$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/75d4d3f1-8b10-32f3-9729-ece45bb3e90d.roa File: 75d4d3f1-8b10-32f3-9729-ece45bb3e90d.roa (raw, json) Hash identifier: xt4wAVWTlbUrimbE5iTs7FWD0OT4RjjfRTCEK+MKNzI= Subject key identifier: 1A:2E:C9:D3:90:1A:08:99:FF:F8:E9:5A:89:8C:B9:CA:BA:40:E5:E7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848705AFB832FBC09E0AB68C090 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/75d4d3f1-8b10-32f3-9729-ece45bb3e90d.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 8881 IP address blocks: 136.0.170.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fb:83:2f:bc:09:e0:ab:68:c0:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=0b3cc492-29ed-4c35-b7fe-087b33e872aa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:73:29:55:f0:30:04:c4:62:c4:d3:f9:20:1e: 85:f2:7d:10:24:52:09:27:c2:2d:2c:b1:c1:d0:fb: bd:79:53:32:46:03:43:70:77:01:a2:0e:32:2b:b3: a6:ff:a9:11:8a:b1:f0:ed:b6:2d:84:0b:23:f9:7d: f9:77:50:74:09:de:b0:84:57:56:56:c7:47:f3:6f: 57:2a:bd:69:0c:d7:96:36:5b:f1:6f:01:6f:54:de: c8:58:fa:94:6a:05:eb:cd:2d:f7:c5:57:46:fb:07: 7c:14:b6:de:e3:71:ad:e5:a4:df:6e:c0:46:bc:a9: e8:80:4e:ac:93:3b:69:fe:6c:9c:9b:42:2c:fd:13: c3:34:f1:72:c5:0e:b8:71:6f:87:20:24:50:71:f4: 3e:6c:02:e1:93:71:75:92:3e:6d:29:87:a4:ce:92: 0a:15:a9:b3:e0:05:ab:a2:84:76:1f:d1:36:71:60: e7:c4:d0:79:a5:fa:ba:3c:29:a2:51:24:3f:05:8a: ed:e6:eb:f0:c1:c4:c1:d0:88:d1:c8:08:88:ef:ac: 17:23:d0:59:b3:da:01:f5:06:cd:d7:c7:51:40:88: 6e:84:d5:2b:a7:33:ec:8c:8d:e0:a7:89:91:81:7b: 55:45:7e:73:a0:20:cb:af:76:d1:1f:ac:c1:0e:b3: 61:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1A:2E:C9:D3:90:1A:08:99:FF:F8:E9:5A:89:8C:B9:CA:BA:40:E5:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/75d4d3f1-8b10-32f3-9729-ece45bb3e90d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.170.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:eb:e7:ed:93:e8:60:86:59:80:75:c9:36:ac:27:ff:6d:18: 93:a2:d5:0c:1c:58:d6:33:60:fc:b6:5e:65:c7:97:27:64:50: 0e:19:bf:ff:a9:67:e9:31:f6:b2:ca:85:97:b9:98:88:0e:94: 4a:b0:25:b6:b3:55:ee:70:ce:58:c8:1f:60:2e:e5:eb:bd:20: 97:60:2d:c2:52:65:bc:47:b9:67:24:36:76:17:df:8b:7c:bb: 80:94:72:ec:b9:c8:16:e5:6f:0c:b0:53:97:d5:cd:82:07:b3: 2e:6e:de:d2:09:22:8c:82:12:7b:5b:c1:3b:bc:45:5d:71:6d: 55:6b:9d:9a:d9:df:43:b6:66:7f:ac:bd:3c:62:97:9c:c1:59: 69:13:c9:b0:7f:6a:13:68:ee:f5:99:ed:af:7c:87:02:a9:9d: 44:6e:cb:df:fb:eb:73:2b:97:e2:02:c7:4c:f4:b2:cc:17:cc: 36:92:97:54:b6:ab:7d:1c:ef:d8:c7:2e:97:22:e4:c2:47:b3: 86:b7:5c:a1:ff:f2:84:74:1a:e2:ba:99:3f:f7:2a:22:4e:80: 2f:c3:da:23:f3:fd:1d:1a:b4:93:79:84:c5:1a:b6:f1:6d:1f: 1f:e2:bb:e8:86:2a:fc:32:53:fd:86:bf:90:0b:a8:2b:bb:87: 65:84:f1:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvuDL7wJ4KtowJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk MGIzY2M0OTItMjllZC00YzM1LWI3ZmUtMDg3YjMzZTg3MmFhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiHMpVfAwBMRixNP5IB6F8n0QJFIJJ8ItLLHB 0Pu9eVMyRgNDcHcBog4yK7Om/6kRirHw7bYthAsj+X35d1B0Cd6whFdWVsdH829X Kr1pDNeWNlvxbwFvVN7IWPqUagXrzS33xVdG+wd8FLbe43Gt5aTfbsBGvKnogE6s kztp/mycm0Is/RPDNPFyxQ64cW+HICRQcfQ+bALhk3F1kj5tKYekzpIKFamz4AWr ooR2H9E2cWDnxNB5pfq6PCmiUSQ/BYrt5uvwwcTB0IjRyAiI76wXI9BZs9oB9QbN 18dRQIhuhNUrpzPsjI3gp4mRgXtVRX5zoCDLr3bRH6zBDrNh1QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBouydOQGgiZ//jpWomMucq6QOXnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzVkNGQzZjEtOGIxMC0z MmYzLTk3MjktZWNlNDViYjNlOTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAzr5+2T6GCGWYB1yTasJ/9tGJOi1QwcWNYzYPy2XmXHlydkUA4Zv/+p Z+kx9rLKhZe5mIgOlEqwJbazVe5wzljIH2Au5eu9IJdgLcJSZbxHuWckNnYX34t8 u4CUcuy5yBblbwywU5fVzYIHsy5u3tIJIoyCEntbwTu8RV1xbVVrnZrZ30O2Zn+s vTxil5zBWWkTybB/ahNo7vWZ7a98hwKpnURuy9/763Mrl+ICx0z0sswXzDaSl1S2 q30c79jHLpci5MJHs4a3XKH/8oR0GuK6mT/3KiJOgC/D2iPz/R0atJN5hMUatvFt Hx/iu+iGKvwyU/2Gv5ALqCu7h2WE8YU= -----END CERTIFICATE-----Generated at Sun Feb 16 15:10:27 2025 by rpki-client