq3zKc8nguX2afylq9a9S/aSf99icHn1W+y5Z Vo5ygwjzA88BrrHSA+aKzDmi/nas2SZ3CoAToeFDRY9q5LQOh/chq0MTbrowfuHK Trs5v9dApdO3PLyJgMzrsDv/zFcu4v5eMzQw5NDYvMBe243b+33fm8R9l1QmisHF jEY6PAbLCaSoFTQPZaCz6fwFGeAWWdJE4SonHYorQicDFDVMPnUkGLd5ryNBuQoX BIOGB1T8kHA6cwkhYvKiLt4bzj7TqYLdJhdhpY+mdozCikSK/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOs1xHYInEWobvyUeZ3yrVq8DAkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzI5ZjEyNzYtZGM2NC0z OWM1LTliNjctZTMxYWE0ZWFmNmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJI6ZWlqRanY8Ax1p/B9Ki1N1wJLUpwQiIeD+mAtbzVsoy99rwCUG+2b SKmdR+gzha9S4FsjeiXEzDgZ3sTvoqXIHLeIsjfd3yb2N53Jh2WlJXFUB1DGp8fk xec+X8NVgpnxfqWU0tVfa9CdHqwA2lxpW8v3KedYdrbCY8SUseHkhBpEB85zA7r5 nlt7iUnmDKUpv7+Zc4HGu583t1mFeqyBn2mhm9+D75Ux1uK0DAptpNVMqMHXMi4h XKDQfMvB1LChKYBhddq1hcIqZBHvxYQ57VkEAH+hyP1kJHNlEtTuaML7X2xAI4P6 FqmdK8fwHc7gvAoKAD7NdwfbfjzwAZ4= -----END CERTIFICATE-----Generated at Sun Feb 16 15:30:48 2025 by rpki-client