$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da3d18b9-a8a3-33da-8d22-60a47f384f92.roa File: da3d18b9-a8a3-33da-8d22-60a47f384f92.roa (raw, json) Hash identifier: 323poVqZXZ3W2o3CntQlIFVYT9/RXijyrp3Z4N7fFdo= Subject key identifier: D7:C4:97:60:D6:92:83:4D:7D:C0:7C:4E:5B:F8:B0:8A:63:E6:A1:74 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AB19ED50545F3E64894377880 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da3d18b9-a8a3-33da-8d22-60a47f384f92.roa Signing time: Wed 30 Jul 2025 20:38:52 +0000 ROA not before: Wed 30 Jul 2025 20:38:52 +0000 ROA not after: Tue 28 Oct 2025 20:38:52 +0000 asID: 400402 IP address blocks: 136.0.5.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 07 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:b1:9e:d5:05:45:f3:e6:48:94:37:78:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 30 20:38:52 2025 GMT Not After : Oct 28 20:38:52 2025 GMT Subject: CN=c8dc244e-82ab-40d9-8533-253db22f95c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:a1:7f:b6:fd:bd:67:b8:89:39:17:ff:a9:20: 12:1b:5a:b4:74:88:c3:89:2c:5d:fa:a0:52:a9:de: 51:64:4a:54:e0:95:86:d7:cb:fa:0f:c4:8e:04:5e: ef:66:9c:67:17:4a:61:61:3c:7b:c0:e3:ab:97:9c: 32:d1:d8:3f:ba:b2:77:6b:17:3f:e4:66:c9:87:de: ec:03:9f:b3:5e:fb:5c:0e:98:da:ee:c7:69:94:96: a3:05:95:e3:c7:8b:34:06:24:9b:53:89:d3:8e:a6: 59:37:e2:2f:f5:0d:71:37:0c:f5:22:14:40:03:4e: 6e:a0:a8:ac:d0:88:d9:10:24:dd:92:3e:68:aa:f6: 71:4c:d9:55:d3:f3:c7:8b:c1:f2:b0:72:ec:df:dc: 26:e7:ab:b9:65:db:0b:37:11:26:82:f0:87:ac:74: 78:bc:7e:4c:d1:5a:e2:a6:30:09:1a:99:b4:ca:fa: 40:10:62:9d:dd:ff:5f:93:bd:bf:78:60:e3:5d:37: 5f:7e:30:69:0d:bc:4d:75:c1:f6:7e:76:5e:d4:15: 3e:e0:98:ad:7c:f3:a2:4c:9e:84:07:ec:05:af:3b: df:d3:f8:c2:92:ba:5d:d1:b6:0a:29:7f:8b:c8:f5: 62:47:fb:91:a3:c9:24:f8:d8:7c:1b:66:52:6f:14: 3e:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:C4:97:60:D6:92:83:4D:7D:C0:7C:4E:5B:F8:B0:8A:63:E6:A1:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da3d18b9-a8a3-33da-8d22-60a47f384f92.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.5.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c7:26:d2:2a:8c:e7:05:97:32:29:f5:38:1b:2a:18:dd:59: 13:c8:cd:99:fa:d3:d6:bf:a5:e7:b0:59:23:b1:0b:e3:a0:3a: 1b:40:fb:f3:f9:3e:64:50:b9:f8:5c:e1:c0:9d:f7:85:eb:7a: f8:80:b1:b9:60:6a:6b:f0:8d:c4:29:3e:0a:47:26:da:f6:b8: 51:3f:78:a4:e2:e1:4b:0e:5c:b0:cd:df:21:c5:a4:d1:32:47: 75:6c:72:fe:10:36:41:d3:79:ec:3a:2d:8f:2b:58:8c:4f:5d: 9c:2b:bc:53:c4:87:e4:88:04:3d:b2:6a:ee:8e:5d:52:e0:8a: cb:cb:3a:d9:f5:f0:78:4c:31:f1:17:07:5c:54:ac:cd:a3:7d: 05:ad:3a:ee:d6:44:69:73:31:f7:ad:dd:7b:a3:34:49:e2:4f: 32:a1:6c:49:00:6b:6f:7b:1b:e9:c1:f0:ab:90:8a:da:93:07: b7:a1:21:85:6f:d2:1d:0a:23:cd:02:af:67:10:2d:46:5b:21: 4f:a6:67:82:23:71:35:25:b0:04:77:ab:05:e6:e2:5a:60:37: c6:19:f9:e2:8b:6c:87:43:79:41:30:79:a0:b5:a7:4b:96:4e: 72:2d:2a:1b:a7:d4:e6:bf:b4:96:4d:83:8d:48:81:cf:ec:d2: d7:ef:48:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqxntUFRfPmSJQ3eIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDczMDIwMzg1MloXDTI1MTAyODIwMzg1MlowLzEtMCsGA1UEAxMk YzhkYzI0NGUtODJhYi00MGQ5LTg1MzMtMjUzZGIyMmY5NWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlqF/tv29Z7iJORf/qSASG1q0dIjDiSxd+qBS qd5RZEpU4JWG18v6D8SOBF7vZpxnF0phYTx7wOOrl5wy0dg/urJ3axc/5GbJh97s A5+zXvtcDpja7sdplJajBZXjx4s0BiSbU4nTjqZZN+Iv9Q1xNwz1IhRAA05uoKis 0IjZECTdkj5oqvZxTNlV0/PHi8HysHLs39wm56u5ZdsLNxEmgvCHrHR4vH5M0Vri pjAJGpm0yvpAEGKd3f9fk72/eGDjXTdffjBpDbxNdcH2fnZe1BU+4JitfPOiTJ6E B+wFrzvf0/jCkrpd0bYKKX+LyPViR/uRo8kk+Nh8G2ZSbxQ+twIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNfEl2DWkoNNfcB8Tlv4sIpj5qF0MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGEzZDE4YjktYThhMy0z M2RhLThkMjItNjBhNDdmMzg0ZjkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnHJtIqjOcFlzIp9TgbKhjdWRPIzZn609a/peewWSOxC+OgOhtA+/P5 PmRQufhc4cCd94XreviAsblgamvwjcQpPgpHJtr2uFE/eKTi4UsOXLDN3yHFpNEy R3Vscv4QNkHTeew6LY8rWIxPXZwrvFPEh+SIBD2yau6OXVLgisvLOtn18HhMMfEX B1xUrM2jfQWtOu7WRGlzMfet3XujNEniTzKhbEkAa297G+nB8KuQitqTB7ehIYVv 0h0KI80Cr2cQLUZbIU+mZ4IjcTUlsAR3qwXm4lpgN8YZ+eKLbIdDeUEweaC1p0uW TnItKhun1Oa/tJZNg41Igc/s0tfvSGU= -----END CERTIFICATE-----Generated at Wed Aug 6 16:03:24 2025 by rpki-client