$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa File: a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa (raw, json) Hash identifier: 3a1FxlGvpe1fWp/iEEwg/K/5jMQbb98XclmQ/3XXinY= Subject key identifier: 45:D5:8B:2E:53:0B:6A:BF:29:4B:CC:E5:3B:E2:D4:0E:C1:1C:31:58 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B89A0DA2F678181C03F18 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 6939 IP address blocks: 136.0.246.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:89:a0:da:2f:67:81:81:c0:3f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b141abd1-7bd7-43b9-8c92-a81946a7f43e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:96:1e:ac:3b:55:71:5d:5f:68:45:e2:40:da: 67:bb:25:08:f2:a0:c3:08:eb:96:6d:88:0b:52:c4: 96:be:75:b4:1c:35:3e:fa:23:55:89:b4:49:26:8e: 6a:cd:91:32:2d:b3:32:ac:c4:c3:d1:1c:d2:49:b6: b3:bf:c5:fd:39:19:fd:a0:9f:b9:02:9e:ce:a4:53: 8a:e0:f0:4d:57:9c:f0:55:2e:0f:9f:cf:3c:53:28: 38:2c:ab:6b:1e:7a:f3:8c:1e:32:8b:f9:7c:7e:73: 91:77:a2:63:84:bc:bf:35:db:c2:a2:1e:ca:0c:47: a4:50:c3:35:5f:9b:3d:d6:ce:e5:9b:fb:d6:8d:b6: 37:7c:77:ea:5b:07:42:9b:29:03:07:3e:e7:22:65: 12:fd:ae:c1:f3:14:42:27:32:53:b1:e7:58:4d:c1: b8:c1:3c:fe:96:5c:c6:e7:46:10:ca:6e:ea:0a:83: 75:16:b5:8b:b3:85:24:79:05:ea:e8:73:22:a8:3a: 56:85:a6:51:6a:b6:62:39:81:3e:e4:31:ac:60:37: c3:77:cf:b1:bd:27:ce:71:52:b5:5d:70:b7:6e:e1: c0:55:47:62:27:5f:3d:96:41:08:a3:c9:be:07:ae: 10:de:5f:56:a4:6a:dc:8b:5b:1a:fb:06:bb:2f:a4: 94:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:D5:8B:2E:53:0B:6A:BF:29:4B:CC:E5:3B:E2:D4:0E:C1:1C:31:58 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a7cb5aa5-b7ce-3af7-97f1-e5828927ead5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.246.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 23:57:df:81:5d:c6:54:c3:3f:0a:b9:80:74:e7:9b:bf:71:88: ec:a0:26:ac:99:88:01:ec:12:56:09:63:15:19:18:d5:9d:9c: 06:97:c0:18:a4:c4:44:51:1f:e6:f6:b8:34:9b:a4:1a:2f:d6: 60:1e:07:25:c0:cb:55:1d:43:59:5e:a1:cc:f3:54:f5:12:41: 96:0a:ed:d2:06:0e:a8:85:f7:12:04:8f:a2:39:cb:3d:39:31: b2:cf:27:6d:be:11:a2:1a:41:8e:cc:21:e7:f2:45:6a:0d:0f: 60:a6:b0:f0:b4:19:cb:d9:89:c7:43:4f:df:3c:38:c0:e3:86: 5d:5a:7e:4f:82:b9:e4:49:7b:f1:96:cd:b5:ed:83:9a:66:72: ad:44:27:d0:25:a0:38:1c:24:f4:9e:f4:ba:37:fa:be:3c:c0: 0e:fb:2f:85:94:f6:78:2d:db:f4:a1:2a:a7:64:c5:51:55:67: a9:3d:f6:2c:7e:4d:56:49:c4:0d:7f:48:27:cd:f9:12:81:ba: 9f:c9:17:71:37:0d:a1:af:af:a5:d0:e3:2e:62:ba:dd:3d:bd: 55:f2:2a:48:aa:df:e6:46:cd:bd:c8:e9:7f:75:94:23:35:d1: 6c:c7:36:cc:3e:33:27:55:1f:37:4e:97:72:32:42:98:8d:7b: 35:b6:37:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4mg2i9ngYHAPxgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjE0MWFiZDEtN2JkNy00M2I5LThjOTItYTgxOTQ2YTdmNDNlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiZYerDtVcV1faEXiQNpnuyUI8qDDCOuWbYgL UsSWvnW0HDU++iNVibRJJo5qzZEyLbMyrMTD0RzSSbazv8X9ORn9oJ+5Ap7OpFOK 4PBNV5zwVS4Pn888Uyg4LKtrHnrzjB4yi/l8fnORd6JjhLy/NdvCoh7KDEekUMM1 X5s91s7lm/vWjbY3fHfqWwdCmykDBz7nImUS/a7B8xRCJzJTsedYTcG4wTz+llzG 50YQym7qCoN1FrWLs4UkeQXq6HMiqDpWhaZRarZiOYE+5DGsYDfDd8+xvSfOcVK1 XXC3buHAVUdiJ189lkEIo8m+B64Q3l9WpGrci1sa+wa7L6SUCwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEXViy5TC2q/KUvM5Tvi1A7BHDFYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTdjYjVhYTUtYjdjZS0z YWY3LTk3ZjEtZTU4Mjg5MjdlYWQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD2MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACNX34FdxlTDPwq5gHTnm79xiOygJqyZiAHsElYJYxUZGNWdnAaXwBik xERRH+b2uDSbpBov1mAeByXAy1UdQ1leoczzVPUSQZYK7dIGDqiF9xIEj6I5yz05 MbLPJ22+EaIaQY7MIefyRWoND2CmsPC0GcvZicdDT988OMDjhl1afk+CueRJe/GW zbXtg5pmcq1EJ9AloDgcJPSe9Lo3+r48wA77L4WU9ngt2/ShKqdkxVFVZ6k99ix+ TVZJxA1/SCfN+RKBup/JF3E3DaGvr6XQ4y5iut09vVXyKkiq3+ZGzb3I6X91lCM1 0WzHNsw+MydVHzdOl3IyQpiNezW2N50= -----END CERTIFICATE-----Generated at Sun Feb 16 15:18:23 2025 by rpki-client