$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2088b310-ba8b-3153-b0c2-48942ed9738e.roa File: 2088b310-ba8b-3153-b0c2-48942ed9738e.roa (raw, json) Hash identifier: +LEV5v6eBOY0o+noyMzgo4E7bMQjOTTj9aYjAvcySNA= Subject key identifier: 06:75:70:A6:A1:FE:B2:3F:D6:27:69:1B:8C:27:29:65:A3:ED:C5:ED Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF7600F1FBEE667D470280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2088b310-ba8b-3153-b0c2-48942ed9738e.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 44477 IP address blocks: 136.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:76:00:f1:fb:ee:66:7d:47:02:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=2b5b056d-8d52-47b3-a84e-a5b10d270e79 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:11:5f:b6:2e:36:9c:cc:d1:40:da:b7:41:43: 47:64:d7:5f:28:e7:97:7c:46:bb:7d:ef:89:30:e3: a8:25:59:43:e1:b6:48:22:78:f4:a5:3c:18:2b:b2: 99:04:20:31:16:22:7a:61:23:c8:b0:8a:92:4d:6d: 0d:b3:41:c5:ff:0a:51:b1:3d:a1:43:da:44:4b:b7: d8:3b:91:d4:5c:ab:06:9f:44:40:d4:cb:e7:62:9b: 17:c3:bc:b1:0b:c2:8b:30:5f:99:73:31:80:2c:0e: 0d:b3:54:60:46:d3:31:56:a5:aa:bd:db:54:73:97: 92:8a:96:55:21:e7:66:4b:8d:e3:37:af:a4:fd:8f: b8:57:26:bc:77:8f:16:77:5e:36:97:68:68:30:9b: 0a:d4:fb:ad:57:5a:dd:b3:7b:fc:2b:80:0d:df:82: 8f:a7:ae:08:79:b3:b8:2e:1b:02:78:a1:fa:0a:7d: ee:d8:5e:70:0b:c6:80:61:f1:ee:0b:91:85:7c:a3: cc:b1:14:24:cc:5f:3c:ed:ce:f2:4a:67:c2:72:8f: ac:f9:46:94:bb:be:3b:4f:8a:5a:02:e0:56:32:30: 66:8e:d7:f9:d9:17:0a:56:0a:9e:00:e7:b3:05:fb: dc:c5:09:6d:38:6a:bf:c6:f4:82:19:f8:71:77:1e: c7:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:75:70:A6:A1:FE:B2:3F:D6:27:69:1B:8C:27:29:65:A3:ED:C5:ED Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2088b310-ba8b-3153-b0c2-48942ed9738e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:39:66:c0:e7:ea:85:77:2c:49:ce:bb:9e:e4:3a:22:93:c7: 30:a5:34:07:9e:bd:c1:95:26:df:3b:f1:09:f1:c8:05:26:62: ab:05:ef:ef:30:8a:68:6e:c9:ba:94:65:40:83:ac:13:89:14: 7a:47:e0:29:3f:fa:52:8f:d2:f7:cc:77:54:dd:b9:e7:08:4a: 0c:6c:fd:3c:b0:b2:ea:0d:2d:02:80:b0:9f:ae:1c:f6:57:2c: c5:7f:9f:e6:c8:ec:32:fd:98:a7:f0:26:65:d1:fd:58:90:2f: 7e:61:f8:b2:db:1a:be:83:0d:ba:1e:9c:bd:2d:f9:74:54:32: e9:66:0f:18:00:db:ef:02:be:bd:42:26:9f:f3:1e:8f:9f:48: 1d:c1:f0:18:48:2f:28:f8:5f:44:c9:79:81:7a:7e:f2:3b:27: fb:63:fc:75:33:43:65:2f:43:a0:2c:22:d6:51:87:c2:21:5b: 83:15:08:fb:81:7e:59:e1:69:21:e9:60:a8:ba:59:e2:d3:80: 20:b1:84:da:eb:36:6a:6f:27:62:14:45:69:2f:88:fd:9e:be: d8:5b:84:a0:58:05:ae:6b:5d:b1:86:99:a9:4d:c9:92:53:91: 0e:ba:fc:f7:b6:33:77:80:c3:fd:f5:9a:54:9b:02:7e:98:10: bd:b3:61:90 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3YA8fvuZn1HAoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk MmI1YjA1NmQtOGQ1Mi00N2IzLWE4NGUtYTViMTBkMjcwZTc5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRFfti42nMzRQNq3QUNHZNdfKOeXfEa7fe+J MOOoJVlD4bZIInj0pTwYK7KZBCAxFiJ6YSPIsIqSTW0Ns0HF/wpRsT2hQ9pES7fY O5HUXKsGn0RA1MvnYpsXw7yxC8KLMF+ZczGALA4Ns1RgRtMxVqWqvdtUc5eSipZV IedmS43jN6+k/Y+4Vya8d48Wd142l2hoMJsK1PutV1rds3v8K4AN34KPp64IebO4 LhsCeKH6Cn3u2F5wC8aAYfHuC5GFfKPMsRQkzF887c7ySmfCco+s+UaUu747T4pa AuBWMjBmjtf52RcKVgqeAOezBfvcxQltOGq/xvSCGfhxdx7HIwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAZ1cKah/rI/1idpG4wnKWWj7cXtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjA4OGIzMTAtYmE4Yi0z MTUzLWIwYzItNDg5NDJlZDk3MzhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGk5ZsDn6oV3LEnOu57kOiKTxzClNAeevcGVJt878QnxyAUmYqsF7+8w imhuybqUZUCDrBOJFHpH4Ck/+lKP0vfMd1TduecISgxs/TywsuoNLQKAsJ+uHPZX LMV/n+bI7DL9mKfwJmXR/ViQL35h+LLbGr6DDboenL0t+XRUMulmDxgA2+8Cvr1C Jp/zHo+fSB3B8BhILyj4X0TJeYF6fvI7J/tj/HUzQ2UvQ6AsItZRh8IhW4MVCPuB flnhaSHpYKi6WeLTgCCxhNrrNmpvJ2IURWkviP2evthbhKBYBa5rXbGGmalNyZJT kQ66/Pe2M3eAw/31mlSbAn6YEL2zYZA= -----END CERTIFICATE-----Generated at Sun May 11 09:39:49 2025 by rpki-client