$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af506b57-90fb-356e-bc8b-7000476f7eb3.roa File: af506b57-90fb-356e-bc8b-7000476f7eb3.roa (raw, json) Hash identifier: Jrr7VQIgBKLrXa5zmvDlnN0qGfIihEH4GclzZ6o4NiY= Subject key identifier: FE:D8:C5:62:0A:D4:9D:21:C2:7F:27:C2:91:9A:64:FC:D3:DD:80:B1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B738DF28039CE65452B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af506b57-90fb-356e-bc8b-7000476f7eb3.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 136.0.87.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:73:8d:f2:80:39:ce:65:45:2b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=cbbd6b7d-b625-43a6-a424-dbcf6b2025f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:6a:b7:b2:32:c5:3b:3a:2b:5b:52:07:f4:d6: 40:fc:62:71:2b:3d:9b:e7:b7:6d:ee:cd:f8:81:ae: f3:ec:a6:73:75:6e:77:17:7d:1c:14:85:92:4d:59: ad:b5:d4:6f:0f:f0:77:06:89:a1:a9:77:af:19:7f: 9c:b7:1d:24:95:11:c8:eb:a5:5e:46:ad:cb:c0:ff: 02:6f:01:12:77:dd:af:ba:96:da:71:00:69:29:29: 48:49:06:83:a7:d9:08:9d:c1:50:da:33:46:ad:fe: cc:d2:d6:c8:f1:6a:24:7a:59:4b:6d:91:14:3f:ae: 10:a7:cd:da:ca:e8:61:2d:39:9c:e7:e7:ba:8e:e9: 5a:84:e0:27:2d:6b:cb:a9:7e:66:8d:01:b9:4f:4c: e7:4c:00:9e:c7:7b:1f:09:13:b3:8a:bc:c6:d2:a6: c1:16:ab:79:44:d9:3a:06:3c:1a:d9:ae:b6:c2:e7: 1e:57:be:c8:00:ac:6a:c3:db:c2:c7:7e:af:f6:e8: 8f:32:51:51:94:a5:c7:88:0e:fe:54:bf:9e:3d:c0: 7e:19:9a:d1:da:8c:43:02:24:b1:09:b4:b2:7f:15: 61:16:e5:24:fc:18:2c:a5:ff:65:b0:4a:16:93:07: b3:93:0c:04:4b:fd:09:37:50:05:7a:16:46:f4:95: 8d:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:D8:C5:62:0A:D4:9D:21:C2:7F:27:C2:91:9A:64:FC:D3:DD:80:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/af506b57-90fb-356e-bc8b-7000476f7eb3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.87.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:3c:45:6a:7d:3f:07:6a:a2:99:9f:48:cd:b9:18:b7:45:0b: 4c:90:e8:f4:9f:3c:d3:46:3d:92:26:c0:8c:bf:03:01:9c:72: e9:4d:09:b2:d1:03:28:d5:ef:f4:a8:f9:9c:27:2b:4b:75:a8: a1:ee:a0:73:e7:ba:df:af:10:ef:e6:65:49:f5:06:af:0b:0a: c8:4a:d4:0f:ff:b1:06:b7:13:a0:e5:a2:0d:94:75:1b:bb:20: c7:9d:03:ca:26:bd:21:aa:90:52:1b:48:2a:74:81:47:78:22: e2:59:a1:e1:78:11:cb:e1:6e:ef:14:c3:1e:43:03:ec:58:55: 1f:64:2b:a7:6c:60:29:24:7d:5c:ae:78:ea:c5:e5:73:b9:64: 65:74:6c:61:3f:ea:b6:34:97:7a:aa:96:34:4a:89:ea:98:15: 53:1f:cf:7a:33:2d:13:85:f3:29:c6:dc:3a:6f:97:03:cd:97: af:90:b5:72:3a:13:2f:7d:96:92:50:b3:09:cf:ff:54:73:7a: 00:85:7f:79:b6:22:bc:47:b9:b5:fa:b1:52:08:0a:b0:67:13: 78:a7:96:b2:71:b5:9b:79:48:2e:b1:6b:6f:22:fd:3d:6d:75: 15:ac:48:e1:2c:74:2d:66:fb:b1:d9:01:34:50:7a:39:e1:94: 83:70:88:58 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3ON8oA5zmVFKwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk Y2JiZDZiN2QtYjYyNS00M2E2LWE0MjQtZGJjZjZiMjAyNWY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGq3sjLFOzorW1IH9NZA/GJxKz2b57dt7s34 ga7z7KZzdW53F30cFIWSTVmttdRvD/B3BomhqXevGX+ctx0klRHI66VeRq3LwP8C bwESd92vupbacQBpKSlISQaDp9kIncFQ2jNGrf7M0tbI8WokellLbZEUP64Qp83a yuhhLTmc5+e6julahOAnLWvLqX5mjQG5T0znTACex3sfCROzirzG0qbBFqt5RNk6 Bjwa2a62wuceV77IAKxqw9vCx36v9uiPMlFRlKXHiA7+VL+ePcB+GZrR2oxDAiSx CbSyfxVhFuUk/Bgspf9lsEoWkwezkwwES/0JN1AFehZG9JWNuQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP7YxWIK1J0hwn8nwpGaZPzT3YCxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWY1MDZiNTctOTBmYi0z NTZlLWJjOGItNzAwMDQ3NmY3ZWIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEg8RWp9PwdqopmfSM25GLdFC0yQ6PSfPNNGPZImwIy/AwGcculNCbLR AyjV7/So+ZwnK0t1qKHuoHPnut+vEO/mZUn1Bq8LCshK1A//sQa3E6Dlog2UdRu7 IMedA8omvSGqkFIbSCp0gUd4IuJZoeF4Ecvhbu8Uwx5DA+xYVR9kK6dsYCkkfVyu eOrF5XO5ZGV0bGE/6rY0l3qqljRKieqYFVMfz3ozLROF8ynG3DpvlwPNl6+QtXI6 Ey99lpJQswnP/1RzegCFf3m2IrxHubX6sVIICrBnE3inlrJxtZt5SC6xa28i/T1t dRWsSOEsdC1m+7HZATRQejnhlINwiFg= -----END CERTIFICATE-----Generated at Sun Feb 16 15:04:15 2025 by rpki-client