$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ad2640e-5ec7-3d2a-be97-1e71b67a2d9d.roa File: 0ad2640e-5ec7-3d2a-be97-1e71b67a2d9d.roa (raw, json) Hash identifier: EopUODVeIVje4oVB++pYSAN9pUyif4HuWAB9movcgb4= Subject key identifier: 24:8A:60:2C:69:30:46:36:E2:E1:3A:40:71:4F:6A:B0:BB:01:DD:36 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB7377EFA19F00D3EDF62E190 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ad2640e-5ec7-3d2a-be97-1e71b67a2d9d.roa Signing time: Fri 01 Aug 2025 20:45:30 +0000 ROA not before: Fri 01 Aug 2025 20:45:30 +0000 ROA not after: Thu 30 Oct 2025 20:45:30 +0000 asID: 401152 IP address blocks: 136.0.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:37:7e:fa:19:f0:0d:3e:df:62:e1:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 1 20:45:30 2025 GMT Not After : Oct 30 20:45:30 2025 GMT Subject: CN=33cd543f-ca40-4159-8d7b-bf6f5d685ee1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:82:d3:cc:92:8e:1f:e5:24:04:b4:51:e9:77:ec: af:b9:b4:f8:da:01:fb:e5:51:94:df:2c:c1:1c:9e: 22:2a:c3:53:e5:a7:11:e4:a5:9a:be:43:62:61:f3: c8:c3:e0:8f:6f:34:24:a1:e3:8d:96:a1:44:60:aa: d9:90:5a:a7:89:87:d8:a0:7e:33:4d:d5:4d:3d:48: d3:b2:b6:36:6c:aa:6e:e5:93:1c:d2:a9:e6:5c:cc: c9:06:69:40:dd:a6:e5:2d:f4:27:78:b4:49:24:91: 41:6a:c3:a3:6d:f2:d4:6c:78:09:35:23:eb:15:5b: aa:74:1e:16:96:08:ca:6c:ee:92:00:42:b9:5d:28: 67:5e:d4:08:d3:71:ce:ba:35:01:07:09:cb:14:65: bf:e7:36:f4:dd:79:e8:af:49:08:38:33:a7:4e:61: 91:0e:56:f5:49:e0:e2:4a:b3:d8:e2:1e:94:10:53: c2:0f:f0:17:32:79:67:34:d5:bd:fc:88:2e:38:50: 2e:2d:db:b1:78:2c:ab:7a:2e:40:96:20:19:b2:96: 24:c4:8e:d5:25:33:07:8c:93:a4:5d:41:05:ba:56: 5a:5d:81:f1:c2:ef:0b:21:81:31:e2:82:74:07:6c: 54:36:7a:19:08:f3:54:48:fb:48:28:b6:d6:64:f4: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:8A:60:2C:69:30:46:36:E2:E1:3A:40:71:4F:6A:B0:BB:01:DD:36 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0ad2640e-5ec7-3d2a-be97-1e71b67a2d9d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4a:8f:8f:fa:c1:34:a3:c0:94:9c:d4:29:4f:c1:f9:1e:05:0d: 7f:ed:aa:85:5d:e5:f7:f8:9b:53:d8:a5:08:92:fa:e0:00:55: f3:95:c0:78:d9:06:55:aa:61:3e:a4:60:6e:f1:8d:6c:62:a9: 47:16:b8:58:df:48:a0:56:c9:98:3e:37:b8:76:1e:74:41:1d: 5d:9f:cd:6c:90:89:69:5f:84:38:61:42:b1:03:b4:65:5d:c5: cf:30:1e:e8:be:9e:3d:a3:0a:52:1f:83:b0:f9:06:4e:4d:f1: f7:93:f3:4f:7c:e7:24:5f:01:34:dd:7e:7f:08:a5:7d:4f:1a: 65:b6:97:5b:ad:17:1c:12:c9:7f:a3:64:79:00:96:83:c6:d2: a8:c8:03:10:2e:03:cb:4b:9a:74:fc:41:3e:bc:1e:df:57:1c: 36:4e:f7:8c:0c:5b:a1:ea:2e:f6:67:1d:92:f4:ac:fe:94:6c: 99:d9:ed:58:f3:ad:d5:de:06:61:0a:06:84:14:cf:ed:5d:ee: 35:ba:78:b1:c8:ab:b4:94:dc:c2:88:07:88:a3:3b:fc:ce:2e: 70:4c:dd:4c:98:c3:ac:19:20:57:32:60:52:fb:2b:ac:ce:f2: 2c:0f:35:9e:f5:47:63:76:bb:06:25:ef:18:6f:fb:fd:e4:3d: 47:2f:c0:ac -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3N376GfANPt9i4ZAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgwMTIwNDUzMFoXDTI1MTAzMDIwNDUzMFowLzEtMCsGA1UEAxMk MzNjZDU0M2YtY2E0MC00MTU5LThkN2ItYmY2ZjVkNjg1ZWUxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgtPMko4f5SQEtFHpd+yvubT42gH75VGU3yzB HJ4iKsNT5acR5KWavkNiYfPIw+CPbzQkoeONlqFEYKrZkFqniYfYoH4zTdVNPUjT srY2bKpu5ZMc0qnmXMzJBmlA3ablLfQneLRJJJFBasOjbfLUbHgJNSPrFVuqdB4W lgjKbO6SAEK5XShnXtQI03HOujUBBwnLFGW/5zb03Xnor0kIODOnTmGRDlb1SeDi SrPY4h6UEFPCD/AXMnlnNNW9/IguOFAuLduxeCyrei5AliAZspYkxI7VJTMHjJOk XUEFulZaXYHxwu8LIYEx4oJ0B2xUNnoZCPNUSPtIKLbWZPRxFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCSKYCxpMEY24uE6QHFParC7Ad02MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGFkMjY0MGUtNWVjNy0z ZDJhLWJlOTctMWU3MWI2N2EyZDlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEqPj/rBNKPAlJzUKU/B+R4FDX/tqoVd5ff4m1PYpQiS+uAAVfOVwHjZ BlWqYT6kYG7xjWxiqUcWuFjfSKBWyZg+N7h2HnRBHV2fzWyQiWlfhDhhQrEDtGVd xc8wHui+nj2jClIfg7D5Bk5N8feT80985yRfATTdfn8IpX1PGmW2l1utFxwSyX+j ZHkAloPG0qjIAxAuA8tLmnT8QT68Ht9XHDZO94wMW6HqLvZnHZL0rP6UbJnZ7Vjz rdXeBmEKBoQUz+1d7jW6eLHIq7SU3MKIB4ijO/zOLnBM3UyYw6wZIFcyYFL7K6zO 8iwPNZ71R2N2uwYl7xhv+/3kPUcvwKw= -----END CERTIFICATE-----Generated at Mon Aug 4 18:58:14 2025 by rpki-client