$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae284de-944f-3ec3-b2b5-1640576ed4cc.roa File: cae284de-944f-3ec3-b2b5-1640576ed4cc.roa (raw, json) Hash identifier: 4Ip3f/AuckolJbMaY6X8a80tUYb2lIs8L+NRRwxe9iw= Subject key identifier: 9C:C9:2C:35:C1:F9:3C:98:62:4E:9C:90:FF:09:3E:91:37:99:2C:A6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABC25273294DAC4CC09F40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae284de-944f-3ec3-b2b5-1640576ed4cc.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44477 IP address blocks: 136.0.190.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c2:52:73:29:4d:ac:4c:c0:9f:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=c4c9a91e-f3b6-449f-8775-c2f5b2586e8f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:86:ee:f2:09:6b:bf:e2:0d:c0:33:20:98:3e:91: 53:30:94:8d:5e:bc:8c:14:97:f4:bc:c7:0f:28:ad: 78:31:1c:23:6f:8f:a2:d9:27:ad:00:c4:36:70:47: b7:27:b7:b8:3b:fe:f2:77:c9:ec:b9:f9:8a:3c:4b: d0:b4:8a:f1:b9:e0:41:6d:11:ae:ae:c1:de:7f:90: 28:32:b3:0b:c9:78:b2:97:c6:ff:05:78:ab:f0:6a: 94:6a:74:8b:39:40:3c:7a:cd:8c:31:fe:cc:cc:cf: 37:8d:94:8b:ed:d2:ab:06:73:86:15:a9:31:31:21: 22:28:49:83:24:fb:ec:e5:95:75:7f:61:e1:bc:fa: ed:2b:a5:18:49:d8:1c:20:de:fa:8a:6b:3d:11:93: 96:82:b5:66:66:6b:4f:fa:54:5f:0a:45:a1:de:8e: 8d:26:21:51:03:49:e2:07:48:64:35:a9:13:60:b0: 85:78:6a:41:bd:1a:4c:3a:0c:70:91:a0:c6:71:ae: 25:e9:85:d2:5d:ca:d3:94:01:55:5d:74:fb:1c:3b: 77:51:b5:60:27:8d:71:3b:b6:fb:53:0f:56:40:4d: 9e:b5:77:19:63:8e:81:14:94:69:e4:5d:88:90:b2: 07:6d:67:68:b6:4d:91:8c:c0:4e:68:f3:40:23:f7: 64:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C9:2C:35:C1:F9:3C:98:62:4E:9C:90:FF:09:3E:91:37:99:2C:A6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cae284de-944f-3ec3-b2b5-1640576ed4cc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.190.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:37:ca:66:fa:a3:ce:5b:d8:fd:92:d0:b3:07:b2:00:d0:35: 0b:96:0a:c5:46:35:5c:77:aa:9c:45:9b:1f:76:2b:65:94:74: 33:05:66:52:dd:ab:8a:8a:da:31:77:d8:5c:c8:22:ee:7c:42: 60:86:9a:97:81:93:14:29:2b:06:f0:6b:28:a7:b8:aa:20:31: d8:43:07:44:95:e7:dd:c4:ee:5d:a1:24:ef:16:35:fa:4d:8c: 2b:45:32:86:09:21:ef:90:a0:35:3a:59:87:45:c5:43:77:da: 1a:59:0e:62:c2:fa:21:c0:49:41:d3:5c:df:2d:7d:07:9d:26: 6d:cb:c7:97:24:3c:1b:3b:22:66:9b:99:27:13:a9:42:a3:ff: 83:56:c6:92:fb:34:73:18:37:80:a1:56:4f:72:02:d2:a6:7e: 36:e8:5f:70:54:1b:ae:4d:63:af:28:18:0b:f3:10:07:8c:45: 23:ab:f0:bb:32:52:8e:37:0a:b9:00:c9:ff:fc:bd:d7:b1:9f: b6:0c:e7:6b:3b:cf:c2:dd:dc:06:04:9f:68:24:f0:88:36:37: b0:44:35:32:e7:ef:30:f2:52:ee:30:51:a4:eb:88:50:b9:9d: 92:9b:65:f1:8d:04:9f:ea:4e:f8:7f:96:65:c0:73:a4:f3:aa: 7d:ae:f6:f4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8JScylNrEzAn0AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk YzRjOWE5MWUtZjNiNi00NDlmLTg3NzUtYzJmNWIyNTg2ZThmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu7yCWu/4g3AMyCYPpFTMJSNXryMFJf0vMcP KK14MRwjb4+i2SetAMQ2cEe3J7e4O/7yd8nsufmKPEvQtIrxueBBbRGursHef5Ao MrMLyXiyl8b/BXir8GqUanSLOUA8es2MMf7MzM83jZSL7dKrBnOGFakxMSEiKEmD JPvs5ZV1f2HhvPrtK6UYSdgcIN76ims9EZOWgrVmZmtP+lRfCkWh3o6NJiFRA0ni B0hkNakTYLCFeGpBvRpMOgxwkaDGca4l6YXSXcrTlAFVXXT7HDt3UbVgJ41xO7b7 Uw9WQE2etXcZY46BFJRp5F2IkLIHbWdotk2RjMBOaPNAI/dk/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJzJLDXB+TyYYk6ckP8JPpE3mSymMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2FlMjg0ZGUtOTQ0Zi0z ZWMzLWIyYjUtMTY0MDU3NmVkNGNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAC+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAo3ymb6o85b2P2S0LMHsgDQNQuWCsVGNVx3qpxFmx92K2WUdDMFZlLd q4qK2jF32FzIIu58QmCGmpeBkxQpKwbwayinuKogMdhDB0SV593E7l2hJO8WNfpN jCtFMoYJIe+QoDU6WYdFxUN32hpZDmLC+iHASUHTXN8tfQedJm3Lx5ckPBs7Imab mScTqUKj/4NWxpL7NHMYN4ChVk9yAtKmfjboX3BUG65NY68oGAvzEAeMRSOr8Lsy Uo43CrkAyf/8vdexn7YM52s7z8Ld3AYEn2gk8Ig2N7BENTLn7zDyUu4wUaTriFC5 nZKbZfGNBJ/qTvh/lmXAc6Tzqn2u9vQ= -----END CERTIFICATE-----Generated at Sun Feb 16 15:06:17 2025 by rpki-client