$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aadb44bc-d892-35ad-8f50-ef5f8d5e7df4.roa File: aadb44bc-d892-35ad-8f50-ef5f8d5e7df4.roa (raw, json) Hash identifier: iywgV1CX9s6n1MI/NP/wgJAAdEgtYAY4vc4UBPjKWxg= Subject key identifier: 90:B7:40:D4:46:2C:26:FB:F6:AE:E6:91:06:98:1D:AF:5C:48:BC:7C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584886B072DA62647E29ECBCC280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aadb44bc-d892-35ad-8f50-ef5f8d5e7df4.roa Signing time: Mon 13 Jan 2025 02:00:40 +0000 ROA not before: Mon 13 Jan 2025 02:00:40 +0000 ROA not after: Sun 13 Apr 2025 01:00:40 +0000 asID: 401152 IP address blocks: 136.0.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:86:b0:72:da:62:64:7e:29:ec:bc:c2:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 13 02:00:40 2025 GMT Not After : Apr 13 01:00:40 2025 GMT Subject: CN=184f0149-08dd-4847-9d0a-806c94a2fd15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ee:86:5c:38:78:29:b0:0f:90:a1:99:5d:09: 51:7c:94:cb:f0:15:7a:ac:08:22:cd:49:9b:bd:43: 39:de:d9:af:ed:af:7c:a8:cf:53:67:a1:e7:a2:08: c9:c9:86:8d:0d:89:ef:25:dc:cb:15:57:d4:27:e5: 77:11:a0:b7:97:de:bf:57:da:54:2c:55:fc:16:95: 10:df:36:c3:48:2e:e9:29:71:d4:c6:ee:25:22:71: f1:3f:d2:c8:39:37:f8:35:4e:37:ea:36:f7:97:64: ce:df:09:f7:5a:19:87:c7:9c:7a:ea:44:a0:8d:ab: 71:ba:ad:23:44:e1:d4:de:c2:2b:91:fe:ef:ec:43: db:a2:8a:7a:6c:20:e3:5a:b0:d4:3c:4b:c4:67:e5: 58:53:f6:c9:b9:a6:63:a7:17:d0:e4:8c:4c:ec:fa: 5e:93:77:d4:c9:e6:6b:6f:e1:10:59:f3:78:1b:8b: 1b:dc:1b:e9:a8:f3:51:26:a3:42:b2:9c:87:28:5d: 3a:af:53:f1:f0:38:ba:94:d7:46:a4:6b:64:31:d1: e5:ba:1f:61:75:21:51:01:ea:26:d8:b2:e2:65:a5: 0b:16:b3:8c:dc:af:dc:7e:36:13:ab:f2:10:45:24: 4d:87:54:05:b7:f8:34:c9:ec:0a:98:cb:1a:c7:eb: 07:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:B7:40:D4:46:2C:26:FB:F6:AE:E6:91:06:98:1D:AF:5C:48:BC:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aadb44bc-d892-35ad-8f50-ef5f8d5e7df4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 87:8f:ea:78:5c:3b:99:4f:1c:07:99:98:0f:5e:03:36:13:de: 99:36:04:43:e5:e0:32:dd:20:95:73:15:2c:b5:13:a9:ec:b0: 9c:49:cd:01:12:68:dc:22:62:64:18:8d:a4:2e:66:53:0a:b0: 0e:26:dd:1b:60:52:0c:a8:3b:00:d0:b7:a7:7f:88:ad:ce:83: 2e:14:f5:e8:47:f3:26:ed:28:83:af:f6:1a:4d:df:86:d0:47: 9a:3b:6b:12:a7:e9:d5:1e:a0:11:e8:fb:02:a7:ff:79:7d:13: d7:fa:3f:8a:7a:5b:2b:6b:82:73:30:f0:a6:0f:fd:20:b8:ad: 08:ed:33:2a:af:44:22:49:61:1b:62:fd:6d:ee:90:d2:ff:b9: 5d:ec:54:6f:e8:08:32:61:8d:bc:9e:12:29:13:e9:c8:32:b6: a2:56:2e:83:ff:21:7b:ed:10:1a:fd:ff:95:f3:38:b7:e7:5c: d6:f7:d2:cd:5b:a8:9e:42:28:f5:0e:ab:a8:5a:c2:e9:44:83: b1:55:a2:33:29:bb:06:f1:73:43:2d:55:15:07:27:f9:dd:64: 8d:e8:b5:89:2d:7d:59:b2:9b:fd:cc:78:ba:62:f2:a4:a3:e8: 96:91:39:a2:8a:10:a1:a3:ee:98:a4:c2:d5:e4:a3:b2:6e:94: 2b:28:be:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiGsHLaYmR+Key8woAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDExMzAyMDA0MFoXDTI1MDQxMzAxMDA0MFowLzEtMCsGA1UEAxMk MTg0ZjAxNDktMDhkZC00ODQ3LTlkMGEtODA2Yzk0YTJmZDE1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyO6GXDh4KbAPkKGZXQlRfJTL8BV6rAgizUmb vUM53tmv7a98qM9TZ6HnogjJyYaNDYnvJdzLFVfUJ+V3EaC3l96/V9pULFX8FpUQ 3zbDSC7pKXHUxu4lInHxP9LIOTf4NU436jb3l2TO3wn3WhmHx5x66kSgjatxuq0j ROHU3sIrkf7v7EPboop6bCDjWrDUPEvEZ+VYU/bJuaZjpxfQ5IxM7Ppek3fUyeZr b+EQWfN4G4sb3BvpqPNRJqNCspyHKF06r1Px8Di6lNdGpGtkMdHluh9hdSFRAeom 2LLiZaULFrOM3K/cfjYTq/IQRSRNh1QFt/g0yewKmMsax+sHeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJC3QNRGLCb79q7mkQaYHa9cSLx8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWFkYjQ0YmMtZDg5Mi0z NWFkLThmNTAtZWY1ZjhkNWU3ZGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIeP6nhcO5lPHAeZmA9eAzYT3pk2BEPl4DLdIJVzFSy1E6nssJxJzQES aNwiYmQYjaQuZlMKsA4m3RtgUgyoOwDQt6d/iK3Ogy4U9ehH8ybtKIOv9hpN34bQ R5o7axKn6dUeoBHo+wKn/3l9E9f6P4p6WytrgnMw8KYP/SC4rQjtMyqvRCJJYRti /W3ukNL/uV3sVG/oCDJhjbyeEikT6cgytqJWLoP/IXvtEBr9/5XzOLfnXNb30s1b qJ5CKPUOq6hawulEg7FVojMpuwbxc0MtVRUHJ/ndZI3otYktfVmym/3MeLpi8qSj 6JaROaKKEKGj7pikwtXko7JulCsovsM= -----END CERTIFICATE-----Generated at Sun Feb 16 15:25:06 2025 by rpki-client