$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8402b6cb-4bfe-3644-8344-b410b91d3f19.roa File: 8402b6cb-4bfe-3644-8344-b410b91d3f19.roa (raw, json) Hash identifier: avNY75BANFIL+yHSwF5lDFP7+hy0NyPI4hlChO48gZ0= Subject key identifier: EB:0C:D4:05:46:10:14:CA:28:30:A7:BF:8B:A6:78:D8:20:ED:AD:8F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A348015EEC12A89E1F8BC7A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8402b6cb-4bfe-3644-8344-b410b91d3f19.roa Signing time: Mon 16 Jun 2025 01:00:49 +0000 ROA not before: Mon 16 Jun 2025 01:00:49 +0000 ROA not after: Sun 14 Sep 2025 01:00:49 +0000 asID: 401152 IP address blocks: 136.0.234.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 02 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:34:80:15:ee:c1:2a:89:e1:f8:bc:7a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 16 01:00:49 2025 GMT Not After : Sep 14 01:00:49 2025 GMT Subject: CN=4d66fde0-c37f-42e8-945f-58365ec63fe6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b7:cb:14:c3:9d:41:89:58:a5:91:05:72:87: 8d:3b:95:8b:cd:6b:eb:7a:58:3f:00:94:01:15:ee: 9a:df:99:11:b2:93:15:1a:bd:05:08:42:21:5d:52: c0:d0:f7:7e:4d:b8:99:ef:74:ff:b9:1c:6d:ff:39: 51:f2:27:39:79:c7:25:7b:8c:81:12:db:a5:48:e6: 19:65:37:ed:ee:c6:8a:45:34:95:c8:49:9e:0c:6a: f3:fe:53:d7:2b:fe:de:f1:9c:e5:b7:31:44:cd:f1: fa:94:d5:65:93:f6:0b:74:cf:3c:1c:67:68:d6:d5: a6:82:86:81:0a:79:9a:83:d9:d0:97:ab:6f:1d:83: 07:bf:11:15:04:17:db:c1:cf:39:cf:a1:7c:97:08: d5:bb:0e:4b:de:35:35:7b:61:7d:65:b6:6b:54:5c: dc:f0:01:79:d7:30:61:7f:e1:dc:7d:47:b2:f5:04: 1c:f8:38:93:90:fb:aa:0d:ba:35:89:a3:1f:57:71: 51:82:73:0a:ee:88:c6:f7:1b:98:61:db:a0:e0:9b: 8d:b0:8f:9a:3c:29:9b:d2:c2:20:db:66:5e:64:42: c5:2d:d3:64:41:88:6c:7f:c8:f3:d6:1b:f7:c2:2b: a5:ea:19:a6:77:a8:f0:17:d6:f0:f3:3f:08:b8:4c: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:0C:D4:05:46:10:14:CA:28:30:A7:BF:8B:A6:78:D8:20:ED:AD:8F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8402b6cb-4bfe-3644-8344-b410b91d3f19.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.234.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9c:c3:bf:23:85:66:7d:ba:72:b6:7a:05:3d:bc:b6:47:5b:c8: 86:55:23:ea:4b:33:3e:67:54:d3:8d:ac:62:b2:22:45:fd:92: db:27:dd:d6:b3:d3:83:bf:48:b4:17:31:5e:49:1a:b5:c1:2a: 53:98:b3:d5:33:99:0b:6e:de:f3:e0:88:f6:99:cf:d3:48:71: 05:e1:4a:ee:25:e4:33:46:4d:64:9e:83:0b:3a:62:54:e0:02: 5d:38:65:7c:7d:50:cc:a9:5e:b0:23:cc:6b:55:f9:6d:19:ba: 66:0e:91:77:8a:a7:c5:d9:09:17:60:5c:62:fc:92:53:40:12: 35:04:1e:9d:fc:43:b1:ff:27:6a:d8:df:33:ef:ad:65:2f:03: a1:96:20:8d:8d:34:b4:64:af:2a:5b:be:4c:e4:69:2a:0f:07: 24:ad:fc:be:52:e2:47:ec:ee:fa:af:ee:c0:40:75:dc:69:44: 7c:92:b2:74:ad:02:ad:c5:1c:fc:77:91:96:ba:49:bf:d2:ac: a3:5f:44:4d:2a:68:62:b6:47:b2:91:bd:99:99:98:e7:35:92: 82:7b:17:2d:9f:7f:f4:0e:cf:1c:d6:62:e5:57:ce:02:9a:64: 33:14:6c:84:3c:19:65:e5:00:e0:05:1f:7e:3b:f0:dd:56:9c: 71:9b:4a:8b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo0gBXuwSqJ4fi8egAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNjAxMDA0OVoXDTI1MDkxNDAxMDA0OVowLzEtMCsGA1UEAxMk NGQ2NmZkZTAtYzM3Zi00MmU4LTk0NWYtNTgzNjVlYzYzZmU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7fLFMOdQYlYpZEFcoeNO5WLzWvrelg/AJQB Fe6a35kRspMVGr0FCEIhXVLA0Pd+TbiZ73T/uRxt/zlR8ic5eccle4yBEtulSOYZ ZTft7saKRTSVyEmeDGrz/lPXK/7e8ZzltzFEzfH6lNVlk/YLdM88HGdo1tWmgoaB Cnmag9nQl6tvHYMHvxEVBBfbwc85z6F8lwjVuw5L3jU1e2F9ZbZrVFzc8AF51zBh f+HcfUey9QQc+DiTkPuqDbo1iaMfV3FRgnMK7ojG9xuYYdug4JuNsI+aPCmb0sIg 22ZeZELFLdNkQYhsf8jz1hv3wiul6hmmd6jwF9bw8z8IuEwfCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOsM1AVGEBTKKDCnv4umeNgg7a2PMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODQwMmI2Y2ItNGJmZS0z NjQ0LTgzNDQtYjQxMGI5MWQzZjE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADqMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJzDvyOFZn26crZ6BT28tkdbyIZVI+pLMz5nVNONrGKyIkX9ktsn3daz 04O/SLQXMV5JGrXBKlOYs9UzmQtu3vPgiPaZz9NIcQXhSu4l5DNGTWSegws6YlTg Al04ZXx9UMypXrAjzGtV+W0ZumYOkXeKp8XZCRdgXGL8klNAEjUEHp38Q7H/J2rY 3zPvrWUvA6GWII2NNLRkrypbvkzkaSoPBySt/L5S4kfs7vqv7sBAddxpRHySsnSt Aq3FHPx3kZa6Sb/SrKNfRE0qaGK2R7KRvZmZmOc1koJ7Fy2ff/QOzxzWYuVXzgKa ZDMUbIQ8GWXlAOAFH3478N1WnHGbSos= -----END CERTIFICATE-----Generated at Tue Jul 1 09:39:11 2025 by rpki-client