$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa File: a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa (raw, json) Hash identifier: NL6ANFslL/JfUViJLPkRc9RLbbDbnjC4jkFf4HrG8gY= Subject key identifier: 0C:E8:B2:E3:7B:2A:42:A8:82:0E:64:86:FE:94:4E:B0:A7:BD:14:A4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858494F93F2796527FAF041932290 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa Signing time: Wed 26 Mar 2025 01:00:40 +0000 ROA not before: Wed 26 Mar 2025 01:00:40 +0000 ROA not after: Tue 24 Jun 2025 01:00:40 +0000 asID: 8881 IP address blocks: 136.0.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:4f:93:f2:79:65:27:fa:f0:41:93:22:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 26 01:00:40 2025 GMT Not After : Jun 24 01:00:40 2025 GMT Subject: CN=a11645da-28ca-4918-a5b1-7abffc2fc4fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:e8:23:ac:a3:d1:56:1e:a9:89:62:8a:1b:80: 7b:09:4f:e6:20:e0:4c:1d:62:14:12:4c:5a:f7:76: 39:b3:aa:e0:e4:9a:2d:ef:dd:7b:f7:f6:c2:d1:06: 21:12:76:7c:e5:08:e8:f9:a5:0b:77:5e:43:1a:98: da:9b:0f:04:1c:62:f2:7a:04:13:7e:b9:28:f4:1a: e3:8d:47:f1:55:ea:8a:2f:9c:05:3d:8c:82:0c:32: 38:e7:64:1b:3a:c3:04:62:e3:fb:35:df:a4:cc:11: 20:2c:e3:ce:e6:41:fb:ec:87:17:a6:c8:9f:b5:33: 0e:16:b5:8c:2a:a0:3f:1e:f9:1e:76:2b:7a:98:c8: a1:83:65:32:0c:00:57:d2:99:3f:04:f4:f8:b6:bf: a3:ab:62:a6:88:8e:d1:7a:70:63:c0:ba:da:63:8e: 67:4e:c7:47:4f:2f:09:e3:d1:11:e3:ff:ba:51:82: cc:5d:4a:ab:85:3a:a5:98:b2:5f:17:0f:a9:d8:72: 96:eb:32:a7:9f:87:1e:29:9b:cb:48:fd:a1:40:04: ac:a3:35:77:21:73:f6:73:e6:3b:f0:9b:92:9f:72: 6f:00:7b:7f:4b:13:1a:33:ea:ca:1a:b3:25:a2:85: 87:70:17:f3:aa:03:1e:21:bb:a3:a0:b9:12:f8:ed: 9b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:E8:B2:E3:7B:2A:42:A8:82:0E:64:86:FE:94:4E:B0:A7:BD:14:A4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 75:70:b7:ca:b3:77:1d:1d:8f:a2:d1:28:60:a8:01:fb:4e:b1: 6f:7d:98:dd:8d:36:3e:f8:c1:f4:d8:90:ef:d4:40:3c:94:7f: 12:37:09:f4:41:a7:e9:0d:37:32:d9:c4:39:ca:7c:b4:ce:f9: 3c:60:71:b1:db:38:20:32:46:30:29:a3:9e:e1:ad:cc:3b:cf: d5:30:4d:56:50:59:37:5f:90:9f:b9:44:43:c9:a1:5d:92:16: ae:66:89:dd:f7:a0:de:64:15:a6:4a:7e:f0:37:95:2e:33:c4: 98:93:61:03:0e:90:af:66:ce:ee:8b:c8:7f:c0:b3:12:cf:31: 6c:72:8e:52:bc:7c:fa:a8:0e:c2:5f:b3:8e:f4:c2:b7:d8:92: 8d:94:b0:f3:e8:f9:e3:1c:13:37:87:71:44:ef:88:97:8d:0b: 73:6e:49:68:28:41:f8:39:10:9a:4d:45:bd:de:b3:b1:c3:b0: 9e:2b:5e:65:a4:09:9e:bb:c0:af:16:be:86:f4:a1:b0:59:8a: 8e:43:6d:00:2c:de:94:d5:68:a6:9b:29:f5:c4:45:24:3b:19: 67:59:44:ad:ef:db:9b:90:f1:0b:fc:02:73:77:13:1a:47:15: 65:54:17:3a:34:1b:42:21:cd:27:87:e0:80:bb:74:ff:0c:63: 1c:ff:45:dc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElPk/J5ZSf68EGTIpAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNjAxMDA0MFoXDTI1MDYyNDAxMDA0MFowLzEtMCsGA1UEAxMk YTExNjQ1ZGEtMjhjYS00OTE4LWE1YjEtN2FiZmZjMmZjNGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhugjrKPRVh6piWKKG4B7CU/mIOBMHWIUEkxa 93Y5s6rg5Jot79179/bC0QYhEnZ85Qjo+aULd15DGpjamw8EHGLyegQTfrko9Brj jUfxVeqKL5wFPYyCDDI452QbOsMEYuP7Nd+kzBEgLOPO5kH77IcXpsiftTMOFrWM KqA/Hvkedit6mMihg2UyDABX0pk/BPT4tr+jq2KmiI7RenBjwLraY45nTsdHTy8J 49ER4/+6UYLMXUqrhTqlmLJfFw+p2HKW6zKnn4ceKZvLSP2hQASsozV3IXP2c+Y7 8JuSn3JvAHt/SxMaM+rKGrMlooWHcBfzqgMeIbujoLkS+O2bUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAzosuN7KkKogg5khv6UTrCnvRSkMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNkYzBhOGUtYjRlNS0z NDg2LWEwYzAtZDJmN2EzZTkxMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHVwt8qzdx0dj6LRKGCoAftOsW99mN2NNj74wfTYkO/UQDyUfxI3CfRB p+kNNzLZxDnKfLTO+TxgcbHbOCAyRjApo57hrcw7z9UwTVZQWTdfkJ+5REPJoV2S Fq5mid33oN5kFaZKfvA3lS4zxJiTYQMOkK9mzu6LyH/AsxLPMWxyjlK8fPqoDsJf s470wrfYko2UsPPo+eMcEzeHcUTviJeNC3NuSWgoQfg5EJpNRb3es7HDsJ4rXmWk CZ67wK8Wvob0obBZio5DbQAs3pTVaKabKfXERSQ7GWdZRK3v25uQ8Qv8AnN3ExpH FWVUFzo0G0IhzSeH4IC7dP8MYxz/Rdw= -----END CERTIFICATE-----Generated at Sat Apr 5 02:31:25 2025 by rpki-client