$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa File: ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa (raw, json) Hash identifier: xe+VCoUQmb1Q4V8NHyJObvjqq8uitHV1xk/rWPqK488= Subject key identifier: C0:8B:97:F9:15:6F:17:20:3F:11:A5:9F:57:78:82:C4:3B:39:23:20 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A331B05D368BDE63EC8FA1E80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 9009 IP address blocks: 136.0.142.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 16 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:05:d3:68:bd:e6:3e:c8:fa:1e:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=7df521a2-0298-4a75-a18d-216e176dd100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:3f:56:cd:3c:6c:d9:f4:ae:d7:60:49:f4:63: d8:e9:16:c8:c8:4f:ad:c9:ff:b1:c7:fd:b2:0a:b9: d1:f7:82:39:b4:2d:28:04:3b:03:9a:81:9b:50:b5: f5:1b:38:b5:6e:57:b4:7b:2c:34:1f:c4:55:df:01: 36:dc:b6:ef:24:2c:c0:27:cf:fa:13:44:c7:cf:98: 6d:e1:8e:7c:af:c7:47:51:27:e3:40:c1:59:71:89: 2c:75:ab:1c:0b:a2:1e:32:fa:02:63:72:52:14:7a: 65:00:90:73:19:86:1c:63:7b:75:e8:cc:3c:f3:f0: 15:81:7a:53:10:8b:1d:33:cb:96:de:1b:dc:cc:3a: 45:3b:aa:ca:a1:c4:d2:61:f2:0f:54:ce:f0:c8:ca: 39:4d:48:93:c9:9c:fd:28:85:b8:2d:2d:07:1e:ae: b0:1e:6b:74:8c:83:85:71:b5:82:c7:e8:e1:5a:69: b0:06:f0:f6:a7:ef:00:00:2e:fa:d4:6c:c2:09:c8: b6:c6:48:61:28:d1:81:01:91:99:cb:eb:8a:36:e0: d1:6c:ee:e6:5f:81:ab:6c:bb:f8:ce:69:3c:8f:71: 01:c5:d4:8e:77:9f:2f:cc:17:15:36:85:2d:cd:b4: de:cb:ad:8c:f1:df:a9:73:2f:c6:dc:8c:d4:3a:2b: ce:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:8B:97:F9:15:6F:17:20:3F:11:A5:9F:57:78:82:C4:3B:39:23:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ce9fd2aa-c4d3-31e1-850e-a53c9cc5cc73.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.142.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 99:29:c2:e5:00:25:be:06:be:46:e2:ee:2a:a2:aa:67:5d:56: 5d:6f:ee:62:f0:fb:38:a9:5a:93:79:d3:1d:bc:05:6d:82:0f: b3:28:84:c5:04:86:ec:3f:e2:41:54:96:c8:02:19:01:07:ba: 45:5c:df:e5:04:02:f7:39:21:85:9b:a1:a7:16:bb:16:3d:be: 67:d2:0a:5a:2c:19:73:fb:63:ea:d1:6f:3c:48:a5:6f:14:45: 8c:ac:f5:d3:5d:e9:e0:90:e2:dc:0b:65:9d:c5:ca:25:f5:e5: 1c:fb:7f:87:59:4b:c4:a6:f0:f2:65:8e:47:93:4b:a4:83:12: ca:c5:5f:3e:a3:24:80:62:2a:06:d5:72:b2:f9:ff:43:47:cf: 54:85:a4:d9:2b:18:8d:68:cf:1a:87:e7:ab:83:f3:56:4b:ee: 3b:e7:a0:f5:50:b4:17:f1:ae:7d:29:6b:14:dd:61:d3:99:dd: 57:57:7e:39:96:bc:82:4f:5f:92:35:80:e1:1f:7f:58:00:54: 6f:b5:10:cf:58:e4:b2:1f:fb:33:86:b0:b2:76:eb:ad:a9:17: 0b:cd:c6:01:22:42:c5:ff:39:96:36:6c:c9:2d:95:c3:cc:c3: a1:0a:67:f8:d5:1e:19:b9:d0:23:ef:76:3b:f8:40:2f:51:34: e8:e8:7b:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGwXTaL3mPsj6HoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk N2RmNTIxYTItMDI5OC00YTc1LWExOGQtMjE2ZTE3NmRkMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnT9WzTxs2fSu12BJ9GPY6RbIyE+tyf+xx/2y CrnR94I5tC0oBDsDmoGbULX1Gzi1ble0eyw0H8RV3wE23LbvJCzAJ8/6E0THz5ht 4Y58r8dHUSfjQMFZcYksdascC6IeMvoCY3JSFHplAJBzGYYcY3t16Mw88/AVgXpT EIsdM8uW3hvczDpFO6rKocTSYfIPVM7wyMo5TUiTyZz9KIW4LS0HHq6wHmt0jIOF cbWCx+jhWmmwBvD2p+8AAC761GzCCci2xkhhKNGBAZGZy+uKNuDRbO7mX4GrbLv4 zmk8j3EBxdSOd58vzBcVNoUtzbTey62M8d+pcy/G3IzUOivONQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMCLl/kVbxcgPxGln1d4gsQ7OSMgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2U5ZmQyYWEtYzRkMy0z MWUxLTg1MGUtYTUzYzljYzVjYzczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJkpwuUAJb4Gvkbi7iqiqmddVl1v7mLw+zipWpN50x28BW2CD7MohMUE huw/4kFUlsgCGQEHukVc3+UEAvc5IYWboacWuxY9vmfSClosGXP7Y+rRbzxIpW8U RYys9dNd6eCQ4twLZZ3FyiX15Rz7f4dZS8Sm8PJljkeTS6SDEsrFXz6jJIBiKgbV crL5/0NHz1SFpNkrGI1ozxqH56uD81ZL7jvnoPVQtBfxrn0paxTdYdOZ3VdXfjmW vIJPX5I1gOEff1gAVG+1EM9Y5LIf+zOGsLJ2662pFwvNxgEiQsX/OZY2bMktlcPM w6EKZ/jVHhm50CPvdjv4QC9RNOjoe/M= -----END CERTIFICATE-----Generated at Sun Jun 15 17:43:56 2025 by rpki-client