$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa File: b959d668-322b-37bd-853d-2f98ff3d0d2e.roa (raw, json) Hash identifier: 9tuEsC1lBBLOpyODm+iyXVgypY2Q2x8wvPEpr0FL/3o= Subject key identifier: 3C:7A:93:B7:A8:18:5B:90:99:C1:57:81:A9:7E:73:96:E5:43:AA:E1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584911A0095AC06D6C31C59DF040 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa Signing time: Mon 03 Mar 2025 20:25:01 +0000 ROA not before: Mon 03 Mar 2025 20:25:01 +0000 ROA not after: Sun 01 Jun 2025 19:25:01 +0000 asID: 401152 IP address blocks: 136.0.63.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:a0:09:5a:c0:6d:6c:31:c5:9d:f0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 3 20:25:01 2025 GMT Not After : Jun 1 19:25:01 2025 GMT Subject: CN=4df23fd8-6202-4bf3-b7e1-7c6b867f4a2e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:cc:98:59:97:e2:5b:3f:8a:8c:ef:f0:d4:65: 9e:55:8b:e5:44:40:a4:f3:01:19:c5:b8:0c:32:87: 3c:c4:91:2e:f7:b0:aa:c4:e7:2a:a3:99:96:fb:d4: dd:a5:1b:7f:75:b3:76:36:62:85:a7:63:e8:31:54: 2b:6b:c1:34:bc:dd:43:c2:8e:6d:69:7e:e9:b5:99: c8:33:18:c0:4a:b5:7d:a9:6b:4c:29:f8:e2:ec:25: db:69:82:6d:61:ae:d3:89:78:bb:31:1b:78:ee:5f: 6b:c1:ac:77:41:a4:18:48:ca:e8:ea:76:20:40:32: 6a:79:63:76:da:24:ac:ee:ff:7b:26:c7:22:9d:ed: 62:9b:54:e0:73:8b:b2:bf:eb:e2:89:c2:94:4c:4e: 11:cd:0f:e3:85:e3:b0:4a:d3:d8:ac:ea:3c:48:47: 6d:e7:a9:0e:aa:0d:ea:05:d7:c8:95:a6:d4:54:5e: 6a:d2:bd:28:e1:6b:28:60:a0:45:f2:53:ad:42:58: da:2a:4f:5c:7a:73:48:32:8d:5d:3f:79:06:0d:46: 7d:27:cb:db:bb:75:e0:84:4e:9d:c9:f2:5d:01:07: 9c:e7:21:1d:60:75:88:4f:68:22:cd:d6:15:53:93: 4b:2c:fd:6f:0b:93:a8:cc:4a:d9:4e:2e:c9:2e:f7: ff:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:7A:93:B7:A8:18:5B:90:99:C1:57:81:A9:7E:73:96:E5:43:AA:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b959d668-322b-37bd-853d-2f98ff3d0d2e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.63.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:63:d9:24:18:89:b6:c7:4f:18:62:69:bb:15:da:9f:87:3c: 63:e3:d6:7a:2f:0c:a0:87:29:a7:47:11:91:ae:41:7b:fa:e1: 7b:a8:47:2f:30:a2:48:92:d8:38:2b:80:62:25:87:80:07:d5: 9f:87:3f:a1:6a:f8:3f:4a:71:1e:e3:76:4f:82:01:f0:3e:11: 95:23:5e:25:f1:ba:6b:94:cb:a8:93:4c:d3:52:b5:47:3d:a0: 1c:9a:b2:2f:aa:86:28:2f:a0:09:67:1e:f6:d3:fb:15:aa:0f: a6:3e:b6:89:fb:a1:ce:c9:9d:62:b1:5d:6c:71:83:08:a6:b4: 11:0f:bf:7a:cd:2f:ea:f9:32:40:ee:a7:1a:84:c2:da:96:69: 50:5f:50:43:b3:ef:44:bb:7d:a3:f8:cd:7f:c2:ec:65:d0:a3: 67:70:13:ed:a6:cc:18:32:84:31:60:f5:f6:b7:29:20:cd:f8: 37:80:67:9c:2e:f4:c6:74:51:07:12:f8:10:c6:a2:99:e4:1c: ef:f3:74:f7:d9:23:b0:bb:eb:d4:a3:9e:82:ea:47:55:fc:e4: 27:9f:0d:bb:0a:32:e7:2a:d1:95:0d:a3:aa:da:e1:f2:7b:72: 9b:39:d7:c4:f6:8b:e6:a9:19:cb:b6:6a:b6:c0:0b:c0:95:58: b6:25:fa:3d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRoAlawG1sMcWd8EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMwMzIwMjUwMVoXDTI1MDYwMTE5MjUwMVowLzEtMCsGA1UEAxMk NGRmMjNmZDgtNjIwMi00YmYzLWI3ZTEtN2M2Yjg2N2Y0YTJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1cyYWZfiWz+KjO/w1GWeVYvlRECk8wEZxbgM Moc8xJEu97CqxOcqo5mW+9TdpRt/dbN2NmKFp2PoMVQra8E0vN1Dwo5taX7ptZnI MxjASrV9qWtMKfji7CXbaYJtYa7TiXi7MRt47l9rwax3QaQYSMro6nYgQDJqeWN2 2iSs7v97Jscine1im1Tgc4uyv+viicKUTE4RzQ/jheOwStPYrOo8SEdt56kOqg3q BdfIlabUVF5q0r0o4WsoYKBF8lOtQljaKk9cenNIMo1dP3kGDUZ9J8vbu3XghE6d yfJdAQec5yEdYHWIT2gizdYVU5NLLP1vC5OozErZTi7JLvf/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDx6k7eoGFuQmcFXgal+c5blQ6rhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjk1OWQ2NjgtMzIyYi0z N2JkLTg1M2QtMmY5OGZmM2QwZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA/MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABlj2SQYibbHTxhiabsV2p+HPGPj1novDKCHKadHEZGuQXv64XuoRy8w okiS2DgrgGIlh4AH1Z+HP6Fq+D9KcR7jdk+CAfA+EZUjXiXxumuUy6iTTNNStUc9 oByasi+qhigvoAlnHvbT+xWqD6Y+ton7oc7JnWKxXWxxgwimtBEPv3rNL+r5MkDu pxqEwtqWaVBfUEOz70S7faP4zX/C7GXQo2dwE+2mzBgyhDFg9fa3KSDN+DeAZ5wu 9MZ0UQcS+BDGopnkHO/zdPfZI7C769SjnoLqR1X85CefDbsKMucq0ZUNo6ra4fJ7 cps518T2i+apGcu2arbAC8CVWLYl+j0= -----END CERTIFICATE-----Generated at Sat Apr 5 04:37:40 2025 by rpki-client