$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53159544-96e1-3ea6-b104-13a76a0bc932.roa File: 53159544-96e1-3ea6-b104-13a76a0bc932.roa (raw, json) Hash identifier: jLptiYApj/e9fTRCUiB8Zh27zwFV0jNDUzD/D4ggK4c= Subject key identifier: BA:F2:91:B3:00:68:4A:EA:D0:2D:D0:2D:A8:9B:74:44:01:1C:63:D0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849C20AB888E3805B677832C400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53159544-96e1-3ea6-b104-13a76a0bc932.roa Signing time: Tue 06 May 2025 01:00:47 +0000 ROA not before: Tue 06 May 2025 01:00:47 +0000 ROA not after: Mon 04 Aug 2025 01:00:47 +0000 asID: 6939 IP address blocks: 136.0.17.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 11 May 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:c2:0a:b8:88:e3:80:5b:67:78:32:c4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 6 01:00:47 2025 GMT Not After : Aug 4 01:00:47 2025 GMT Subject: CN=42a93c65-6481-4b8e-a515-292100214a20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:95:9f:81:85:68:91:de:9d:44:44:d3:00:e7: 5c:62:dc:47:92:07:8a:10:b8:8d:77:a8:d8:29:f3: 95:9c:ef:a1:f5:87:b6:41:98:86:16:6c:c1:ca:77: 15:1c:dd:21:f3:66:5e:dc:19:9c:ca:cc:19:74:d8: 42:c3:4e:12:9a:d6:33:91:a2:a1:61:7f:77:4f:08: 03:9e:87:4a:4b:4f:36:d3:c5:7a:3c:96:0d:a1:f2: d9:01:01:48:8d:63:78:72:d6:7a:b9:22:1d:aa:47: 4e:17:9e:69:25:9f:af:a6:b1:35:60:f1:ba:25:45: 02:91:d0:81:58:49:ee:bd:42:ce:46:de:09:d5:c1: a7:3f:12:1f:fc:3e:79:1a:eb:85:72:5f:f5:39:e5: 13:ed:f3:c0:a0:44:23:bd:de:37:db:9d:3d:33:d3: 69:9a:36:d9:be:b2:ee:82:f6:c4:bb:90:b6:d1:01: ec:e2:6f:f5:bc:7a:69:d6:3b:4f:d4:5d:24:aa:6c: 0c:02:7c:bf:f5:e3:21:37:9e:01:ff:34:5a:d5:80: c3:c8:b9:cd:5f:16:bf:a3:39:1e:77:44:59:10:f6: 19:00:d9:a4:ba:b8:c9:1a:85:72:82:75:76:a1:26: 14:b3:cc:0b:c5:bc:6f:c2:8f:66:42:6e:37:df:1e: 25:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BA:F2:91:B3:00:68:4A:EA:D0:2D:D0:2D:A8:9B:74:44:01:1C:63:D0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/53159544-96e1-3ea6-b104-13a76a0bc932.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.17.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5b:09:95:b8:01:cc:9f:92:1f:a9:90:18:95:01:9d:a6:f0:64: 17:84:36:6e:c6:9e:46:87:6a:c0:6c:f5:f4:1a:a4:0e:fc:0e: a2:5a:7d:49:82:90:49:c8:e0:26:03:74:7b:b6:6e:02:24:2d: 7a:67:21:cb:86:67:82:04:c5:59:ea:af:78:7c:54:a1:13:c6: 35:06:7a:08:94:07:01:70:9a:a0:e9:ce:e6:5b:a0:fe:67:cf: c7:bc:24:cd:df:31:b5:11:be:77:c0:21:f1:bd:bf:9c:d3:06: 6b:c0:1e:7b:5a:85:de:08:4f:48:4c:5f:17:35:81:1a:b1:b3: 8f:4b:18:54:c8:e0:1c:82:60:b8:62:5f:2f:6e:4b:3d:af:72: 56:81:96:ae:98:62:7a:b1:51:ea:7e:51:e2:5a:8d:3d:62:9b: a7:54:c2:8f:72:7b:93:82:55:9c:68:8a:91:f1:bb:14:89:d7: 50:22:69:46:45:af:e1:bb:73:87:a6:06:fa:9f:46:8a:d4:8e: dc:16:aa:31:3d:06:12:e5:41:13:63:ca:63:f4:55:2c:a0:e9: 28:1b:a5:8a:c5:cc:f2:93:c4:51:10:57:1a:14:f6:f3:75:27: 37:5a:3b:d8:b8:81:66:8f:f7:56:44:dc:69:ec:fa:b7:4c:ac: e2:04:68:36 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCriI44BbZ3gyxAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk NDJhOTNjNjUtNjQ4MS00YjhlLWE1MTUtMjkyMTAwMjE0YTIwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj5WfgYVokd6dRETTAOdcYtxHkgeKELiNd6jY KfOVnO+h9Ye2QZiGFmzByncVHN0h82Ze3BmcyswZdNhCw04SmtYzkaKhYX93TwgD nodKS08208V6PJYNofLZAQFIjWN4ctZ6uSIdqkdOF55pJZ+vprE1YPG6JUUCkdCB WEnuvULORt4J1cGnPxIf/D55GuuFcl/1OeUT7fPAoEQjvd432509M9NpmjbZvrLu gvbEu5C20QHs4m/1vHpp1jtP1F0kqmwMAny/9eMhN54B/zRa1YDDyLnNXxa/ozke d0RZEPYZANmkurjJGoVygnV2oSYUs8wLxbxvwo9mQm433x4lhwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLrykbMAaErq0C3QLaibdEQBHGPQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTMxNTk1NDQtOTZlMS0z ZWE2LWIxMDQtMTNhNzZhMGJjOTMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAARMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFsJlbgBzJ+SH6mQGJUBnabwZBeENm7GnkaHasBs9fQapA78DqJafUmC kEnI4CYDdHu2bgIkLXpnIcuGZ4IExVnqr3h8VKETxjUGegiUBwFwmqDpzuZboP5n z8e8JM3fMbURvnfAIfG9v5zTBmvAHntahd4IT0hMXxc1gRqxs49LGFTI4ByCYLhi Xy9uSz2vclaBlq6YYnqxUep+UeJajT1im6dUwo9ye5OCVZxoipHxuxSJ11AiaUZF r+G7c4emBvqfRorUjtwWqjE9BhLlQRNjymP0VSyg6SgbpYrFzPKTxFEQVxoU9vN1 JzdaO9i4gWaP91ZE3Gns+rdMrOIEaDY= -----END CERTIFICATE-----Generated at Sat May 10 04:52:51 2025 by rpki-client