$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e90e9583-1c22-3a7a-afc1-05eb0818dcf2.roa File: e90e9583-1c22-3a7a-afc1-05eb0818dcf2.roa (raw, json) Hash identifier: +SJIrqDsOn8lYrZvS91rfQQinczJnqjBLwdDpNZIwso= Subject key identifier: 17:B2:40:E1:0C:5C:8E:D7:EF:B4:1D:A9:8F:99:93:D7:D8:52:66:D4 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584911A0093E03F8BBA9B6F416E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e90e9583-1c22-3a7a-afc1-05eb0818dcf2.roa Signing time: Mon 03 Mar 2025 20:25:01 +0000 ROA not before: Mon 03 Mar 2025 20:25:01 +0000 ROA not after: Sun 01 Jun 2025 19:25:01 +0000 asID: 401152 IP address blocks: 136.0.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Apr 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:11:a0:09:3e:03:f8:bb:a9:b6:f4:16:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 3 20:25:01 2025 GMT Not After : Jun 1 19:25:01 2025 GMT Subject: CN=2a2d5660-90ae-4f77-8d7b-9a8d5bd2f7d2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:c3:87:f6:8a:79:e4:23:e7:a4:15:89:90:67: 6b:1a:44:c3:4f:d7:f0:23:e4:48:7a:e0:56:05:ea: 50:48:dd:66:9a:f6:9c:f8:3b:21:e9:fd:f0:f5:7c: 87:1d:52:eb:44:f1:48:29:20:aa:97:93:6f:8d:36: 4b:95:d0:37:0b:a2:78:5e:d2:7a:94:75:8a:77:21: c1:b9:bc:b4:5a:90:e9:1e:5a:33:f9:29:60:59:e3: 9f:f5:7e:ee:13:6f:fb:0c:db:61:cd:88:21:75:92: bf:1a:85:ce:47:3d:7d:ca:91:41:ed:49:df:28:56: d4:1e:c1:b4:6b:00:9c:e1:5f:e1:cf:8e:50:69:0f: d8:88:fe:bc:d4:9a:3b:f0:d4:53:be:c0:39:65:e1: b7:d5:66:9f:8a:98:fc:15:d3:cb:1b:53:95:10:2e: e6:2c:72:2c:ae:0c:b4:78:9c:f7:0f:7b:80:58:51: 4b:83:52:6e:6f:32:7d:16:06:5f:79:09:3a:77:60: d6:67:c4:08:aa:0b:d1:a5:92:a6:b0:74:40:61:96: f0:45:a0:ce:1f:d7:6c:20:c7:95:53:6b:82:a6:99: 78:af:bb:83:66:9d:ae:db:57:e7:e3:cf:9f:67:1b: e5:ac:6e:21:f3:4b:67:c0:40:16:e9:2f:05:c2:f0: d7:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:B2:40:E1:0C:5C:8E:D7:EF:B4:1D:A9:8F:99:93:D7:D8:52:66:D4 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/e90e9583-1c22-3a7a-afc1-05eb0818dcf2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a3:1f:79:c0:4d:99:92:74:8d:c6:5a:2c:68:b9:75:98:13:9d: c6:ad:1f:35:e2:46:47:55:a8:87:85:d5:af:8a:58:1b:70:40: 84:d7:b2:82:55:46:6b:62:2a:91:31:7b:0c:b3:70:92:cc:f8: 74:c3:48:ca:14:e3:7f:f4:57:83:62:8d:70:10:f2:9b:fc:f5: bc:88:66:b4:2f:81:c8:c3:2f:b9:12:8f:9a:9a:41:48:45:6c: d6:99:b9:3d:0c:bb:af:72:4c:f2:db:fb:e1:1e:d9:d6:10:3d: 3b:2d:5d:1a:0c:13:86:0c:67:11:89:91:da:24:a9:33:56:49: 3e:ca:30:1d:70:d2:07:bd:8c:6d:a7:50:a3:e0:14:81:72:1a: 28:5c:67:5f:7f:e5:7c:7f:e2:23:71:32:a8:3d:26:77:91:c7: 5f:4a:ce:52:f2:03:9c:4d:33:64:08:0e:b6:f8:74:56:bb:0b: 1e:b5:4a:9a:c3:ce:eb:c1:65:60:80:da:44:c0:1b:96:02:bc: 3f:35:a7:24:fb:f4:d9:c2:be:75:3f:69:14:47:29:de:a9:ab: 88:51:3f:e3:7b:a9:f0:b5:23:4f:85:71:70:d8:e9:37:97:3a: 47:a3:e2:eb:65:28:6e:a0:7e:6e:2c:65:03:d8:d5:1f:f3:ef: 6b:f6:0a:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkRoAk+A/i7qbb0FuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMwMzIwMjUwMVoXDTI1MDYwMTE5MjUwMVowLzEtMCsGA1UEAxMk MmEyZDU2NjAtOTBhZS00Zjc3LThkN2ItOWE4ZDViZDJmN2QyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsOH9op55CPnpBWJkGdrGkTDT9fwI+RIeuBW BepQSN1mmvac+Dsh6f3w9XyHHVLrRPFIKSCql5NvjTZLldA3C6J4XtJ6lHWKdyHB uby0WpDpHloz+SlgWeOf9X7uE2/7DNthzYghdZK/GoXORz19ypFB7UnfKFbUHsG0 awCc4V/hz45QaQ/YiP681Jo78NRTvsA5ZeG31Wafipj8FdPLG1OVEC7mLHIsrgy0 eJz3D3uAWFFLg1JubzJ9FgZfeQk6d2DWZ8QIqgvRpZKmsHRAYZbwRaDOH9dsIMeV U2uCppl4r7uDZp2u21fn48+fZxvlrG4h80tnwEAW6S8FwvDX6wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBeyQOEMXI7X77QdqY+Zk9fYUmbUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZTkwZTk1ODMtMWMyMi0z YTdhLWFmYzEtMDVlYjA4MThkY2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKMfecBNmZJ0jcZaLGi5dZgTncatHzXiRkdVqIeF1a+KWBtwQITXsoJV RmtiKpExewyzcJLM+HTDSMoU43/0V4NijXAQ8pv89byIZrQvgcjDL7kSj5qaQUhF bNaZuT0Mu69yTPLb++Ee2dYQPTstXRoME4YMZxGJkdokqTNWST7KMB1w0ge9jG2n UKPgFIFyGihcZ19/5Xx/4iNxMqg9JneRx19KzlLyA5xNM2QIDrb4dFa7Cx61SprD zuvBZWCA2kTAG5YCvD81pyT79NnCvnU/aRRHKd6pq4hRP+N7qfC1I0+FcXDY6TeX Okej4utlKG6gfm4sZQPY1R/z72v2Cm8= -----END CERTIFICATE-----Generated at Sat Apr 5 04:40:50 2025 by rpki-client