$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29ab2b6d-f2c1-32f2-8dd7-d86ecffa00e0.roa File: 29ab2b6d-f2c1-32f2-8dd7-d86ecffa00e0.roa (raw, json) Hash identifier: 9VtLucrMJrGqVMsLRFVj7cI0p1THe9kSze1PvYld/uI= Subject key identifier: 59:6F:0B:56:73:C0:A2:54:42:6A:91:72:7E:D1:11:56:71:A4:34:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849CFFF75DECB4D481932CE7240 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29ab2b6d-f2c1-32f2-8dd7-d86ecffa00e0.roa Signing time: Sun 11 May 2025 01:00:47 +0000 ROA not before: Sun 11 May 2025 01:00:47 +0000 ROA not after: Sat 09 Aug 2025 01:00:47 +0000 asID: 44477 IP address blocks: 136.0.155.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:cf:ff:75:de:cb:4d:48:19:32:ce:72:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 11 01:00:47 2025 GMT Not After : Aug 9 01:00:47 2025 GMT Subject: CN=62ecf2ad-d9fe-4229-984e-35a2ea0b5c3f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:2b:52:a1:c9:79:fa:e3:d1:06:66:26:32:8a: 9e:db:8d:78:a6:0b:bb:15:a7:3b:57:3f:5c:39:41: 6a:af:a6:ca:84:f3:06:4a:34:08:9b:54:05:5b:5b: f7:f4:b3:c8:90:7c:f5:6d:55:0e:67:0f:72:b8:ca: 0b:32:8d:aa:5a:5d:6a:6e:b5:1e:c6:4c:e1:0d:bc: f1:a0:04:00:91:55:f4:6e:f7:2f:3e:7c:fc:2c:b8: 1d:f1:a3:b6:b7:9e:6d:be:e1:c4:cf:60:11:62:5c: 78:ce:4d:04:59:7c:98:b0:23:fe:b6:39:a9:b9:fc: 0d:5a:4d:8f:42:21:09:e9:81:c4:0a:7b:b6:97:ed: 88:d2:cc:52:c5:3d:58:84:01:3d:ca:0d:38:81:3d: 62:65:23:aa:a3:1d:17:f3:e1:7b:27:c4:6b:d2:1c: 2a:5c:b8:09:a5:9b:c0:0c:ea:87:a2:9e:fb:56:51: 01:93:ad:88:37:df:74:41:7a:47:77:4c:7a:91:cb: eb:69:32:43:99:89:f2:df:16:02:a5:c6:58:48:18: 1f:3a:7d:62:c7:0b:63:a0:4a:78:31:34:66:eb:47: e2:e0:d4:59:ab:db:44:4d:aa:d3:05:ca:7c:ff:8a: 3b:a8:2a:04:41:cc:71:d1:7d:9b:7e:b2:03:bd:06: 10:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:6F:0B:56:73:C0:A2:54:42:6A:91:72:7E:D1:11:56:71:A4:34:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/29ab2b6d-f2c1-32f2-8dd7-d86ecffa00e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.155.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 88:90:15:e6:c2:f1:f5:42:6a:70:4f:80:3e:92:70:b3:c4:e5: d1:b4:73:3e:18:0a:d0:76:40:3d:c4:10:c0:c6:f5:44:d3:3d: 50:be:8b:bc:22:2b:a9:38:a9:ee:af:33:80:8f:93:4c:9d:e1: 3b:e7:93:7c:ed:c2:70:8d:4b:ca:13:8f:6c:02:74:ea:fb:da: 60:04:a6:15:1e:ec:d3:d5:b4:fc:42:1a:54:8b:b5:50:53:3e: 64:94:92:ac:da:47:16:4b:1b:cf:8c:5b:85:eb:c3:71:3e:4d: 09:a3:9b:0a:f6:ee:98:83:5b:a8:b5:8e:f6:c4:e5:93:de:23: ff:cf:d3:79:8f:d4:0d:39:22:be:45:ef:fa:ad:52:c4:b4:67: 7f:79:45:78:7c:ab:d8:ca:76:6b:43:27:70:f9:3d:cb:6c:b0: 83:0c:1f:c0:eb:cd:6b:12:ae:92:f8:f5:37:ca:10:d9:b5:3c: ac:c9:c3:0f:24:84:b5:06:2d:79:57:2e:e1:e7:3f:f2:36:8b: 3c:bf:5e:47:69:b0:b7:b7:a2:e1:e7:a0:53:38:7a:c9:d0:b3: 4f:2f:6b:4a:24:a9:1f:f4:70:91:10:3a:4e:f0:a7:46:56:37: 1f:64:51:e2:f0:42:7f:99:2d:65:eb:da:23:93:0a:a1:64:7a: 24:a2:c9:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnP/3Xey01IGTLOckAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUxMTAxMDA0N1oXDTI1MDgwOTAxMDA0N1owLzEtMCsGA1UEAxMk NjJlY2YyYWQtZDlmZS00MjI5LTk4NGUtMzVhMmVhMGI1YzNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiStSocl5+uPRBmYmMoqe2414pgu7Fac7Vz9c OUFqr6bKhPMGSjQIm1QFW1v39LPIkHz1bVUOZw9yuMoLMo2qWl1qbrUexkzhDbzx oAQAkVX0bvcvPnz8LLgd8aO2t55tvuHEz2ARYlx4zk0EWXyYsCP+tjmpufwNWk2P QiEJ6YHECnu2l+2I0sxSxT1YhAE9yg04gT1iZSOqox0X8+F7J8Rr0hwqXLgJpZvA DOqHop77VlEBk62IN990QXpHd0x6kcvraTJDmYny3xYCpcZYSBgfOn1ixwtjoEp4 MTRm60fi4NRZq9tETarTBcp8/4o7qCoEQcxx0X2bfrIDvQYQDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFlvC1ZzwKJUQmqRcn7REVZxpDQgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjlhYjJiNmQtZjJjMS0z MmYyLThkZDctZDg2ZWNmZmEwMGUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACbMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIiQFebC8fVCanBPgD6ScLPE5dG0cz4YCtB2QD3EEMDG9UTTPVC+i7wi K6k4qe6vM4CPk0yd4Tvnk3ztwnCNS8oTj2wCdOr72mAEphUe7NPVtPxCGlSLtVBT PmSUkqzaRxZLG8+MW4Xrw3E+TQmjmwr27piDW6i1jvbE5ZPeI//P03mP1A05Ir5F 7/qtUsS0Z395RXh8q9jKdmtDJ3D5PctssIMMH8DrzWsSrpL49TfKENm1PKzJww8k hLUGLXlXLuHnP/I2izy/XkdpsLe3ouHnoFM4esnQs08va0okqR/0cJEQOk7wp0ZW Nx9kUeLwQn+ZLWXr2iOTCqFkeiSiyS0= -----END CERTIFICATE-----Generated at Sun Jun 15 05:02:21 2025 by rpki-client