$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8bfe3e6-a7c3-3e85-a96f-283ca01eb5ff.roa File: f8bfe3e6-a7c3-3e85-a96f-283ca01eb5ff.roa (raw, json) Hash identifier: hpQNaRsu2mEatXKgX5V4+a1S6E6cLH6cxF1iEb2N/B8= Subject key identifier: B1:1A:4B:08:1A:D5:DB:0F:63:59:09:A0:8C:28:91:B7:3E:8B:01:78 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285848B78B87B6D405796175B6E500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8bfe3e6-a7c3-3e85-a96f-283ca01eb5ff.roa Signing time: Thu 30 Jan 2025 14:00:51 +0000 ROA not before: Thu 30 Jan 2025 14:00:51 +0000 ROA not after: Wed 30 Apr 2025 13:00:51 +0000 asID: 397373 IP address blocks: 136.0.60.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b7:8b:87:b6:d4:05:79:61:75:b6:e5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 30 14:00:51 2025 GMT Not After : Apr 30 13:00:51 2025 GMT Subject: CN=b3c728bf-782f-4006-a323-a97fad3f0254 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:ea:e8:52:a6:ae:5e:25:9e:28:56:3c:f3:0a: 82:c1:81:cd:41:6c:5c:f7:60:19:38:28:60:67:be: 7a:00:fe:ef:fb:99:5d:9d:04:67:8e:2b:b3:03:a5: 26:0a:ee:43:5b:cc:13:b6:8e:8b:9d:be:d3:5b:02: 94:26:a4:9c:44:a5:97:9d:0f:91:7f:ac:19:3e:22: 47:6b:d7:7a:43:3b:6f:42:05:c0:58:4c:1d:99:56: 04:c2:cc:1a:f8:f8:d4:44:af:f8:02:71:47:64:06: e1:0c:c5:99:88:60:41:4d:a2:a0:70:1e:a0:9b:00: e7:5d:17:27:5d:f4:47:0a:17:19:10:f3:ea:43:84: 79:6c:40:c0:ea:b0:2b:77:ab:c3:43:82:cb:f7:09: 8d:30:01:50:c1:bf:cf:2b:13:c2:8c:86:de:fd:8a: 47:75:be:a5:a7:9b:c9:e8:bd:d3:33:39:31:16:d0: f9:80:47:51:4a:56:5a:72:e5:b7:4a:6b:09:a6:37: 68:b8:38:30:29:8a:34:b8:26:0e:bc:db:e5:65:7f: c8:b0:b9:7e:2e:b6:1c:cb:ba:b6:a6:84:f3:ec:61: 05:96:44:58:2d:41:c9:b3:0c:b1:50:1c:80:e5:49: d5:51:e2:b1:ba:06:6b:1b:da:2b:c9:59:b8:40:0a: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:1A:4B:08:1A:D5:DB:0F:63:59:09:A0:8C:28:91:B7:3E:8B:01:78 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f8bfe3e6-a7c3-3e85-a96f-283ca01eb5ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.60.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:cf:77:23:70:02:7d:9e:80:1a:cb:86:cd:da:79:55:74:cd: 6c:a8:3a:f2:57:70:58:83:50:de:08:65:23:ca:7f:76:55:2d: ae:c0:4c:7a:15:64:25:01:74:b2:2b:64:8b:7b:9a:d4:de:66: 62:db:2f:20:d6:6a:2c:f5:08:ba:df:dc:6c:d9:0f:a5:39:74: e9:fe:a3:7d:76:f0:74:18:70:b1:5a:6a:cc:25:ae:d9:48:cc: 48:be:ec:f3:9f:ad:40:c7:40:40:55:f4:e6:24:1e:44:5e:7d: aa:da:a4:6e:08:1c:b4:0f:74:09:e7:7e:ba:a6:d0:b5:a7:c2: af:c9:2b:99:1d:73:08:72:b3:bf:12:6b:4e:cf:8b:cd:9a:37: 1c:14:1a:73:7c:39:23:f9:19:df:f4:d4:94:ce:b7:d4:8d:36: 88:93:4c:bb:18:3e:86:40:a6:99:71:77:3a:13:ed:c6:30:37: 4c:92:69:37:f6:7f:36:4c:85:a8:6c:66:0a:d2:6b:58:b7:13: 3d:4c:dd:db:be:cb:14:6f:9e:46:11:6c:5c:ec:fd:f0:11:a6: 9a:85:90:a7:dd:8d:d3:50:ad:04:40:ce:b9:d9:7a:f5:3b:75: 67:8a:bf:b9:90:cf:f6:44:7d:a7:ac:1a:51:41:11:f2:65:5a: c6:dc:0b:c5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi3i4e21AV5YXW25QAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEzMDE0MDA1MVoXDTI1MDQzMDEzMDA1MVowLzEtMCsGA1UEAxMk YjNjNzI4YmYtNzgyZi00MDA2LWEzMjMtYTk3ZmFkM2YwMjU0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiOroUqauXiWeKFY88wqCwYHNQWxc92AZOChg Z756AP7v+5ldnQRnjiuzA6UmCu5DW8wTto6Lnb7TWwKUJqScRKWXnQ+Rf6wZPiJH a9d6QztvQgXAWEwdmVYEwswa+PjURK/4AnFHZAbhDMWZiGBBTaKgcB6gmwDnXRcn XfRHChcZEPPqQ4R5bEDA6rArd6vDQ4LL9wmNMAFQwb/PKxPCjIbe/YpHdb6lp5vJ 6L3TMzkxFtD5gEdRSlZacuW3SmsJpjdouDgwKYo0uCYOvNvlZX/IsLl+LrYcy7q2 poTz7GEFlkRYLUHJswyxUByA5UnVUeKxugZrG9oryVm4QAqKfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLEaSwga1dsPY1kJoIwokbc+iwF4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjhiZmUzZTYtYTdjMy0z ZTg1LWE5NmYtMjgzY2EwMWViNWZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnPdyNwAn2egBrLhs3aeVV0zWyoOvJXcFiDUN4IZSPKf3ZVLa7ATHoV ZCUBdLIrZIt7mtTeZmLbLyDWaiz1CLrf3GzZD6U5dOn+o3128HQYcLFaaswlrtlI zEi+7POfrUDHQEBV9OYkHkRefarapG4IHLQPdAnnfrqm0LWnwq/JK5kdcwhys78S a07Pi82aNxwUGnN8OSP5Gd/01JTOt9SNNoiTTLsYPoZApplxdzoT7cYwN0ySaTf2 fzZMhahsZgrSa1i3Ez1M3du+yxRvnkYRbFzs/fARppqFkKfdjdNQrQRAzrnZevU7 dWeKv7mQz/ZEfaesGlFBEfJlWsbcC8U= -----END CERTIFICATE-----Generated at Fri Mar 14 11:07:06 2025 by rpki-client