$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c27e70f-0313-359e-9a9a-43327eafc05d.roa File: 0c27e70f-0313-359e-9a9a-43327eafc05d.roa (raw, json) Hash identifier: 9gw8VNe5FYdpqcUp1bwGZjWt+6CaqAeKqMlNjeCMZag= Subject key identifier: 3C:67:E7:09:9F:72:99:3C:82:E2:81:31:91:AE:9C:E5:4C:E7:39:D5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849F17FAB435DE4660A94DB5460 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c27e70f-0313-359e-9a9a-43327eafc05d.roa Signing time: Fri 23 May 2025 01:00:49 +0000 ROA not before: Fri 23 May 2025 01:00:49 +0000 ROA not after: Thu 21 Aug 2025 01:00:49 +0000 asID: 401152 IP address blocks: 136.0.225.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f1:7f:ab:43:5d:e4:66:0a:94:db:54:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 23 01:00:49 2025 GMT Not After : Aug 21 01:00:49 2025 GMT Subject: CN=6d2c98ef-27f6-4838-ab6a-5775cfad06e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:39:96:51:1e:c0:e3:8b:95:66:dd:01:3f:cd: 68:ae:6e:72:30:f0:b1:54:25:fa:2f:00:f9:97:c0: ca:72:05:7c:6d:05:d3:0f:ea:62:f8:a4:09:56:15: 19:93:5e:80:64:e5:ef:e0:17:ca:58:f9:03:c9:b1: f1:f6:29:ea:21:91:3c:47:2e:cc:97:53:41:01:80: 0e:4b:6d:c3:67:39:1e:24:b3:ea:e5:97:48:20:8e: 5c:b3:a4:e0:4d:d7:15:9c:6c:38:a2:c3:25:cf:df: d4:6b:5f:fa:2e:cb:54:aa:bf:1e:e9:a7:b6:c5:38: 99:21:be:20:43:5f:c6:e5:1e:90:06:28:ff:7c:de: 60:9e:b5:89:48:03:d6:af:08:3a:84:c8:06:b5:a3: b6:b4:de:71:81:1f:f5:50:6e:da:6a:ed:64:17:4d: 3d:71:17:93:2e:f9:ca:65:95:87:60:87:63:40:c0: 6a:6a:8a:62:b1:a4:8a:2b:80:b1:ed:8e:c2:67:3a: 27:35:dc:77:cf:63:f6:b8:0b:ca:1b:98:c7:06:1a: ff:3b:10:bf:8d:bd:2e:ce:f3:25:f4:25:8e:d7:90: 85:12:6f:19:d3:db:67:c7:3c:2e:c3:74:3b:ff:fc: 76:ef:86:2b:12:90:ea:a3:ad:0f:a5:f2:42:7a:44: 14:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:67:E7:09:9F:72:99:3C:82:E2:81:31:91:AE:9C:E5:4C:E7:39:D5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/0c27e70f-0313-359e-9a9a-43327eafc05d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.225.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:d8:42:e1:98:63:ee:1a:1b:7b:c8:87:29:54:33:32:03:45: 88:4c:63:3d:ed:2c:7a:a4:de:7f:1f:70:28:a5:d9:9a:1c:be: a1:1f:6c:a9:2f:b8:e6:48:a9:7c:28:c2:eb:4c:cb:ce:dd:1d: f9:e0:c7:fa:6a:d9:0a:72:29:06:23:47:73:6d:46:6a:64:fa: c6:2d:5f:f8:9c:7e:81:23:be:9e:46:1e:26:61:51:0e:9f:14: 7f:df:8c:1a:0a:b1:40:85:9a:2e:c7:db:34:0c:cf:83:18:b6: cd:32:2c:17:89:0d:e6:82:5d:8b:1d:68:ba:65:97:73:73:61: 6a:7c:83:3b:1d:16:1a:de:61:26:31:c3:00:82:4c:f7:8f:ef: cc:0d:13:e8:9a:a9:6a:fd:d7:2d:58:02:71:94:6e:d5:0f:2b: cc:ee:6d:d1:1e:2a:20:2b:63:8e:74:25:b8:0e:fb:d4:9f:0c: 28:de:d4:2b:2f:da:bf:51:42:fd:90:e6:18:3b:06:ab:2d:95: 84:5f:48:be:ca:40:a8:24:e5:16:c1:ba:31:1c:fb:ff:41:90: 69:23:52:9f:f7:6e:15:83:03:8c:44:4d:0b:78:da:4f:2b:78: 07:9b:c9:3c:76:f2:f5:4f:08:06:ff:1e:05:ca:9a:5b:48:50: 32:5f:d5:d5 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf6tDXeRmCpTbVGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk NmQyYzk4ZWYtMjdmNi00ODM4LWFiNmEtNTc3NWNmYWQwNmUyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTmWUR7A44uVZt0BP81orm5yMPCxVCX6LwD5 l8DKcgV8bQXTD+pi+KQJVhUZk16AZOXv4BfKWPkDybHx9inqIZE8Ry7Ml1NBAYAO S23DZzkeJLPq5ZdIII5cs6TgTdcVnGw4osMlz9/Ua1/6LstUqr8e6ae2xTiZIb4g Q1/G5R6QBij/fN5gnrWJSAPWrwg6hMgGtaO2tN5xgR/1UG7aau1kF009cReTLvnK ZZWHYIdjQMBqaopisaSKK4Cx7Y7CZzonNdx3z2P2uAvKG5jHBhr/OxC/jb0uzvMl 9CWO15CFEm8Z09tnxzwuw3Q7//x274YrEpDqo60PpfJCekQU8wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDxn5wmfcpk8guKBMZGunOVM5znVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMGMyN2U3MGYtMDMxMy0z NTllLTlhOWEtNDMzMjdlYWZjMDVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArYQuGYY+4aG3vIhylUMzIDRYhMYz3tLHqk3n8fcCil2ZocvqEfbKkv uOZIqXwowutMy87dHfngx/pq2QpyKQYjR3NtRmpk+sYtX/icfoEjvp5GHiZhUQ6f FH/fjBoKsUCFmi7H2zQMz4MYts0yLBeJDeaCXYsdaLpll3NzYWp8gzsdFhreYSYx wwCCTPeP78wNE+iaqWr91y1YAnGUbtUPK8zubdEeKiArY450JbgO+9SfDCje1Csv 2r9RQv2Q5hg7BqstlYRfSL7KQKgk5RbBujEc+/9BkGkjUp/3bhWDA4xETQt42k8r eAebyTx28vVPCAb/HgXKmltIUDJf1dU= -----END CERTIFICATE-----Generated at Sun Jun 15 05:17:44 2025 by rpki-client