$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa File: c0124524-a38c-331a-b4d5-25f3ab4131bf.roa (raw, json) Hash identifier: O542t+xhpO6fW1znw2WwY+lyXoKSg440c5xC9nnVLAo= Subject key identifier: AD:31:FF:A4:0E:93:86:AB:B6:6B:14:4A:EF:06:1D:C4:B6:BD:15:96 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584953C42264B93B9861802A2400 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa Signing time: Thu 27 Mar 2025 13:00:52 +0000 ROA not before: Thu 27 Mar 2025 13:00:52 +0000 ROA not after: Wed 25 Jun 2025 13:00:52 +0000 asID: 9009 IP address blocks: 136.0.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 08 May 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:53:c4:22:64:b9:3b:98:61:80:2a:24:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 27 13:00:52 2025 GMT Not After : Jun 25 13:00:52 2025 GMT Subject: CN=cec65d63-b148-4a13-988a-326dcc4250c8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:58:99:48:dc:25:c3:17:b3:92:ed:00:06:48: c2:d1:c6:74:01:20:ae:a5:8f:49:47:0c:68:2e:89: ab:9c:ca:4f:e2:92:73:d0:60:d4:52:26:b7:2b:2d: d3:dd:5e:41:ed:44:44:0c:f8:0e:d8:76:de:bb:37: c8:57:1c:9d:30:c8:6d:51:84:ce:a9:26:a7:e1:91: e6:39:d8:ff:d0:4d:c5:67:5a:09:e3:28:e0:df:7d: 61:8d:fc:36:bc:b1:07:a1:d8:06:15:4b:7d:0b:1d: 22:17:09:d8:dd:7d:56:e9:90:a2:80:21:f7:7c:c7: 7a:b8:21:0f:c4:c8:62:83:ec:3f:8b:c6:0b:d2:b7: e9:12:00:a1:01:d4:a7:ee:96:4a:64:f6:21:cb:68: e4:68:ff:f8:ca:50:1d:3c:f8:dd:4f:c8:82:07:1b: b2:3d:a5:ba:28:e6:4c:26:b9:4c:e9:c8:78:e2:e0: 40:f1:d3:56:07:ff:71:e5:7f:1b:d5:b2:1e:0a:5c: da:31:b7:52:44:76:a7:af:e0:14:c6:86:86:43:ab: b9:34:2c:50:b7:cf:61:b1:46:68:88:f8:96:9a:bc: 3f:77:f2:57:c6:2b:5e:df:ba:ee:f6:76:e2:18:3b: cc:2a:1d:03:22:f5:53:81:6e:e3:97:79:76:76:11: c5:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:31:FF:A4:0E:93:86:AB:B6:6B:14:4A:EF:06:1D:C4:B6:BD:15:96 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/c0124524-a38c-331a-b4d5-25f3ab4131bf.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a0:51:1c:79:83:06:80:db:64:78:b2:b8:02:85:d5:a3:41:7f: d1:c7:6e:0c:65:6b:24:7e:a3:ca:53:94:fd:5b:5a:11:02:8e: d3:4f:c7:e5:b2:a5:0b:ea:ec:d7:a7:ff:8d:ed:1c:cc:cf:e9: 1a:88:87:94:02:b4:9f:fa:a4:06:36:2e:a0:5e:66:ae:b3:2a: 49:e5:d1:5f:ce:76:7c:f6:9c:f6:d9:7b:f8:70:1c:86:e6:a9: 11:92:50:33:33:94:c6:7c:fc:bc:71:c7:da:b6:3c:d6:1a:ec: a4:c7:ce:6c:af:e8:ad:1a:11:81:7a:c6:6a:20:b1:46:49:fe: d1:a7:e9:1c:0a:82:66:3a:68:9c:4c:43:60:8a:8a:9a:10:30: 0a:fa:5e:e4:28:d9:a5:9a:ec:cb:c8:04:ac:c8:13:9e:93:0d: 4a:fc:0b:b7:86:3a:11:14:1a:07:47:d6:b5:10:c3:21:4e:fd: 91:b8:d6:b0:f3:0a:c5:f3:47:73:cb:53:f0:dd:a8:31:d7:c9: 2a:28:24:28:f3:e6:e4:d2:ff:09:86:12:a8:3d:e0:b6:49:42: 31:45:6d:48:37:02:b2:59:5e:d0:8c:85:63:42:fc:79:fe:ef: ca:ae:ba:41:39:84:51:89:e6:dd:e4:75:31:e4:7f:9d:4a:b6: 29:bd:10:9a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxCJkuTuYYYAqJAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk Y2VjNjVkNjMtYjE0OC00YTEzLTk4OGEtMzI2ZGNjNDI1MGM4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkViZSNwlwxezku0ABkjC0cZ0ASCupY9JRwxo LomrnMpP4pJz0GDUUia3Ky3T3V5B7UREDPgO2HbeuzfIVxydMMhtUYTOqSan4ZHm Odj/0E3FZ1oJ4yjg331hjfw2vLEHodgGFUt9Cx0iFwnY3X1W6ZCigCH3fMd6uCEP xMhig+w/i8YL0rfpEgChAdSn7pZKZPYhy2jkaP/4ylAdPPjdT8iCBxuyPaW6KOZM JrlM6ch44uBA8dNWB/9x5X8b1bIeClzaMbdSRHanr+AUxoaGQ6u5NCxQt89hsUZo iPiWmrw/d/JXxite37ru9nbiGDvMKh0DIvVTgW7jl3l2dhHFqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK0x/6QOk4artmsUSu8GHcS2vRWWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYzAxMjQ1MjQtYTM4Yy0z MzFhLWI0ZDUtMjVmM2FiNDEzMWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKBRHHmDBoDbZHiyuAKF1aNBf9HHbgxlayR+o8pTlP1bWhECjtNPx+Wy pQvq7Nen/43tHMzP6RqIh5QCtJ/6pAY2LqBeZq6zKknl0V/Odnz2nPbZe/hwHIbm qRGSUDMzlMZ8/Lxxx9q2PNYa7KTHzmyv6K0aEYF6xmogsUZJ/tGn6RwKgmY6aJxM Q2CKipoQMAr6XuQo2aWa7MvIBKzIE56TDUr8C7eGOhEUGgdH1rUQwyFO/ZG41rDz CsXzR3PLU/DdqDHXySooJCjz5uTS/wmGEqg94LZJQjFFbUg3ArJZXtCMhWNC/Hn+ 78quukE5hFGJ5t3kdTHkf51Ktim9EJo= -----END CERTIFICATE-----Generated at Wed May 7 13:12:43 2025 by rpki-client