$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7fc4cd5d-942e-333f-9447-2afa48d976bd.roa File: 7fc4cd5d-942e-333f-9447-2afa48d976bd.roa (raw, json) Hash identifier: oeNwj2oecs1cjrbpMcAELiIpJ9/GKsudQIjntEGesdg= Subject key identifier: 97:5C:AC:36:B1:7F:A5:96:F6:87:42:FE:58:C5:91:85:85:9A:FE:16 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AEF8BC965C5EF14658F710860 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7fc4cd5d-942e-333f-9447-2afa48d976bd.roa Signing time: Fri 22 Aug 2025 01:00:33 +0000 ROA not before: Fri 22 Aug 2025 01:00:33 +0000 ROA not after: Thu 20 Nov 2025 02:00:33 +0000 asID: 401152 IP address blocks: 136.0.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:ef:8b:c9:65:c5:ef:14:65:8f:71:08:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 22 01:00:33 2025 GMT Not After : Nov 20 02:00:33 2025 GMT Subject: CN=473a6f9b-4fb2-4f0a-850f-650d95b0f572 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:4b:ba:6c:e8:c2:8a:f6:32:72:52:52:7c:c3: 02:5a:2f:ff:6a:31:2e:63:48:4a:94:05:36:b5:86: 0c:1c:7d:f1:cb:87:4f:98:a4:44:40:42:5c:bb:94: ef:9b:90:63:51:03:05:51:85:25:51:8a:b5:70:ba: 77:14:9a:11:ff:e1:a5:a2:36:09:d5:00:4e:6e:3a: 8c:e4:ed:5c:c7:ff:c8:df:be:c4:b8:b7:a9:55:f2: 2f:ec:92:3a:a8:ab:93:b8:b4:95:bd:d8:37:c3:5d: a9:de:29:ae:c7:a9:9d:d9:7c:08:0f:18:34:36:7c: fc:06:83:1c:1a:21:88:a7:46:e9:a5:98:80:49:84: 94:d0:1e:40:cb:8f:0e:f8:36:06:b4:af:21:37:ed: e3:ae:ce:3c:c0:a0:e3:62:f4:ce:60:d0:cc:b8:6c: 45:fe:14:1b:36:b2:82:44:5b:3b:44:db:b9:8a:e7: ef:f9:95:b8:81:9f:84:73:d2:5d:a5:4f:f3:fc:fb: 44:2e:1b:6c:0d:a3:fb:61:c9:26:ac:f2:62:dc:eb: 56:5d:7b:08:d3:ca:ab:20:81:75:bb:9b:b1:26:8b: 5c:97:a2:a1:78:02:79:8f:f7:aa:c8:d8:64:81:6e: 61:a9:6c:61:1a:ec:c6:20:75:88:46:e1:09:e7:dd: 64:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:5C:AC:36:B1:7F:A5:96:F6:87:42:FE:58:C5:91:85:85:9A:FE:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7fc4cd5d-942e-333f-9447-2afa48d976bd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:1b:52:72:3f:a9:c0:a8:29:91:f2:ab:d0:75:01:77:f1:ba: 7c:2d:f8:39:9d:bc:33:c2:d1:5c:41:eb:a2:85:bf:60:c1:05: 1f:a8:65:bb:5c:2c:c8:ad:9e:76:83:6a:03:ee:c5:bf:b3:ed: 98:b2:27:7f:4c:3a:2a:c8:48:54:e0:66:b4:3e:6e:2d:1d:5b: 5e:16:d5:39:fd:b0:03:40:2a:93:66:72:db:81:fb:05:28:48: 24:69:d5:1d:f4:fc:71:d5:2f:96:75:1a:f7:0a:2f:b6:99:44: 56:56:05:29:5e:98:ae:c8:91:fb:9a:1f:3a:11:c3:ad:44:10: 49:36:71:66:f4:64:d9:2c:ed:9e:82:d9:68:96:b9:50:e0:c7: da:c9:c6:40:fd:72:c4:cd:48:82:7f:95:32:90:2a:67:40:a2: a0:13:e2:a8:12:09:9c:b0:78:7f:59:42:57:1a:57:01:ad:be: 5a:b5:35:c4:ec:b9:ac:c9:af:09:29:89:88:68:1c:ba:e7:de: 5c:1d:c4:d7:72:1e:64:51:af:d0:ba:87:30:28:04:33:77:c4: c6:a7:1d:71:b3:dd:2e:1d:6c:b7:1f:36:c8:a2:71:ca:69:a4: 05:03:79:cd:44:9e:ac:6f:1b:27:88:b8:37:59:49:45:07:2d: ef:58:21:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErvi8llxe8UZY9xCGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyMjAxMDAzM1oXDTI1MTEyMDAyMDAzM1owLzEtMCsGA1UEAxMk NDczYTZmOWItNGZiMi00ZjBhLTg1MGYtNjUwZDk1YjBmNTcyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUu6bOjCivYyclJSfMMCWi//ajEuY0hKlAU2 tYYMHH3xy4dPmKREQEJcu5Tvm5BjUQMFUYUlUYq1cLp3FJoR/+GlojYJ1QBObjqM 5O1cx//I377EuLepVfIv7JI6qKuTuLSVvdg3w12p3imux6md2XwIDxg0Nnz8BoMc GiGIp0bppZiASYSU0B5Ay48O+DYGtK8hN+3jrs48wKDjYvTOYNDMuGxF/hQbNrKC RFs7RNu5iufv+ZW4gZ+Ec9JdpU/z/PtELhtsDaP7YckmrPJi3OtWXXsI08qrIIF1 u5uxJotcl6KheAJ5j/eqyNhkgW5hqWxhGuzGIHWIRuEJ591kXwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJdcrDaxf6WW9odC/ljFkYWFmv4WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2ZjNGNkNWQtOTQyZS0z MzNmLTk0NDctMmFmYTQ4ZDk3NmJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA0bUnI/qcCoKZHyq9B1AXfxunwt+DmdvDPC0VxB66KFv2DBBR+oZbtc LMitnnaDagPuxb+z7ZiyJ39MOirISFTgZrQ+bi0dW14W1Tn9sANAKpNmctuB+wUo SCRp1R30/HHVL5Z1GvcKL7aZRFZWBSlemK7IkfuaHzoRw61EEEk2cWb0ZNks7Z6C 2WiWuVDgx9rJxkD9csTNSIJ/lTKQKmdAoqAT4qgSCZyweH9ZQlcaVwGtvlq1NcTs uazJrwkpiYhoHLrn3lwdxNdyHmRRr9C6hzAoBDN3xManHXGz3S4dbLcfNsiiccpp pAUDec1EnqxvGyeIuDdZSUUHLe9YIa8= -----END CERTIFICATE-----Generated at Sat Aug 23 16:03:06 2025 by rpki-client