$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa File: f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa (raw, json) Hash identifier: DP1d/zCQyTOAeANUhfP9M9WX55+8carEcg79xTA+Hzg= Subject key identifier: D8:17:98:12:B6:5D:BA:70:19:21:39:77:CB:B0:75:34:ED:1E:D5:31 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B73AF004FC5F0D134B500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 136.0.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:73:af:00:4f:c5:f0:d1:34:b5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=16bbd59c-96e2-4cdb-aa86-c696f8f3fb25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:99:17:0f:38:fe:a0:8c:b8:02:78:48:a7:a5: 51:28:5d:47:c7:0a:85:8e:2b:bd:01:91:99:b7:18: c9:16:a4:da:50:59:e6:60:de:46:ef:1c:cc:27:fa: 27:fa:5f:d1:87:9e:94:4a:44:d2:f4:dc:98:6a:a1: fc:ce:e0:26:4e:b3:43:d3:a2:bd:55:51:48:29:9b: f4:b4:ea:6e:90:49:d3:fc:0b:d9:cd:1d:27:49:b5: 45:9d:b4:69:85:48:5a:f9:a6:c1:ff:63:fa:7b:84: 5c:57:5a:3e:ba:73:3c:d6:2e:03:27:15:17:8a:94: bb:6c:b9:51:7e:c3:62:cf:bc:54:95:9e:60:c2:b7: e0:50:1c:8f:46:9b:47:30:1d:15:8e:26:f9:c3:40: e2:29:85:2d:bf:b6:0c:3c:c8:6f:c2:7b:1c:d7:e6: c9:c9:5b:85:10:60:e8:20:dc:ff:42:4a:c4:ca:2b: e6:cf:77:ee:8d:74:a4:f3:f3:06:4c:fe:9f:89:71: 00:38:2a:88:ce:d7:d6:60:d4:3a:1b:10:25:1f:4b: fd:f6:2d:34:c4:79:9d:1d:1d:49:0d:ac:e0:2f:59: af:ba:9e:cc:ed:be:1c:f1:91:2b:bf:d6:25:07:dd: 7c:cf:c1:9b:df:94:17:1e:4a:ff:23:fc:70:18:b0: b5:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:17:98:12:B6:5D:BA:70:19:21:39:77:CB:B0:75:34:ED:1E:D5:31 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:12:68:b4:c8:bc:68:d0:b6:46:1f:11:4d:83:14:a4:20:53: 84:b4:5c:2b:a9:54:46:82:ba:86:03:55:29:bd:f6:1e:29:61: 63:0d:02:e3:a2:d3:aa:81:37:f6:30:7b:78:7a:c3:88:78:75: 22:c9:92:eb:e3:fa:af:ed:90:54:06:6c:13:1e:70:bb:1a:59: 79:05:70:7f:67:7c:ba:7a:36:94:92:24:b9:29:3b:5e:b4:e8: 84:af:e3:d2:a6:36:25:2c:74:9b:45:77:5d:71:0d:b5:be:fc: fe:cd:1a:e7:b1:c2:43:c8:1d:36:aa:79:68:9d:48:b7:e3:37: b3:2b:74:5d:28:d3:8b:ce:81:07:26:6f:7c:a0:96:00:ab:f3: 9f:07:00:3d:04:4d:4d:73:6d:7d:89:8a:b5:86:bd:11:be:01: be:37:c6:f2:d2:93:dc:82:9f:7a:44:9f:5e:00:13:41:68:f2: b9:b7:65:aa:8f:26:e9:b5:27:fa:06:ed:1a:ef:ce:86:5f:3b: 6a:f9:ab:24:47:6b:10:5c:ef:73:03:69:25:14:01:90:68:1d: 2c:bd:ea:d4:91:6c:96:14:ea:90:8f:2f:94:c0:d0:a4:b0:a6: e3:91:9b:0a:ec:40:fc:45:1d:ab:ba:76:44:1c:0a:ef:e1:a9: f4:02:6e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3OvAE/F8NE0tQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk MTZiYmQ1OWMtOTZlMi00Y2RiLWFhODYtYzY5NmY4ZjNmYjI1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJkXDzj+oIy4AnhIp6VRKF1HxwqFjiu9AZGZ txjJFqTaUFnmYN5G7xzMJ/on+l/Rh56USkTS9NyYaqH8zuAmTrND06K9VVFIKZv0 tOpukEnT/AvZzR0nSbVFnbRphUha+abB/2P6e4RcV1o+unM81i4DJxUXipS7bLlR fsNiz7xUlZ5gwrfgUByPRptHMB0Vjib5w0DiKYUtv7YMPMhvwnsc1+bJyVuFEGDo INz/QkrEyivmz3fujXSk8/MGTP6fiXEAOCqIztfWYNQ6GxAlH0v99i00xHmdHR1J DazgL1mvup7M7b4c8ZErv9YlB918z8Gb35QXHkr/I/xwGLC1XwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNgXmBK2XbpwGSE5d8uwdTTtHtUxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIxZjFlODUtNzM2My0z YzNhLWJiNzAtYjViYTEyNGNiOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKASaLTIvGjQtkYfEU2DFKQgU4S0XCupVEaCuoYDVSm99h4pYWMNAuOi 06qBN/Ywe3h6w4h4dSLJkuvj+q/tkFQGbBMecLsaWXkFcH9nfLp6NpSSJLkpO160 6ISv49KmNiUsdJtFd11xDbW+/P7NGuexwkPIHTaqeWidSLfjN7MrdF0o04vOgQcm b3yglgCr858HAD0ETU1zbX2JirWGvRG+Ab43xvLSk9yCn3pEn14AE0Fo8rm3ZaqP Jum1J/oG7RrvzoZfO2r5qyRHaxBc73MDaSUUAZBoHSy96tSRbJYU6pCPL5TA0KSw puORmwrsQPxFHau6dkQcCu/hqfQCbnE= -----END CERTIFICATE-----Generated at Sun Feb 16 15:48:15 2025 by rpki-client