$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce0448ec-5ce8-3e8e-bd34-8c9b48f0c5bd.roa File: ce0448ec-5ce8-3e8e-bd34-8c9b48f0c5bd.roa (raw, json) Hash identifier: HuOLxl4lqU1e6G/vOeBp6iMoVKaMHpmEEMeLgglEV9I= Subject key identifier: 3E:29:09:7D:AB:56:86:BF:76:C9:65:78:65:E4:80:40:26:B7:98:95 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848705AFAE009C4988EC7F8F200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce0448ec-5ce8-3e8e-bd34-8c9b48f0c5bd.roa Signing time: Sun 05 Jan 2025 02:00:39 +0000 ROA not before: Sun 05 Jan 2025 02:00:39 +0000 ROA not after: Sat 05 Apr 2025 01:00:39 +0000 asID: 8881 IP address blocks: 136.0.29.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:70:5a:fa:e0:09:c4:98:8e:c7:f8:f2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 5 02:00:39 2025 GMT Not After : Apr 5 01:00:39 2025 GMT Subject: CN=b2b77583-33be-48c6-a674-879c36b27048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:a7:c0:20:49:67:09:89:b8:dc:5b:92:ec:de: 38:f6:9e:b8:22:cd:c1:2e:c9:9f:53:a7:c2:30:37: e5:23:53:bd:74:f1:5e:21:c2:1b:b4:88:b5:a7:97: 1f:a3:81:48:0a:ae:09:95:4f:e8:e1:65:09:3b:8d: 21:a4:e3:39:06:9c:ef:c4:31:de:12:b9:e2:07:f5: 11:5e:cd:93:ab:cb:1d:74:37:79:95:e2:31:d5:17: 93:02:89:4b:4e:00:b5:78:ba:a1:47:88:1b:ae:db: 18:de:f3:00:43:3e:17:b0:b2:3b:e7:37:fb:18:62: 80:66:68:73:0f:ea:3d:53:e5:52:be:d2:ba:80:33: 38:41:93:99:d1:b7:fb:f1:e4:7c:48:57:e7:9c:51: da:05:c4:40:86:5d:ef:39:d8:f4:92:3f:b5:b4:24: 69:4c:0c:52:1e:f9:45:ce:dd:b7:e5:ad:11:d4:2f: a5:cd:8f:db:62:07:ac:bf:00:43:e5:05:5e:98:20: 89:24:a6:de:4c:20:70:3e:d6:00:84:7a:f9:6c:93: 69:0a:28:67:b5:d1:55:f8:48:f0:f0:68:95:04:83: 25:6a:24:49:fa:c1:c6:16:d8:b5:df:62:fa:17:17: 8f:d9:00:a4:d3:56:39:9a:dc:59:1c:07:fe:26:7d: 2b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:29:09:7D:AB:56:86:BF:76:C9:65:78:65:E4:80:40:26:B7:98:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce0448ec-5ce8-3e8e-bd34-8c9b48f0c5bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.29.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:67:3e:15:ee:04:62:85:77:a4:97:66:91:9e:cb:e4:1d:71: 28:84:c1:aa:8c:72:fa:37:8c:c9:53:32:74:4d:fc:9b:01:30: cb:31:82:1a:e5:52:41:56:66:f0:cb:49:46:af:51:98:a8:dd: 1c:53:5e:03:33:9f:ec:da:f2:c8:a6:74:48:31:0e:06:70:19: 19:cb:91:13:f8:11:ca:17:c6:03:9a:64:e3:e8:3b:5d:8a:25: 26:76:d2:2c:9b:40:fb:73:f1:7b:6f:07:f6:4b:5b:7c:f3:37: c3:6a:56:9a:bc:ab:af:39:dc:88:e9:d9:36:f1:9f:96:09:8f: d7:b2:ce:23:5a:1f:63:7f:f1:56:bc:db:85:79:92:4c:79:59: ee:c4:b8:be:35:c9:77:68:d7:c9:36:4e:53:10:78:b9:e4:91: 6a:79:c0:f4:b5:4d:42:1e:80:11:22:93:a4:ba:57:1e:32:5d: fb:f3:63:14:c4:24:fb:13:d4:dc:79:0b:13:1f:a1:d7:d6:44: e3:99:12:86:df:37:54:be:25:36:3a:67:58:83:32:d5:f5:bd: d5:81:db:d5:6c:1d:91:9f:85:7f:fe:1f:fa:15:a0:f6:cd:e8: 5f:c5:b3:65:bd:aa:e2:dd:3d:88:5d:6d:08:ac:df:6d:b1:fd: d6:44:13:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhwWvrgCcSYjsf48gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEwNTAyMDAzOVoXDTI1MDQwNTAxMDAzOVowLzEtMCsGA1UEAxMk YjJiNzc1ODMtMzNiZS00OGM2LWE2NzQtODc5YzM2YjI3MDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg6fAIElnCYm43FuS7N449p64Is3BLsmfU6fC MDflI1O9dPFeIcIbtIi1p5cfo4FICq4JlU/o4WUJO40hpOM5BpzvxDHeErniB/UR Xs2Tq8sddDd5leIx1ReTAolLTgC1eLqhR4gbrtsY3vMAQz4XsLI75zf7GGKAZmhz D+o9U+VSvtK6gDM4QZOZ0bf78eR8SFfnnFHaBcRAhl3vOdj0kj+1tCRpTAxSHvlF zt235a0R1C+lzY/bYgesvwBD5QVemCCJJKbeTCBwPtYAhHr5bJNpCihntdFV+Ejw 8GiVBIMlaiRJ+sHGFti132L6FxeP2QCk01Y5mtxZHAf+Jn0rLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4pCX2rVoa/dslleGXkgEAmt5iVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2UwNDQ4ZWMtNWNlOC0z ZThlLWJkMzQtOGM5YjQ4ZjBjNWJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH9nPhXuBGKFd6SXZpGey+QdcSiEwaqMcvo3jMlTMnRN/JsBMMsxghrl UkFWZvDLSUavUZio3RxTXgMzn+za8simdEgxDgZwGRnLkRP4EcoXxgOaZOPoO12K JSZ20iybQPtz8XtvB/ZLW3zzN8NqVpq8q6853Ijp2Tbxn5YJj9eyziNaH2N/8Va8 24V5kkx5We7EuL41yXdo18k2TlMQeLnkkWp5wPS1TUIegBEik6S6Vx4yXfvzYxTE JPsT1Nx5CxMfodfWROOZEobfN1S+JTY6Z1iDMtX1vdWB29VsHZGfhX/+H/oVoPbN 6F/Fs2W9quLdPYhdbQis322x/dZEE30= -----END CERTIFICATE-----Generated at Sun Feb 16 15:51:36 2025 by rpki-client