$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa File: a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa (raw, json) Hash identifier: s6uV8JEBClRpkCg6WF5ql+snfJ+CZ2FGnfTiB8kJWvA= Subject key identifier: F3:3A:C0:24:9E:05:72:65:25:D2:40:A8:BD:01:40:48:A3:B5:AE:B7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A2EEAC55A83B69CB67E9D9840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 8881 IP address blocks: 136.0.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c5:5a:83:b6:9c:b6:7e:9d:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=89e61e8e-19ac-4013-81bd-1ff50543f95d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:c4:d1:45:60:03:30:28:c2:8c:5d:3f:da:93: 57:97:9e:f6:c4:c5:fc:29:d2:b3:00:6c:0d:ca:75: 33:5b:46:33:79:8e:fd:e4:08:a0:bb:e0:93:b9:73: a0:12:e2:8e:48:27:ca:dd:fc:13:c0:df:71:35:bb: 6d:00:fc:5a:7c:1c:b2:d1:f2:81:57:70:a3:53:e4: 8a:8b:43:f8:82:0b:68:ad:b4:45:a4:11:ac:20:5b: ea:93:14:70:9f:24:ac:ad:bb:98:e8:3f:62:7b:9d: 09:45:9f:67:3c:66:89:1a:d2:84:6d:6d:b0:f3:8e: 74:e9:59:58:c4:17:73:cd:fe:3f:b8:ea:98:fb:eb: 33:7b:63:65:5e:a0:e5:a6:38:71:6c:e7:66:a6:36: b7:6c:2b:22:a6:bf:0a:a5:b8:59:d1:3c:13:a9:ad: c6:a9:8e:a6:d8:f0:5c:21:a1:77:48:0a:af:75:39: 55:20:f0:22:14:94:44:9d:cb:6f:96:3b:13:ff:4f: 8e:a1:e8:b8:7a:7a:88:f8:e2:4a:eb:ae:95:65:aa: 48:fa:cc:27:2a:d0:ab:81:5e:00:7c:c0:55:d0:ee: d1:88:95:bb:68:b4:d1:ed:79:29:48:72:3d:08:44: 86:b4:34:1a:6a:18:3f:0f:b0:a6:64:a9:2d:5c:f1: bb:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3A:C0:24:9E:05:72:65:25:D2:40:A8:BD:01:40:48:A3:B5:AE:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:6e:f6:a5:d3:8b:23:c9:fb:d8:cc:b3:53:11:66:71:ce:d5: 6e:ed:ef:a8:7a:47:0b:ef:88:73:c9:50:da:14:bb:68:c3:3a: f9:b1:af:e1:c6:03:b9:ae:7c:ed:dc:e7:74:c7:d4:b3:a7:15: cc:df:12:00:2b:95:2b:df:52:aa:16:80:fb:0f:44:d8:94:00: 1d:84:c1:91:00:a1:84:75:0b:cd:f6:3c:a8:09:42:ad:0d:e7: 6a:98:2b:27:d6:5e:18:48:02:4c:bb:d2:f4:65:c0:08:91:08: c9:1b:6c:bc:48:fe:95:68:ff:74:35:e5:df:b3:f3:13:08:d2: 5b:c8:bb:d5:d7:49:b0:d9:e0:10:4a:0f:44:a5:85:6c:5d:be: c8:3c:60:96:5c:9f:64:b2:e1:1d:e8:16:ff:8b:83:12:f2:82: ff:00:52:86:2c:fc:f2:0c:60:84:cc:ab:29:c1:99:99:9c:55: 14:b1:f6:cc:a0:a6:0f:99:92:68:d5:8b:76:e3:28:ae:d3:80: 06:dd:30:10:fe:b9:da:05:fa:b7:0d:e9:4f:17:70:93:a4:99: e1:c2:8e:ee:66:ed:f1:89:2a:57:0d:72:51:41:4b:f0:b2:40: ca:24:91:57:3c:3c:ee:20:f1:6d:3d:6c:cf:de:70:ed:33:d1: 48:ee:41:83 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sVag7actn6dmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk ODllNjFlOGUtMTlhYy00MDEzLTgxYmQtMWZmNTA1NDNmOTVkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMTRRWADMCjCjF0/2pNXl572xMX8KdKzAGwN ynUzW0YzeY795Aigu+CTuXOgEuKOSCfK3fwTwN9xNbttAPxafByy0fKBV3CjU+SK i0P4ggtorbRFpBGsIFvqkxRwnySsrbuY6D9ie50JRZ9nPGaJGtKEbW2w84506VlY xBdzzf4/uOqY++sze2NlXqDlpjhxbOdmpja3bCsipr8KpbhZ0TwTqa3GqY6m2PBc IaF3SAqvdTlVIPAiFJREnctvljsT/0+Ooei4enqI+OJK666VZapI+swnKtCrgV4A fMBV0O7RiJW7aLTR7XkpSHI9CESGtDQaahg/D7CmZKktXPG7RQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPM6wCSeBXJlJdJAqL0BQEijta63MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMzYmM0YTEtYmVkMS0z ZWQ5LWE4MmEtN2YxZGZlYzQ5ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIpu9qXTiyPJ+9jMs1MRZnHO1W7t76h6RwvviHPJUNoUu2jDOvmxr+HG A7mufO3c53TH1LOnFczfEgArlSvfUqoWgPsPRNiUAB2EwZEAoYR1C832PKgJQq0N 52qYKyfWXhhIAky70vRlwAiRCMkbbLxI/pVo/3Q15d+z8xMI0lvIu9XXSbDZ4BBK D0SlhWxdvsg8YJZcn2Sy4R3oFv+LgxLygv8AUoYs/PIMYITMqynBmZmcVRSx9syg pg+ZkmjVi3bjKK7TgAbdMBD+udoF+rcN6U8XcJOkmeHCju5m7fGJKlcNclFBS/Cy QMokkVc8PO4g8W09bM/ecO0z0UjuQYM= -----END CERTIFICATE-----Generated at Sun Jun 15 04:52:41 2025 by rpki-client