$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6bb96ab-e35c-3199-84e4-c5be87025689.roa File: d6bb96ab-e35c-3199-84e4-c5be87025689.roa (raw, json) Hash identifier: 6edhjesrfNk5W/GBa/wFYLm9m/o4xobjp2DETOxhgSQ= Subject key identifier: B6:94:0E:3E:7F:AA:BC:71:8A:B1:76:91:0E:C9:58:DF:4A:49:61:CC Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B86E360F3F2A9FA728200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6bb96ab-e35c-3199-84e4-c5be87025689.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 149440 IP address blocks: 136.0.3.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:86:e3:60:f3:f2:a9:fa:72:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b51df84d-275b-43b4-8dd9-5dda4240fd6b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:2b:49:50:6b:9a:e0:e9:ae:5a:16:f6:cb:5a: e1:5a:3c:7b:06:1b:95:1c:48:c0:93:01:b5:e3:1d: e2:28:bf:33:60:9f:f8:66:a4:bc:9d:36:58:3d:0a: 37:b7:5d:e0:4a:7e:8a:96:8a:39:eb:6a:16:2b:3e: 2b:28:d6:81:8c:fa:f6:ab:0a:3e:fd:53:5b:81:92: 8c:29:3e:4c:d1:30:a8:8b:3c:b9:fc:da:bb:1c:ac: b0:53:c6:16:83:f0:aa:3f:ab:38:3a:a5:12:b1:b5: bf:21:2a:43:0f:69:e5:0d:b5:79:91:3c:80:a4:79: 04:86:1a:45:38:a0:1d:ea:da:22:ee:b9:75:8d:3a: 55:f3:30:2d:23:2f:92:6a:99:82:ff:a3:fc:46:a2: 12:cf:f9:bf:eb:a0:7e:d4:5a:ae:bf:ec:74:a8:5d: ca:8b:82:ad:b9:be:0a:9b:5b:f1:45:67:7b:99:cb: 5b:aa:f3:dd:8b:d6:44:5a:53:24:75:b8:f0:b0:24: f6:d4:5b:2e:63:d7:6f:5a:2d:68:92:ca:d8:56:25: 92:50:05:8a:e3:bb:44:78:85:14:2b:b2:e9:22:5a: cd:d5:a5:b8:90:ea:81:07:c3:7f:f3:af:4d:32:8f: 6e:7d:69:88:89:17:06:c3:bc:5d:5b:e0:3e:db:43: c0:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:94:0E:3E:7F:AA:BC:71:8A:B1:76:91:0E:C9:58:DF:4A:49:61:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6bb96ab-e35c-3199-84e4-c5be87025689.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.3.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:11:5f:77:78:81:d4:41:78:c7:56:3a:c4:9d:dd:4d:dc:49: fe:5e:9b:65:f3:86:04:02:d6:6d:6c:94:40:f8:cc:91:9e:3d: c6:47:31:69:de:7e:b9:68:59:ea:cc:5e:2c:67:a8:7e:76:bf: 6a:0b:1d:30:04:81:ab:27:26:e5:63:f3:55:d9:b7:14:39:98: f9:83:da:f4:04:d6:14:83:de:d2:47:b6:29:81:3d:83:d0:5a: a6:33:e9:dd:db:6c:68:ac:4e:2f:58:d8:42:a4:70:1c:ef:38: a8:4d:eb:93:72:72:23:1e:8b:fa:6f:b4:4d:38:96:72:10:b8: 16:7b:91:e1:af:b6:53:06:3b:ef:a0:fe:50:65:ba:e4:13:04: d9:9d:44:48:a1:0b:c3:4c:a6:ba:98:3e:75:7a:8f:75:24:47: 4a:dd:28:5c:8a:68:3c:bd:ff:d0:b1:03:63:16:49:32:b7:84: 73:72:d7:4d:6a:ef:9c:52:f2:05:13:8c:7c:7a:89:be:ae:69: 5d:d2:8c:58:fd:e6:b9:d8:4e:88:d9:41:e9:a7:5a:06:a3:d7: 9a:ea:8a:90:98:80:a9:47:4a:c8:c4:54:b4:2c:7d:d7:30:ce: fa:ca:6e:79:25:6e:a1:1b:d9:11:7f:58:a5:19:60:17:fa:83: 24:47:68:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4bjYPPyqfpyggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjUxZGY4NGQtMjc1Yi00M2I0LThkZDktNWRkYTQyNDBmZDZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkStJUGua4OmuWhb2y1rhWjx7BhuVHEjAkwG1 4x3iKL8zYJ/4ZqS8nTZYPQo3t13gSn6Kloo562oWKz4rKNaBjPr2qwo+/VNbgZKM KT5M0TCoizy5/Nq7HKywU8YWg/CqP6s4OqUSsbW/ISpDD2nlDbV5kTyApHkEhhpF OKAd6toi7rl1jTpV8zAtIy+SapmC/6P8RqISz/m/66B+1Fquv+x0qF3Ki4Ktub4K m1vxRWd7mctbqvPdi9ZEWlMkdbjwsCT21FsuY9dvWi1oksrYViWSUAWK47tEeIUU K7LpIlrN1aW4kOqBB8N/869NMo9ufWmIiRcGw7xdW+A+20PAJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLaUDj5/qrxxirF2kQ7JWN9KSWHMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDZiYjk2YWItZTM1Yy0z MTk5LTg0ZTQtYzViZTg3MDI1Njg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAADMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEoRX3d4gdRBeMdWOsSd3U3cSf5em2XzhgQC1m1slED4zJGePcZHMWne frloWerMXixnqH52v2oLHTAEgasnJuVj81XZtxQ5mPmD2vQE1hSD3tJHtimBPYPQ WqYz6d3bbGisTi9Y2EKkcBzvOKhN65NyciMei/pvtE04lnIQuBZ7keGvtlMGO++g /lBluuQTBNmdREihC8NMprqYPnV6j3UkR0rdKFyKaDy9/9CxA2MWSTK3hHNy101q 75xS8gUTjHx6ib6uaV3SjFj95rnYTojZQemnWgaj15rqipCYgKlHSsjEVLQsfdcw zvrKbnklbqEb2RF/WKUZYBf6gyRHaFE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:14:19 2025 by rpki-client