$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/021cbba9-511f-3ffe-afac-6ac1b5c60499.roa File: 021cbba9-511f-3ffe-afac-6ac1b5c60499.roa (raw, json) Hash identifier: zHlg9DbLYKBFfOkTS2mIUD6zhBQS0BqRMRxgplP3EiA= Subject key identifier: 64:FC:72:7B:CC:B6:0D:7B:63:9C:26:00:F9:BF:61:3A:7C:02:17:A3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AEF8BC9AA9C94DA029EF256E0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/021cbba9-511f-3ffe-afac-6ac1b5c60499.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 401152 IP address blocks: 136.0.33.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c9:aa:9c:94:da:02:9e:f2:56:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=074e532c-b588-440d-bd20-82687e239ae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:ff:1c:b6:54:7b:69:0a:a3:be:e7:c1:c9:b2: 36:ca:21:66:76:b1:76:e0:12:e8:f1:7c:10:89:14: ca:f0:a7:e6:12:66:19:d4:e4:61:0a:78:4d:1d:25: de:b0:06:0a:06:1c:ea:45:f3:77:3a:6b:01:6b:0d: 69:86:dc:73:1e:6f:12:8c:75:0e:ff:0c:e4:e6:45: 9d:83:68:a8:df:76:fd:04:70:3b:ce:ca:13:0a:20: 87:b4:d5:fd:5d:e0:53:9e:e2:17:bb:1d:3c:ff:9d: 95:6a:46:e0:2f:31:eb:e9:ff:11:2c:38:d3:b2:14: 49:3d:20:12:4a:5f:c0:7f:af:a2:e9:2f:0d:e8:9a: 70:76:73:e5:a9:d8:30:72:89:31:ad:45:84:e1:02: b2:96:ef:09:db:98:70:48:4e:cf:b2:7a:57:fc:4b: 37:5a:98:50:59:b7:d5:9b:54:2a:23:71:eb:95:cf: 0f:75:d4:6a:9b:8c:f4:01:b1:a5:89:e7:d8:27:33: 8c:dd:f2:32:a2:5f:75:37:71:67:65:4e:eb:9a:d7: ce:66:5d:71:a4:e4:66:57:b3:ff:45:d2:f7:91:44: c6:30:e0:66:b2:96:7a:98:74:e0:05:be:bf:41:b0: 9f:40:08:40:97:c1:8f:24:b0:8f:7d:53:b9:be:d3: 0e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:FC:72:7B:CC:B6:0D:7B:63:9C:26:00:F9:BF:61:3A:7C:02:17:A3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/021cbba9-511f-3ffe-afac-6ac1b5c60499.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.33.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:86:8e:8f:81:a6:d9:6a:25:11:e1:a4:d8:7f:42:21:8f:f3: 79:48:29:cb:32:c0:04:8a:fb:be:93:3c:c0:a4:c5:90:f9:d9: 17:31:08:41:6f:1a:d3:04:f4:df:57:14:00:31:55:83:86:ca: 73:4c:dc:0d:c2:7c:44:82:a0:1a:ab:d8:5a:21:0e:82:cf:14: 9a:5b:e1:f9:67:7a:75:48:4d:36:33:57:2c:bb:a3:97:f9:84: 7e:5c:3d:2e:b7:c5:90:54:2d:90:f7:92:5f:a3:f5:72:ef:56: 7f:3b:09:8f:24:d0:11:8b:d2:73:d0:fb:1a:fe:6f:2b:23:6d: aa:2d:f0:12:fa:ba:53:b6:9e:45:bd:38:4d:6d:b0:7e:9e:5c: 85:3e:11:cc:62:cf:ee:2d:79:37:d7:08:3e:ed:7a:d6:aa:64: 18:68:d9:b0:88:38:70:a5:6f:23:71:7b:53:97:32:fb:7c:ce: 3b:d2:c6:a4:82:0e:59:53:fc:6c:07:0b:76:45:50:19:1a:a8: f1:7e:1b:07:4b:5f:ac:10:0d:26:25:dd:f7:1d:b4:83:c4:04: c8:e0:53:fb:3f:4b:44:96:25:4e:7e:f9:06:64:93:5d:2b:33: 54:fc:a2:16:78:f4:3b:c2:37:dd:20:c8:aa:31:96:64:5d:0f: 4e:aa:d5:c8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8mqnJTaAp7yVuAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk MDc0ZTUzMmMtYjU4OC00NDBkLWJkMjAtODI2ODdlMjM5YWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP8ctlR7aQqjvufBybI2yiFmdrF24BLo8XwQ iRTK8KfmEmYZ1ORhCnhNHSXesAYKBhzqRfN3OmsBaw1phtxzHm8SjHUO/wzk5kWd g2io33b9BHA7zsoTCiCHtNX9XeBTnuIXux08/52VakbgLzHr6f8RLDjTshRJPSAS Sl/Af6+i6S8N6JpwdnPlqdgwcokxrUWE4QKylu8J25hwSE7PsnpX/Es3WphQWbfV m1QqI3Hrlc8PddRqm4z0AbGliefYJzOM3fIyol91N3FnZU7rmtfOZl1xpORmV7P/ RdL3kUTGMOBmspZ6mHTgBb6/QbCfQAhAl8GPJLCPfVO5vtMO0QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGT8cnvMtg17Y5wmAPm/YTp8AhejMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMDIxY2JiYTktNTExZi0z ZmZlLWFmYWMtNmFjMWI1YzYwNDk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAhMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHiGjo+BptlqJRHhpNh/QiGP83lIKcsywASK+76TPMCkxZD52RcxCEFv GtME9N9XFAAxVYOGynNM3A3CfESCoBqr2FohDoLPFJpb4flnenVITTYzVyy7o5f5 hH5cPS63xZBULZD3kl+j9XLvVn87CY8k0BGL0nPQ+xr+bysjbaot8BL6ulO2nkW9 OE1tsH6eXIU+Ecxiz+4teTfXCD7tetaqZBho2bCIOHClbyNxe1OXMvt8zjvSxqSC DllT/GwHC3ZFUBkaqPF+GwdLX6wQDSYl3fcdtIPEBMjgU/s/S0SWJU5++QZkk10r M1T8ohZ49DvCN90gyKoxlmRdD06q1cg= -----END CERTIFICATE-----Generated at Sat Aug 23 13:01:06 2025 by rpki-client