$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa File: f5973a8d-02af-33ab-b7da-fe5a50864af9.roa (raw, json) Hash identifier: bWTeLKVgiMlDywlP9eXd1RmmbFw0mgdPDs1EYO6aDGo= Subject key identifier: E7:F9:01:06:83:62:48:1D:8B:0F:42:23:DD:E8:7E:12:B4:75:51:73 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B35B73E1FB232E35AAE3DA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa Signing time: Wed 29 Jan 2025 02:00:39 +0000 ROA not before: Wed 29 Jan 2025 02:00:39 +0000 ROA not after: Tue 29 Apr 2025 01:00:39 +0000 asID: 209854 IP address blocks: 136.0.212.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Apr 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b3:5b:73:e1:fb:23:2e:35:aa:e3:da:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:39 2025 GMT Not After : Apr 29 01:00:39 2025 GMT Subject: CN=8d7bccbd-55da-4170-a138-779b9c2d2dea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:d5:72:be:60:fb:27:59:00:8f:f3:a3:86:38: 32:d5:a3:a3:02:1e:15:67:d2:58:88:4e:76:f1:c3: b9:98:67:54:3c:94:db:99:7c:0c:b0:b1:75:f3:21: 24:48:c1:56:eb:20:c1:4e:4c:3a:a7:21:d1:7f:73: 5d:90:02:b3:c6:d7:ed:af:9b:f4:25:67:4b:99:90: 0d:40:14:b5:2b:64:65:66:20:c8:6c:6c:58:83:9e: 9f:c1:d0:c3:1c:94:ac:4c:5f:7f:b1:61:b8:d9:a5: 2a:11:3a:8b:35:96:97:73:52:12:ea:87:9a:c8:70: 3c:f7:b6:11:4e:1a:e0:03:37:db:74:3d:2a:c0:cd: 39:1a:97:4e:80:0e:34:38:3e:75:55:f6:5d:c0:e4: 8d:57:9e:e1:b4:37:0f:db:e3:11:1b:06:51:10:d3: b5:83:e2:e4:38:17:e9:21:1a:d5:87:27:da:40:d5: ac:d0:78:a7:32:0b:70:95:48:f9:1a:88:d4:43:ba: 5f:bb:74:8e:db:48:68:cd:61:3d:37:8a:db:63:8b: 56:1b:11:81:d0:fc:f3:2e:4e:5d:d8:47:4c:3e:78: ab:ba:af:18:c5:77:1e:a8:41:ee:2f:52:ac:c8:fa: 41:a2:fe:16:f7:6a:d4:de:62:4c:0c:2e:bd:90:be: 15:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:F9:01:06:83:62:48:1D:8B:0F:42:23:DD:E8:7E:12:B4:75:51:73 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f5973a8d-02af-33ab-b7da-fe5a50864af9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.212.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:6e:6a:13:48:b7:cd:44:d5:d9:f5:95:71:03:1f:43:65:15: 63:05:14:4c:60:a4:11:df:e5:11:7b:d3:f8:89:73:3b:62:62: 1a:e7:a2:dd:6c:8d:24:87:a5:d1:8b:9c:d4:f7:18:5b:94:8d: e5:67:8d:68:75:fc:1a:a1:2f:4a:44:bc:51:40:d6:5a:30:57: d9:8e:b1:73:5f:d5:87:79:2d:8d:6b:9d:c1:82:b5:da:7e:dd: a0:9d:14:95:f6:30:dc:a4:c1:fd:3d:75:e5:87:62:3a:82:a5: 35:62:1a:ad:ea:51:81:1f:17:1e:78:05:03:d3:6a:2c:9c:9f: 79:3b:a7:5d:9f:c1:4a:7c:8e:53:2a:84:20:bb:c9:af:e3:bb: 3a:9e:5e:28:34:3d:52:b2:29:b5:b7:05:ca:b6:65:0f:da:e7: c1:14:39:bd:81:56:e7:4d:f0:c4:9b:4f:a5:3d:5c:3c:cb:f8: 73:2a:6f:b1:40:bd:cb:59:e3:0b:fa:98:13:2a:eb:42:ff:c2: 97:ea:3d:77:87:ac:6a:74:9a:0b:73:3c:e1:24:73:22:c7:a8: b9:b6:70:50:d5:bf:d2:b6:9f:c3:0b:6d:8b:b9:13:dc:ae:80: 7d:f3:a1:c7:2d:87:08:67:7a:25:e2:98:d9:fc:9a:a2:30:a2: dc:ba:9d:3c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEizW3Ph+yMuNarj2oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyOTAyMDAzOVoXDTI1MDQyOTAxMDAzOVowLzEtMCsGA1UEAxMk OGQ3YmNjYmQtNTVkYS00MTcwLWExMzgtNzc5YjljMmQyZGVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgNVyvmD7J1kAj/Ojhjgy1aOjAh4VZ9JYiE52 8cO5mGdUPJTbmXwMsLF18yEkSMFW6yDBTkw6pyHRf3NdkAKzxtftr5v0JWdLmZAN QBS1K2RlZiDIbGxYg56fwdDDHJSsTF9/sWG42aUqETqLNZaXc1IS6oeayHA897YR ThrgAzfbdD0qwM05GpdOgA40OD51VfZdwOSNV57htDcP2+MRGwZRENO1g+LkOBfp IRrVhyfaQNWs0HinMgtwlUj5GojUQ7pfu3SO20hozWE9N4rbY4tWGxGB0PzzLk5d 2EdMPniruq8YxXceqEHuL1KsyPpBov4W92rU3mJMDC69kL4VUwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOf5AQaDYkgdiw9CI93ofhK0dVFzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjU5NzNhOGQtMDJhZi0z M2FiLWI3ZGEtZmU1YTUwODY0YWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGBuahNIt81E1dn1lXEDH0NlFWMFFExgpBHf5RF70/iJcztiYhrnot1s jSSHpdGLnNT3GFuUjeVnjWh1/BqhL0pEvFFA1lowV9mOsXNf1Yd5LY1rncGCtdp+ 3aCdFJX2MNykwf09deWHYjqCpTViGq3qUYEfFx54BQPTaiycn3k7p12fwUp8jlMq hCC7ya/juzqeXig0PVKyKbW3Bcq2ZQ/a58EUOb2BVudN8MSbT6U9XDzL+HMqb7FA vctZ4wv6mBMq60L/wpfqPXeHrGp0mgtzPOEkcyLHqLm2cFDVv9K2n8MLbYu5E9yu gH3zoccthwhneiXimNn8mqIwoty6nTw= -----END CERTIFICATE-----Generated at Sun Apr 6 11:52:01 2025 by rpki-client