$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa File: 4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa (raw, json) Hash identifier: 8BzkMwjizZYrqrZNP/U3ncRVtOigj0+4bUAK4Tc+DJU= Subject key identifier: E1:3F:2D:AB:5C:A0:2C:14:05:27:70:AB:9A:11:63:FA:B5:07:29:14 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F432858499294ACAD8EB08896DF87A1C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa Signing time: Sat 19 Apr 2025 01:00:48 +0000 ROA not before: Sat 19 Apr 2025 01:00:48 +0000 ROA not after: Fri 18 Jul 2025 01:00:48 +0000 asID: 209854 IP address blocks: 136.0.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:92:94:ac:ad:8e:b0:88:96:df:87:a1:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 19 01:00:48 2025 GMT Not After : Jul 18 01:00:48 2025 GMT Subject: CN=522440e2-6dee-45bb-92ea-d78ac6b78e8e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fd:3d:7e:8b:db:a6:8c:fe:14:ec:91:a3:db: 3b:38:1f:3f:3a:c8:5a:a4:34:f3:d5:68:0a:c1:b1: 1a:05:93:85:68:94:5f:3a:17:c5:d1:46:42:67:e5: b3:f6:d6:07:b1:dc:6e:83:03:9e:89:da:3e:07:8b: ff:9d:1e:1c:1e:a5:b6:b4:ea:20:cb:9e:f3:81:18: a2:c3:b6:88:a4:31:05:f5:90:45:de:07:5e:9e:96: b7:80:73:68:b5:c3:2a:a6:6a:30:e1:e5:07:50:0a: c3:c3:0f:0b:f7:44:46:0c:ea:23:27:38:b7:10:5f: b9:9f:77:39:21:aa:1c:f6:ed:f6:13:2d:89:56:a5: 84:c2:70:bb:ef:99:61:6c:7f:40:ea:48:c3:c8:14: 62:06:37:d9:0c:7b:37:f6:53:83:ec:69:37:8c:56: a0:40:5a:12:b9:70:a5:de:61:ec:33:de:0f:75:f0: 96:9e:a7:ef:dd:49:76:f5:7c:c2:b8:b8:76:1d:7b: ee:c8:0c:32:ab:53:db:7a:8d:9d:fc:1d:d6:62:2e: c2:3a:b7:f9:67:e3:45:13:50:e8:07:6a:e5:21:cc: 6e:c3:df:51:75:2d:a9:74:cf:e2:67:5e:ee:ab:18: a4:07:ee:68:5f:67:af:57:a1:50:8d:eb:a6:90:28: eb:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:3F:2D:AB:5C:A0:2C:14:05:27:70:AB:9A:11:63:FA:B5:07:29:14 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:11:a6:09:08:58:12:05:56:60:b0:fb:6f:6e:b9:79:6a:47: 2a:41:a0:88:f0:27:a9:f7:df:91:ed:38:4c:b8:89:b5:fe:90: 9a:d3:df:f1:12:1a:e4:d8:e4:38:5a:00:77:de:e5:a7:8c:0b: 74:3d:aa:7c:fa:41:ba:8e:1c:ef:8f:ab:39:af:c6:cf:1c:bb: 22:11:0f:91:42:e9:0e:d8:89:7a:3a:54:49:49:b4:97:ef:93: b4:bf:00:9d:f0:8b:3d:b9:69:95:f8:d4:2b:c1:51:44:b8:a2: 9c:1e:67:47:1c:48:a4:bb:4f:95:90:57:41:00:91:1e:8c:ad: 64:d5:e8:34:d9:e3:6a:08:a3:7d:44:1f:17:c6:71:40:d6:62: ba:5a:a2:72:39:7b:53:1e:1b:9c:ae:ec:ef:63:77:28:56:69: fb:76:50:d6:9a:98:95:dd:5a:ac:6d:46:cb:ae:f1:cc:f2:90: d5:38:87:dd:c4:46:23:06:8f:97:ad:20:d8:7d:b0:7a:be:4c: e3:cc:d1:1b:2c:f9:9c:35:5b:cf:d2:69:cd:99:00:08:89:54: ae:db:a5:af:2a:fe:99:05:60:4e:d3:83:08:28:00:1a:f6:5f: 23:ba:7a:09:db:d4:93:af:bd:73:35:fe:0f:4f:3b:3b:bd:77: c1:64:37:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmSlKytjrCIlt+HocAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQxOTAxMDA0OFoXDTI1MDcxODAxMDA0OFowLzEtMCsGA1UEAxMk NTIyNDQwZTItNmRlZS00NWJiLTkyZWEtZDc4YWM2Yjc4ZThlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2v09fovbpoz+FOyRo9s7OB8/OshapDTz1WgK wbEaBZOFaJRfOhfF0UZCZ+Wz9tYHsdxugwOeido+B4v/nR4cHqW2tOogy57zgRii w7aIpDEF9ZBF3gdenpa3gHNotcMqpmow4eUHUArDww8L90RGDOojJzi3EF+5n3c5 Iaoc9u32Ey2JVqWEwnC775lhbH9A6kjDyBRiBjfZDHs39lOD7Gk3jFagQFoSuXCl 3mHsM94PdfCWnqfv3Ul29XzCuLh2HXvuyAwyq1Pbeo2d/B3WYi7COrf5Z+NFE1Do B2rlIcxuw99RdS2pdM/iZ17uqxikB+5oX2evV6FQjeumkCjrjwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOE/LatcoCwUBSdwq5oRY/q1BykUMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDUyMmZhYzEtZWYxZS0z NzgxLTgzMzctOWEzY2M5MWViOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIURpgkIWBIFVmCw+29uuXlqRypBoIjwJ6n335HtOEy4ibX+kJrT3/ES GuTY5DhaAHfe5aeMC3Q9qnz6QbqOHO+Pqzmvxs8cuyIRD5FC6Q7YiXo6VElJtJfv k7S/AJ3wiz25aZX41CvBUUS4opweZ0ccSKS7T5WQV0EAkR6MrWTV6DTZ42oIo31E HxfGcUDWYrpaonI5e1MeG5yu7O9jdyhWaft2UNaamJXdWqxtRsuu8czykNU4h93E RiMGj5etINh9sHq+TOPM0Rss+Zw1W8/Sac2ZAAiJVK7bpa8q/pkFYE7TgwgoABr2 XyO6egnb1JOvvXM1/g9POzu9d8FkN90= -----END CERTIFICATE-----Generated at Sat May 10 22:16:30 2025 by rpki-client