$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd024e5-c688-3243-8e99-eaeb9a04f1b0.roa File: edd024e5-c688-3243-8e99-eaeb9a04f1b0.roa (raw, json) Hash identifier: SHn1eKDcfFU+SyJ7r6+z1DC41w2V2RnYGtBn+u6b2Ys= Subject key identifier: EE:2B:3E:71:65:68:8D:3C:E5:5C:8E:87:0E:2F:EB:41:98:DE:4B:F1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848D0ABC243D5C4E622F8227A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd024e5-c688-3243-8e99-eaeb9a04f1b0.roa Signing time: Sat 08 Feb 2025 14:00:52 +0000 ROA not before: Sat 08 Feb 2025 14:00:52 +0000 ROA not after: Fri 09 May 2025 13:00:52 +0000 asID: 44477 IP address blocks: 136.0.185.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:d0:ab:c2:43:d5:c4:e6:22:f8:22:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Feb 8 14:00:52 2025 GMT Not After : May 9 13:00:52 2025 GMT Subject: CN=ea0f7373-e7e4-4f23-958e-544e119aaef8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:88:59:ff:2b:c1:ec:55:a3:1a:6b:1a:5a:12: 52:71:41:4d:dd:ae:74:88:0a:c8:3e:ae:07:55:05: 70:27:c6:32:fd:eb:d1:f9:26:7b:14:d8:21:d8:51: 09:38:f3:4c:90:ca:38:72:fd:cd:1b:f1:fe:f8:14: 7f:d0:e8:67:3e:b4:ee:de:3b:0d:1c:c1:5d:54:c8: 70:35:fe:77:9d:48:38:6d:40:e4:bc:f6:89:36:91: 5a:91:36:f6:8d:b8:b6:87:21:de:21:b0:6d:69:6a: 68:25:99:e2:e4:36:12:c1:c5:1a:e6:fb:95:ff:79: 5c:88:64:a4:81:a5:6f:f4:5d:84:56:47:d1:5a:1e: b8:95:30:d6:fa:4d:07:0b:c8:d6:85:a0:fe:9e:12: 94:9f:f6:c4:39:13:85:62:53:a7:b4:4f:60:66:56: d0:68:73:5d:3c:97:ec:6e:ae:ea:23:0a:4a:b1:e7: 3f:66:c9:2c:0f:6b:6c:a1:b4:07:5f:c8:2d:f0:94: 87:9a:51:25:ee:2b:8d:b1:da:04:6a:35:6d:66:92: b9:3f:48:31:c3:f2:a8:78:2d:db:a5:25:b7:05:eb: 76:4e:11:21:df:6f:91:17:44:9a:2d:64:75:2a:91: e7:a3:fd:ac:7a:fc:4f:48:ad:20:2f:b0:a7:a1:22: 7c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:2B:3E:71:65:68:8D:3C:E5:5C:8E:87:0E:2F:EB:41:98:DE:4B:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/edd024e5-c688-3243-8e99-eaeb9a04f1b0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.185.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 56:ae:ac:8a:75:d7:a5:74:4d:7f:e8:f7:02:0c:2d:5e:d0:76: e2:34:8f:da:db:b2:6c:e8:6f:5e:fa:9c:23:2a:71:14:9d:b5: 69:d4:60:e8:d9:00:88:65:16:b7:56:7f:15:31:12:1b:dd:c1: e6:5a:02:95:42:bb:c0:e1:9a:63:79:0b:79:14:2c:24:e8:2e: 96:b1:de:49:ca:d0:be:25:52:8e:e0:e5:63:0d:d7:a5:46:42: 34:f4:73:37:5d:7d:a7:ee:bd:76:88:e9:37:81:6e:2d:d8:e7: 6e:e5:72:47:32:78:61:20:4f:9d:ce:e3:e9:ce:9c:02:2c:e5: e7:4b:e0:06:ff:fc:ab:03:1a:02:4b:52:59:ef:ba:7a:ce:00: 62:45:b5:58:bc:9d:30:08:d4:86:3a:84:07:43:6c:38:01:d2: b2:9f:c9:cc:ff:03:4a:b0:dd:9e:6c:be:a9:bb:4e:66:77:d5: aa:b3:01:e2:d3:dd:37:a1:58:cb:cb:dc:6c:bf:6e:7d:af:a1: 9d:f6:97:22:15:e6:7d:68:ca:51:46:5e:fa:fc:66:ff:a2:56: 14:62:cc:ec:37:1d:84:2f:f8:80:27:f1:e5:7c:d7:12:09:91: 80:fd:4b:21:ce:57:bf:02:c9:e3:ff:35:c6:9e:3c:bf:d2:e5: b5:c9:c6:91 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq8JD1cTmIvgiegAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk ZWEwZjczNzMtZTdlNC00ZjIzLTk1OGUtNTQ0ZTExOWFhZWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtYhZ/yvB7FWjGmsaWhJScUFN3a50iArIPq4H VQVwJ8Yy/evR+SZ7FNgh2FEJOPNMkMo4cv3NG/H++BR/0OhnPrTu3jsNHMFdVMhw Nf53nUg4bUDkvPaJNpFakTb2jbi2hyHeIbBtaWpoJZni5DYSwcUa5vuV/3lciGSk gaVv9F2EVkfRWh64lTDW+k0HC8jWhaD+nhKUn/bEOROFYlOntE9gZlbQaHNdPJfs bq7qIwpKsec/ZsksD2tsobQHX8gt8JSHmlEl7iuNsdoEajVtZpK5P0gxw/KoeC3b pSW3Bet2ThEh32+RF0SaLWR1KpHno/2sevxPSK0gL7CnoSJ8ywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO4rPnFlaI085VyOhw4v60GY3kvxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWRkMDI0ZTUtYzY4OC0z MjQzLThlOTktZWFlYjlhMDRmMWIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAC5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFaurIp116V0TX/o9wIMLV7QduI0j9rbsmzob176nCMqcRSdtWnUYOjZ AIhlFrdWfxUxEhvdweZaApVCu8DhmmN5C3kULCToLpax3knK0L4lUo7g5WMN16VG QjT0czddfafuvXaI6TeBbi3Y527lckcyeGEgT53O4+nOnAIs5edL4Ab//KsDGgJL UlnvunrOAGJFtVi8nTAI1IY6hAdDbDgB0rKfycz/A0qw3Z5svqm7TmZ31aqzAeLT 3TehWMvL3Gy/bn2voZ32lyIV5n1oylFGXvr8Zv+iVhRizOw3HYQv+IAn8eV81xIJ kYD9SyHOV78CyeP/NcaePL/S5bXJxpE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:53:41 2025 by rpki-client