$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f960dae0-a03d-3b31-a109-52c0216f4f6e.roa File: f960dae0-a03d-3b31-a109-52c0216f4f6e.roa (raw, json) Hash identifier: HvpIX7T5AV1zpfU3e0d/XVMkQyDHunA/eP1xIpIn5nw= Subject key identifier: 42:AC:00:B2:1D:39:5B:F4:3E:F1:B3:CE:76:31:75:5D:1B:8E:DE:62 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858489FD0A0B00CE269C42916EA00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f960dae0-a03d-3b31-a109-52c0216f4f6e.roa Signing time: Wed 22 Jan 2025 02:00:39 +0000 ROA not before: Wed 22 Jan 2025 02:00:39 +0000 ROA not after: Tue 22 Apr 2025 01:00:39 +0000 asID: 7018 IP address blocks: 136.0.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 15 Mar 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:9f:d0:a0:b0:0c:e2:69:c4:29:16:ea:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 22 02:00:39 2025 GMT Not After : Apr 22 01:00:39 2025 GMT Subject: CN=8777ca44-ad9d-4630-95a0-019a5cdc415a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:92:ae:5e:e7:e5:89:d6:ed:15:9e:2c:2c:fc: d3:6f:1f:22:c0:d2:0a:f7:cb:68:18:cf:70:6d:47: 5b:b6:b1:7d:5f:d7:26:1a:ff:a4:ba:a2:fb:99:b8: 42:4b:c5:94:f0:51:ab:94:65:77:14:82:26:07:e1: 22:e2:6d:e7:24:8d:0b:12:b7:e3:20:2d:8f:ce:82: 9e:08:d6:de:b8:7c:f8:bb:d8:92:68:4c:fa:03:96: 75:f3:9a:ab:00:f2:a7:9e:ff:c6:9f:17:11:cf:96: 39:7d:52:8f:a7:39:6e:71:12:f8:63:78:3f:a8:e6: 82:c7:27:28:d6:2e:1b:ae:77:96:96:25:5d:56:a5: 32:6d:b3:b3:ef:dc:29:67:38:c9:d6:33:93:0d:6a: 69:51:b2:5c:9d:0b:37:31:50:5f:1e:07:35:00:08: 16:56:9c:68:36:0c:a1:d1:bc:b0:6c:cb:92:3d:9f: 50:f1:44:63:df:76:6d:d4:b1:54:87:f0:68:19:72: 55:7c:a8:77:f1:4d:f8:ae:25:6c:7a:aa:6c:7a:1d: 7a:1b:4e:05:db:06:bc:ea:2c:f2:e4:72:12:7f:fb: 2f:2d:52:98:5d:1d:07:ed:ed:8c:ce:cd:34:69:18: c5:cc:cc:47:e6:25:2b:0c:88:b2:f1:ea:8e:6e:8c: f1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:AC:00:B2:1D:39:5B:F4:3E:F1:B3:CE:76:31:75:5D:1B:8E:DE:62 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f960dae0-a03d-3b31-a109-52c0216f4f6e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:2c:b3:08:f7:36:1a:ed:2b:f0:06:48:f3:90:28:f3:38:d6: 8c:52:db:a3:31:4b:ec:d5:3f:13:63:d3:d3:5f:05:a7:9d:5c: b1:0f:cd:a8:86:53:0e:6d:a6:4a:26:40:56:d1:25:f9:74:1c: 07:9b:68:bd:7c:96:0c:f3:c0:ec:d8:01:27:2b:da:da:e9:37: de:a4:5f:61:6f:ed:f2:07:ba:5c:cf:47:6b:63:eb:c6:2a:49: 50:69:76:df:49:76:51:63:27:12:a7:ce:2f:fe:41:a9:24:71: c2:5c:12:be:7b:35:f3:a8:5a:40:31:6d:7f:44:47:af:09:db: 57:e1:82:06:a3:99:a2:e0:5d:f2:fa:7e:ec:9b:87:63:4a:79: 06:34:c0:ff:1d:0c:01:a2:5b:c9:97:4b:36:98:37:a0:4d:fc: b3:85:10:cd:81:b8:16:41:68:93:cd:61:a2:a8:c5:2a:54:1f: f2:1b:86:ed:3a:cf:fd:dc:81:83:44:72:3c:ee:dc:ce:c8:9f: f8:f9:cb:79:a8:b3:de:51:54:5d:80:0a:93:9c:b1:e5:2f:47: f8:e1:ff:33:76:90:eb:08:06:b0:85:01:cd:73:93:71:d1:48: 28:47:51:9a:e4:4a:50:60:fa:27:cc:6f:66:7e:86:2b:76:0e: 93:93:7a:34 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0KCwDOJpxCkW6gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk ODc3N2NhNDQtYWQ5ZC00NjMwLTk1YTAtMDE5YTVjZGM0MTVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn5KuXuflidbtFZ4sLPzTbx8iwNIK98toGM9w bUdbtrF9X9cmGv+kuqL7mbhCS8WU8FGrlGV3FIImB+Ei4m3nJI0LErfjIC2PzoKe CNbeuHz4u9iSaEz6A5Z185qrAPKnnv/GnxcRz5Y5fVKPpzlucRL4Y3g/qOaCxyco 1i4brneWliVdVqUybbOz79wpZzjJ1jOTDWppUbJcnQs3MVBfHgc1AAgWVpxoNgyh 0bywbMuSPZ9Q8URj33Zt1LFUh/BoGXJVfKh38U34riVseqpseh16G04F2wa86izy 5HISf/svLVKYXR0H7e2Mzs00aRjFzMxH5iUrDIiy8eqObozxvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEKsALIdOVv0PvGzznYxdV0bjt5iMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjk2MGRhZTAtYTAzZC0z YjMxLWExMDktNTJjMDIxNmY0ZjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE4sswj3NhrtK/AGSPOQKPM41oxS26MxS+zVPxNj09NfBaedXLEPzaiG Uw5tpkomQFbRJfl0HAebaL18lgzzwOzYAScr2trpN96kX2Fv7fIHulzPR2tj68Yq SVBpdt9JdlFjJxKnzi/+QakkccJcEr57NfOoWkAxbX9ER68J21fhggajmaLgXfL6 fuybh2NKeQY0wP8dDAGiW8mXSzaYN6BN/LOFEM2BuBZBaJPNYaKoxSpUH/Ibhu06 z/3cgYNEcjzu3M7In/j5y3mos95RVF2ACpOcseUvR/jh/zN2kOsIBrCFAc1zk3HR SChHUZrkSlBg+ifMb2Z+hit2DpOTejQ= -----END CERTIFICATE-----Generated at Fri Mar 14 11:10:47 2025 by rpki-client