$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/384b2a4b-a10b-33b8-95c0-ca3a0cf19cda.roa File: 384b2a4b-a10b-33b8-95c0-ca3a0cf19cda.roa (raw, json) Hash identifier: yBfLcCAVu64rtQ9q0Vw8z3RF/qwklXnmAY8xBJ8Xzi4= Subject key identifier: DD:4C:9A:7D:6F:99:AC:5D:41:B4:5B:03:5E:85:C7:8C:8E:E4:2E:2A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB73782A6B05D7500846FF180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/384b2a4b-a10b-33b8-95c0-ca3a0cf19cda.roa Signing time: Fri 01 Aug 2025 20:45:32 +0000 ROA not before: Fri 01 Aug 2025 20:45:32 +0000 ROA not after: Thu 30 Oct 2025 20:45:32 +0000 asID: 401152 IP address blocks: 136.0.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 06 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b7:37:82:a6:b0:5d:75:00:84:6f:f1:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 1 20:45:32 2025 GMT Not After : Oct 30 20:45:32 2025 GMT Subject: CN=1f92fd7c-ee9f-46bd-b3d4-a35729fae6c9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:6a:e2:aa:60:8a:04:13:e5:9b:58:c2:d1:62: f0:43:69:3e:17:fa:75:15:29:e7:9c:01:cd:2b:f1: 14:b2:19:ed:f4:d6:b8:71:92:d6:db:ca:61:76:42: c0:48:68:72:90:49:96:e2:59:95:bb:ba:e8:4b:e3: b7:71:1f:4d:a2:da:0a:29:2d:72:af:87:f9:3c:cb: f0:a0:af:8a:7c:6f:90:ea:ec:0f:e9:e0:00:da:b3: 2e:1a:db:44:b7:b0:ca:8a:38:ae:42:f7:9e:91:43: 49:9f:32:51:0e:ec:4b:5b:04:86:58:e5:b3:8b:e4: d9:f4:29:be:f3:aa:f8:34:3d:06:b3:80:32:81:79: 0b:14:d0:70:75:08:9b:04:45:dc:b3:ea:70:48:04: 87:a4:07:66:d0:16:4e:99:e5:52:64:6e:54:c9:c2: bd:b6:e1:17:72:e2:64:74:5f:43:07:d0:73:17:54: 3b:55:a3:cf:af:ba:17:c8:5d:f7:1f:0c:00:68:5f: 99:3b:05:28:a8:4c:6e:aa:18:84:e9:1b:7d:92:75: 9a:39:25:6a:76:65:0f:cc:dd:3d:69:82:44:f4:d9: f4:ec:75:10:ae:74:d6:ca:e4:0e:a8:9b:8c:38:1a: 28:48:df:20:fc:23:9b:1e:2a:5a:8c:84:d9:62:02: 29:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:4C:9A:7D:6F:99:AC:5D:41:B4:5B:03:5E:85:C7:8C:8E:E4:2E:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/384b2a4b-a10b-33b8-95c0-ca3a0cf19cda.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 30:ca:22:50:6c:33:83:62:4f:dd:95:5c:82:17:65:a5:5b:db: 07:a1:82:03:14:91:b9:86:c4:d3:52:7e:94:9b:17:c6:87:af: 7a:71:8a:93:9a:be:60:0a:09:c7:3b:cc:5c:87:fd:69:c8:b1: 72:ac:74:e1:e8:5f:b1:2e:d3:e2:07:4c:63:70:f3:73:de:97: c0:b0:3a:d8:ea:8b:35:42:53:cd:3c:ce:2d:07:bc:9f:d8:5c: 0f:db:0f:ca:db:01:51:fe:ac:a3:46:d9:c9:94:d2:68:5b:97: ba:cb:44:40:92:ce:4c:ee:ba:f0:87:e5:1c:dc:7d:d6:67:7b: c1:9a:e0:5b:df:84:a5:6c:dc:3b:c0:ab:72:ad:6f:0d:a5:1c: 3d:bc:f2:13:54:13:97:f0:43:04:21:43:a8:19:14:6a:29:c8: 60:87:45:03:97:d0:b6:f9:f4:01:cb:a6:5c:ce:2d:04:37:b0: 3d:4d:c3:fc:4f:1a:dc:b8:55:16:19:3a:73:ca:88:5b:aa:ea: 5f:84:72:de:ff:8a:dc:7b:35:cf:eb:21:96:5e:1b:28:9c:b0: 90:3d:a6:0c:57:19:a8:53:d5:f4:e9:9c:20:2b:b6:a6:6b:47: 96:f7:c6:59:3f:4f:f8:58:3d:ad:59:94:bc:3b:3b:1e:ec:f6: cf:61:3e:5f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq3N4KmsF11AIRv8YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgwMTIwNDUzMloXDTI1MTAzMDIwNDUzMlowLzEtMCsGA1UEAxMk MWY5MmZkN2MtZWU5Zi00NmJkLWIzZDQtYTM1NzI5ZmFlNmM5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2riqmCKBBPlm1jC0WLwQ2k+F/p1FSnnnAHN K/EUshnt9Na4cZLW28phdkLASGhykEmW4lmVu7roS+O3cR9NotoKKS1yr4f5PMvw oK+KfG+Q6uwP6eAA2rMuGttEt7DKijiuQveekUNJnzJRDuxLWwSGWOWzi+TZ9Cm+ 86r4ND0Gs4AygXkLFNBwdQibBEXcs+pwSASHpAdm0BZOmeVSZG5UycK9tuEXcuJk dF9DB9BzF1Q7VaPPr7oXyF33HwwAaF+ZOwUoqExuqhiE6Rt9knWaOSVqdmUPzN09 aYJE9Nn07HUQrnTWyuQOqJuMOBooSN8g/CObHipajITZYgIpXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN1Mmn1vmaxdQbRbA16Fx4yO5C4qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzg0YjJhNGItYTEwYi0z M2I4LTk1YzAtY2EzYTBjZjE5Y2RhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADDKIlBsM4NiT92VXIIXZaVb2wehggMUkbmGxNNSfpSbF8aHr3pxipOa vmAKCcc7zFyH/WnIsXKsdOHoX7Eu0+IHTGNw83Pel8CwOtjqizVCU808zi0HvJ/Y XA/bD8rbAVH+rKNG2cmU0mhbl7rLRECSzkzuuvCH5RzcfdZne8Ga4FvfhKVs3DvA q3Ktbw2lHD288hNUE5fwQwQhQ6gZFGopyGCHRQOX0Lb59AHLplzOLQQ3sD1Nw/xP Gty4VRYZOnPKiFuq6l+Ect7/itx7Nc/rIZZeGyicsJA9pgxXGahT1fTpnCArtqZr R5b3xlk/T/hYPa1ZlLw7Ox7s9s9hPl8= -----END CERTIFICATE-----Generated at Mon Aug 4 19:13:19 2025 by rpki-client