$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa File: 6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa (raw, json) Hash identifier: CXZ7AGJx1kF29VnZj3dDkVNA/1JXu2AjUoCBtXrBtE0= Subject key identifier: 5E:CD:BD:3F:4D:A5:46:EB:EE:67:E8:5D:BF:68:69:40:53:BF:93:57 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584996C4B4F87A4BC9EB5514A730 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa Signing time: Sun 20 Apr 2025 13:01:01 +0000 ROA not before: Sun 20 Apr 2025 13:01:01 +0000 ROA not after: Sat 19 Jul 2025 13:01:01 +0000 asID: 3561 IP address blocks: 136.0.85.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:96:c4:b4:f8:7a:4b:c9:eb:55:14:a7:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Apr 20 13:01:01 2025 GMT Not After : Jul 19 13:01:01 2025 GMT Subject: CN=c63967fa-60ce-40c3-a2d0-6c0198473069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:97:fc:70:ae:c9:97:f8:4c:c5:24:53:91:1b: af:a5:12:4f:06:ca:98:d3:a8:15:91:43:0a:46:5e: d4:57:de:ff:94:ca:9b:56:0a:54:16:cf:7d:b0:65: c8:7d:1c:b6:c7:f2:fd:af:bf:1f:c3:f2:1f:4e:6a: 48:5b:50:d3:24:37:1e:c6:f7:1f:01:6e:a1:c9:dc: 14:b3:97:f3:e3:c3:63:f6:bf:3e:04:2c:0b:58:2b: 2e:58:54:fe:4a:82:45:e7:f8:c4:43:39:dc:34:d4: e9:93:fa:b9:ce:ff:63:56:34:22:a9:14:70:51:cb: db:37:5e:5a:96:10:f9:ca:a2:dd:3a:e4:7e:74:db: b4:cd:29:d8:b8:f7:c7:e8:b9:c2:43:05:3b:80:d3: 38:bc:9c:ff:e9:64:2f:4a:88:95:97:81:11:2b:88: 7b:5f:16:6e:28:d1:e0:f6:b6:16:70:f6:87:b9:37: c3:8b:35:7c:f3:4d:3b:5c:f1:5f:f5:59:f5:fa:a8: e0:d3:06:93:c3:39:3a:58:ff:5b:d2:a8:38:25:c5: 1f:67:c9:33:5a:7c:7c:0a:fd:9d:bb:6a:bb:aa:61: d3:ee:d9:fd:32:22:4e:89:d7:71:f4:5a:fe:d3:11: 35:56:57:44:13:01:70:4e:49:9f:28:24:30:8b:3c: 81:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:CD:BD:3F:4D:A5:46:EB:EE:67:E8:5D:BF:68:69:40:53:BF:93:57 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6788b9fc-4dc2-3a59-aa55-67ba04838ab8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.85.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 80:8a:b5:12:0c:74:50:5c:06:2b:17:45:29:33:3b:fb:d9:3a: 1c:16:bc:67:84:90:6c:d5:9e:de:47:81:39:7e:b7:66:ce:05: 7d:9e:fb:55:6d:78:f0:a0:8a:c1:9b:2c:96:ff:46:59:d6:80: 47:7b:4f:61:c7:dc:5c:3f:5b:b7:45:90:94:92:bb:be:60:d6: d0:31:0d:3b:a1:11:c0:45:02:fb:07:f3:09:9a:2b:8f:55:34: 07:b7:0e:4d:b2:73:69:a3:bb:b1:78:32:d7:75:4c:4a:04:64: 75:38:95:42:38:46:b2:55:49:3e:b6:4d:e2:7a:ff:85:0a:38: b8:24:ce:3a:8b:94:a2:bf:d8:e4:c3:29:59:4c:cd:f0:df:99: 67:85:58:1d:ba:39:df:3e:ac:7b:2b:05:a9:e0:28:63:99:11: de:4a:58:46:93:69:5c:5c:11:f7:f6:0a:af:f6:f5:4a:3c:69: fa:2c:2d:ae:31:05:54:70:01:bd:9b:37:90:fd:9f:64:99:3a: b3:cc:55:fb:89:e2:2a:a6:ce:c6:a2:b9:bb:31:42:c7:6b:c5: e3:95:a2:65:7f:da:63:cc:62:fd:34:60:87:dd:02:8e:e0:9e: 96:7e:3f:5a:2f:f9:34:52:98:a8:2c:82:37:d0:73:06:91:19: 2a:01:77:be -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLT4ekvJ61UUpzAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk YzYzOTY3ZmEtNjBjZS00MGMzLWEyZDAtNmMwMTk4NDczMDY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq5f8cK7Jl/hMxSRTkRuvpRJPBsqY06gVkUMK Rl7UV97/lMqbVgpUFs99sGXIfRy2x/L9r78fw/IfTmpIW1DTJDcexvcfAW6hydwU s5fz48Nj9r8+BCwLWCsuWFT+SoJF5/jEQzncNNTpk/q5zv9jVjQiqRRwUcvbN15a lhD5yqLdOuR+dNu0zSnYuPfH6LnCQwU7gNM4vJz/6WQvSoiVl4ERK4h7XxZuKNHg 9rYWcPaHuTfDizV88007XPFf9Vn1+qjg0waTwzk6WP9b0qg4JcUfZ8kzWnx8Cv2d u2q7qmHT7tn9MiJOiddx9Fr+0xE1VldEEwFwTkmfKCQwizyBDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFF7NvT9NpUbr7mfoXb9oaUBTv5NXMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjc4OGI5ZmMtNGRjMi0z YTU5LWFhNTUtNjdiYTA0ODM4YWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAICKtRIMdFBcBisXRSkzO/vZOhwWvGeEkGzVnt5HgTl+t2bOBX2e+1Vt ePCgisGbLJb/RlnWgEd7T2HH3Fw/W7dFkJSSu75g1tAxDTuhEcBFAvsH8wmaK49V NAe3Dk2yc2mju7F4Mtd1TEoEZHU4lUI4RrJVST62TeJ6/4UKOLgkzjqLlKK/2OTD KVlMzfDfmWeFWB26Od8+rHsrBangKGOZEd5KWEaTaVxcEff2Cq/29Uo8afosLa4x BVRwAb2bN5D9n2SZOrPMVfuJ4iqmzsaiubsxQsdrxeOVomV/2mPMYv00YIfdAo7g npZ+P1ov+TRSmKgsgjfQcwaRGSoBd74= -----END CERTIFICATE-----Generated at Wed May 7 04:18:26 2025 by rpki-client