$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa File: 9e945d0e-3397-3db2-8c77-78d048e45730.roa (raw, json) Hash identifier: WruVTu8FGl7VAco8k/zKqKl3Awl5dHgN2K8cwr1MkAE= Subject key identifier: C5:04:E1:41:5D:95:60:E0:23:30:CA:09:56:32:D9:D8:00:F3:B8:76 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A331B0611BC63F0E06AF9E6C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa Signing time: Sun 15 Jun 2025 13:01:02 +0000 ROA not before: Sun 15 Jun 2025 13:01:02 +0000 ROA not after: Sat 13 Sep 2025 13:01:02 +0000 asID: 9009 IP address blocks: 136.0.154.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 30 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:33:1b:06:11:bc:63:f0:e0:6a:f9:e6:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 15 13:01:02 2025 GMT Not After : Sep 13 13:01:02 2025 GMT Subject: CN=dad227fd-fb9f-4da9-814d-076f4e67a840 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:9d:fe:f2:af:76:c6:8f:53:f7:bd:0a:3b: 26:4a:7e:28:e1:fd:d3:e0:13:2a:37:59:a5:7c:b0: d1:1f:d7:b9:e8:7a:df:ea:c2:60:67:1b:56:04:4d: cb:a7:d5:20:17:26:99:a4:06:e2:73:fa:15:23:a4: 84:56:e7:82:7b:55:dd:ac:f8:bd:cd:3a:4d:c8:ea: 59:ef:87:19:1b:c6:dc:19:57:32:0c:48:d9:5b:79: 2f:a6:d3:1a:c2:90:72:52:69:7c:72:ce:af:56:3a: ff:f6:5b:60:4a:97:c7:5b:4d:b8:8a:8c:85:40:77: 7f:5a:10:a6:82:f8:52:b5:77:e3:38:b6:e5:ce:d3: 72:c6:20:aa:54:19:cd:17:df:59:29:e3:ce:f7:3b: 5a:29:9b:f7:f6:ae:f2:fb:99:12:33:e6:00:89:c7: da:25:57:f0:2e:d8:1a:7a:fc:a8:10:3d:ed:b6:db: 89:42:01:87:30:8d:e1:58:2b:8a:ca:f2:09:0c:47: 40:7c:2c:42:45:32:33:76:45:84:ac:7b:88:13:2e: 9c:ed:28:6e:b5:63:cc:bc:29:fb:57:4f:00:33:16: bc:1c:ce:a7:8c:71:d3:ad:40:0d:68:ab:8c:f4:25: ff:05:77:40:3f:9a:a3:d7:5a:bb:84:5d:80:af:c5: 98:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:04:E1:41:5D:95:60:E0:23:30:CA:09:56:32:D9:D8:00:F3:B8:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9e945d0e-3397-3db2-8c77-78d048e45730.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.154.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:2c:e1:07:bb:6c:4d:f2:73:7c:95:67:f7:cb:e2:94:ad:a6: c8:cb:8f:48:87:7e:b2:c2:51:b0:fe:2c:6d:9c:b4:2e:b1:23: 76:9e:d6:e2:ae:db:30:ac:6a:e6:be:38:92:01:34:d0:fe:97: 24:56:5f:00:86:db:fd:11:a0:c2:c5:fe:86:fa:e0:84:d0:a0: ee:95:84:87:f4:3c:f3:24:51:1f:bf:78:a8:a5:df:67:da:22: e4:35:a5:6a:61:cc:18:51:1b:38:c1:cf:00:ae:7c:14:d0:fa: 4a:b7:43:80:e1:1a:df:41:f0:93:1e:3c:63:51:72:fe:9a:f1: 19:8b:e3:c7:a9:84:94:61:01:4d:61:bd:7e:18:cc:6c:e5:01: 91:89:d3:00:5a:f9:18:3c:a3:15:28:96:21:bb:53:6f:55:4f: 8b:15:a2:69:6d:09:c7:36:b4:89:57:41:60:ac:28:0a:2b:08: 71:58:4e:0d:fe:77:3e:74:4d:31:9e:3e:4e:33:99:da:c8:5f: 0d:9e:24:49:2f:31:c3:a6:97:2b:58:05:b5:ac:86:a9:b2:ee: c4:f2:7d:84:63:2f:b8:c2:23:6e:ab:31:ad:3e:92:cc:fc:39: d3:c0:7e:ba:9a:4c:75:df:0b:20:bf:9a:a1:82:65:2d:2d:59: d8:5f:7e:c1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGwYRvGPw4Gr55sAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk ZGFkMjI3ZmQtZmI5Zi00ZGE5LTgxNGQtMDc2ZjRlNjdhODQwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApRyd/vKvdsaPU/e9CjsmSn4o4f3T4BMqN1ml fLDRH9e56Hrf6sJgZxtWBE3Lp9UgFyaZpAbic/oVI6SEVueCe1XdrPi9zTpNyOpZ 74cZG8bcGVcyDEjZW3kvptMawpByUml8cs6vVjr/9ltgSpfHW024ioyFQHd/WhCm gvhStXfjOLblztNyxiCqVBnNF99ZKePO9ztaKZv39q7y+5kSM+YAicfaJVfwLtga evyoED3tttuJQgGHMI3hWCuKyvIJDEdAfCxCRTIzdkWErHuIEy6c7ShutWPMvCn7 V08AMxa8HM6njHHTrUANaKuM9CX/BXdAP5qj11q7hF2Ar8WYfQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMUE4UFdlWDgIzDKCVYy2dgA87h2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWU5NDVkMGUtMzM5Ny0z ZGIyLThjNzctNzhkMDQ4ZTQ1NzMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACaMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGQs4Qe7bE3yc3yVZ/fL4pStpsjLj0iHfrLCUbD+LG2ctC6xI3ae1uKu 2zCsaua+OJIBNND+lyRWXwCG2/0RoMLF/ob64ITQoO6VhIf0PPMkUR+/eKil32fa IuQ1pWphzBhRGzjBzwCufBTQ+kq3Q4DhGt9B8JMePGNRcv6a8RmL48ephJRhAU1h vX4YzGzlAZGJ0wBa+Rg8oxUoliG7U29VT4sVomltCcc2tIlXQWCsKAorCHFYTg3+ dz50TTGePk4zmdrIXw2eJEkvMcOmlytYBbWshqmy7sTyfYRjL7jCI26rMa0+ksz8 OdPAfrqaTHXfCyC/mqGCZS0tWdhffsE= -----END CERTIFICATE-----Generated at Sun Jun 29 14:48:44 2025 by rpki-client