$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d031f20-4fc3-3848-82c0-796dae161744.roa File: 1d031f20-4fc3-3848-82c0-796dae161744.roa (raw, json) Hash identifier: C91xRLRGAuay2msufQIx0vUhPujScnqGpL+2fBjdtxw= Subject key identifier: 71:79:F1:BE:4A:7B:C6:CA:48:21:9C:8E:FE:49:E1:AB:EB:6C:D1:A1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A0D6A99B4AD84AFC3B6BF1280 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d031f20-4fc3-3848-82c0-796dae161744.roa Signing time: Mon 02 Jun 2025 01:00:49 +0000 ROA not before: Mon 02 Jun 2025 01:00:49 +0000 ROA not after: Sun 31 Aug 2025 01:00:49 +0000 asID: 27411 IP address blocks: 136.0.195.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 17 Jun 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:0d:6a:99:b4:ad:84:af:c3:b6:bf:12:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 2 01:00:49 2025 GMT Not After : Aug 31 01:00:49 2025 GMT Subject: CN=854765ec-8586-4f17-9052-73312a6b8f42 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:60:0d:17:67:47:cc:b2:9d:c6:92:81:5a:0e: 1a:84:c0:a6:23:f0:cf:a7:b4:0f:0e:57:a4:4f:ef: 32:d1:30:e5:a2:3b:32:0a:e8:82:04:90:9d:44:bd: 48:d3:87:ae:f9:0b:13:92:be:98:71:16:c5:74:38: 4e:01:70:a7:f3:3e:27:12:87:be:c3:cb:07:72:2d: 01:96:db:cf:84:d8:ea:4a:e7:39:28:84:62:de:87: 08:1b:6f:cf:3f:e3:40:5e:4a:04:f6:ae:b3:20:f0: 69:5d:83:71:51:c4:9a:51:53:23:44:b7:bf:80:7c: 51:30:d5:37:29:ae:bc:85:c4:91:2c:11:f9:d3:51: 41:d7:6d:5b:0c:cc:d2:98:ba:d3:1b:c4:ad:5c:38: 84:08:cf:5b:da:e6:04:c1:2b:48:05:1b:5b:91:a4: a5:f3:7c:77:d0:bd:8c:ac:2c:b5:82:5c:1a:0f:e6: 1f:79:47:c2:45:b0:6b:16:8c:cd:66:97:18:ad:aa: 6c:ae:43:9f:20:03:54:56:a9:9c:8a:60:e8:75:a7: f4:87:3c:32:27:cf:64:8c:d7:00:f8:f7:52:4c:a2: 7f:06:00:c3:a3:2f:3d:87:20:bd:ab:27:74:12:17: 51:63:c5:b5:3c:59:2c:e3:ff:13:3f:a9:61:74:d0: 10:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:79:F1:BE:4A:7B:C6:CA:48:21:9C:8E:FE:49:E1:AB:EB:6C:D1:A1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d031f20-4fc3-3848-82c0-796dae161744.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.195.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:34:14:a1:17:aa:c8:d6:87:ea:64:f2:25:bb:29:3f:0d:3a: d1:54:54:e4:fa:c9:13:bf:b6:37:62:6f:35:7c:65:b0:aa:f9: 1c:03:3e:d6:b3:1c:13:51:fc:66:06:8f:ed:f1:2c:ad:52:ea: 99:09:07:14:06:40:ff:b1:e6:bc:e7:1c:64:3a:98:bf:5d:31: 69:fc:b0:c6:f2:38:93:6f:ed:24:88:7b:42:ed:53:80:e5:3a: 04:38:cc:04:09:09:23:ae:cf:a9:93:43:97:7d:19:ba:83:2c: f5:75:6e:1d:cf:08:e9:1e:b6:ee:fc:47:30:48:e3:de:a0:72: 33:c8:2c:58:b9:08:91:21:f8:25:d1:fb:29:ab:74:56:03:bc: 74:ed:71:ee:8d:e6:d7:f1:46:7c:16:cb:96:93:7e:75:3b:c6: 6c:2a:43:f1:17:d1:97:b9:78:05:ef:af:69:a1:f2:01:34:0c: 76:b6:bf:d7:d9:ca:ab:75:a1:f7:d0:4b:f9:a6:ef:42:5b:67: 71:18:89:bb:65:8b:82:8e:63:38:02:08:f7:d9:29:cb:9f:3d: 84:18:e7:33:20:86:f3:a6:6e:5e:9b:0d:5e:73:aa:d4:cb:c4: 88:23:48:3d:dd:77:7f:3b:d7:83:74:3a:a7:0b:82:9f:8e:09: 37:77:83:4b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNapm0rYSvw7a/EoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk ODU0NzY1ZWMtODU4Ni00ZjE3LTkwNTItNzMzMTJhNmI4ZjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2ANF2dHzLKdxpKBWg4ahMCmI/DPp7QPDlek T+8y0TDlojsyCuiCBJCdRL1I04eu+QsTkr6YcRbFdDhOAXCn8z4nEoe+w8sHci0B ltvPhNjqSuc5KIRi3ocIG2/PP+NAXkoE9q6zIPBpXYNxUcSaUVMjRLe/gHxRMNU3 Ka68hcSRLBH501FB121bDMzSmLrTG8StXDiECM9b2uYEwStIBRtbkaSl83x30L2M rCy1glwaD+YfeUfCRbBrFozNZpcYrapsrkOfIANUVqmcimDodaf0hzwyJ89kjNcA +PdSTKJ/BgDDoy89hyC9qyd0EhdRY8W1PFks4/8TP6lhdNAQnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHF58b5Ke8bKSCGcjv5J4avrbNGhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWQwMzFmMjAtNGZjMy0z ODQ4LTgyYzAtNzk2ZGFlMTYxNzQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFE0FKEXqsjWh+pk8iW7KT8NOtFUVOT6yRO/tjdibzV8ZbCq+RwDPtaz HBNR/GYGj+3xLK1S6pkJBxQGQP+x5rznHGQ6mL9dMWn8sMbyOJNv7SSIe0LtU4Dl OgQ4zAQJCSOuz6mTQ5d9GbqDLPV1bh3PCOketu78RzBI496gcjPILFi5CJEh+CXR +ymrdFYDvHTtce6N5tfxRnwWy5aTfnU7xmwqQ/EX0Ze5eAXvr2mh8gE0DHa2v9fZ yqt1offQS/mm70JbZ3EYibtli4KOYzgCCPfZKcufPYQY5zMghvOmbl6bDV5zqtTL xIgjSD3dd38714N0OqcLgp+OCTd3g0s= -----END CERTIFICATE-----Generated at Mon Jun 16 14:42:55 2025 by rpki-client