$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa File: a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa (raw, json) Hash identifier: rfCJKpZiytmGqg3SKupErjq1fe0sh33aJVDKGkTKNjI= Subject key identifier: 95:3E:B3:D1:77:83:DF:FC:86:1C:4F:04:BC:30:89:8C:6E:5D:44:09 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD0D66DCD1CEBFD32B8C48200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa Signing time: Mon 11 Aug 2025 01:00:32 +0000 ROA not before: Mon 11 Aug 2025 01:00:32 +0000 ROA not after: Sun 09 Nov 2025 02:00:32 +0000 asID: 44477 IP address blocks: 136.0.65.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Aug 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d0:d6:6d:cd:1c:eb:fd:32:b8:c4:82:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 11 01:00:32 2025 GMT Not After : Nov 9 02:00:32 2025 GMT Subject: CN=84464b9b-b3fa-457f-9da4-a46166301e99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:92:71:e9:52:db:ea:27:e8:b7:80:18:c4:44:ae: cd:b0:54:bd:8e:e4:e9:be:49:73:89:2d:3e:dc:90: c5:e1:97:91:be:d0:48:93:22:4e:88:67:e7:3a:d6: 98:64:31:b4:75:7e:25:f8:62:de:3e:9b:7a:c7:59: a7:ef:81:11:e5:b3:82:13:d6:4c:85:64:86:49:d2: 21:65:20:23:ae:52:61:99:f6:d2:7c:ac:50:6d:dc: c7:21:0c:55:31:8d:77:5c:82:12:f4:12:67:c8:4a: 03:b2:25:3d:c0:c1:d4:f0:1e:0f:77:27:67:54:a7: 15:6a:02:02:c1:39:18:92:99:eb:d5:60:39:39:74: ef:54:2a:6b:c6:e2:45:9b:2f:34:16:b7:c5:b9:87: 77:f5:dd:ca:98:93:09:0e:f7:4d:43:16:18:bd:d8: b6:ae:c2:78:46:68:1f:50:81:df:2e:f3:26:b9:c0: ac:28:83:7e:cc:9a:52:b8:b0:f2:15:82:40:12:e6: c0:01:26:55:be:f3:94:f9:e8:28:8d:d7:b3:e0:58: 17:7b:e0:10:08:7a:b8:e0:c1:c0:98:58:a4:5b:66: a6:ee:a2:94:01:08:d3:b4:13:80:5f:30:60:bb:ac: e4:0a:e0:19:83:94:b0:bd:10:89:f3:e2:4e:a7:30: a2:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:3E:B3:D1:77:83:DF:FC:86:1C:4F:04:BC:30:89:8C:6E:5D:44:09 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a336a2dc-8ea0-3824-8ddd-1cc737dfdde1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.65.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1f:38:46:df:35:7e:07:6a:00:3a:4b:8d:50:dd:fd:3e:56:f5: 33:8a:73:37:d7:47:75:d3:f7:cb:13:0a:42:07:f7:75:3d:37: 88:9a:04:7f:80:bf:7e:ff:22:70:e8:39:67:4a:3a:01:16:9d: ed:dc:99:95:e1:b1:7a:ff:e9:b7:75:75:d0:48:50:b4:71:53: df:59:fa:c3:81:5c:40:6b:aa:4a:65:37:d8:4b:6b:dd:79:85: 53:0e:54:21:8a:ab:f3:b0:b0:d4:85:20:eb:a0:3c:ba:90:2d: db:25:eb:f9:20:0b:c2:32:3e:09:88:59:64:88:bf:89:87:c7: 5e:6e:31:a1:7d:e9:2a:09:49:60:0f:ab:f9:75:13:2a:a4:78: 97:8e:cc:d8:2b:e0:aa:7f:10:ce:25:0f:cc:c1:37:cd:34:19: ff:0d:bf:3f:f3:d1:59:0f:45:58:27:b3:7a:f8:e5:b3:6a:ec: b1:ad:d5:33:cb:68:84:71:4f:cf:eb:6a:12:e1:7b:ef:6f:4e: 94:89:2c:72:bc:cf:e6:6c:a7:71:26:80:1d:be:1d:98:85:08: f5:ac:b3:94:25:82:01:11:3c:15:8f:d9:9e:e3:a0:d9:4d:99: 6a:eb:d5:eb:c7:91:8d:51:41:e6:ce:28:34:54:0b:ad:13:94: b8:88:47:fa -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErQ1m3NHOv9MrjEggAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMTAxMDAzMloXDTI1MTEwOTAyMDAzMlowLzEtMCsGA1UEAxMk ODQ0NjRiOWItYjNmYS00NTdmLTlkYTQtYTQ2MTY2MzAxZTk5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknHpUtvqJ+i3gBjERK7NsFS9juTpvklziS0+ 3JDF4ZeRvtBIkyJOiGfnOtaYZDG0dX4l+GLePpt6x1mn74ER5bOCE9ZMhWSGSdIh ZSAjrlJhmfbSfKxQbdzHIQxVMY13XIIS9BJnyEoDsiU9wMHU8B4PdydnVKcVagIC wTkYkpnr1WA5OXTvVCprxuJFmy80FrfFuYd39d3KmJMJDvdNQxYYvdi2rsJ4Rmgf UIHfLvMmucCsKIN+zJpSuLDyFYJAEubAASZVvvOU+egojdez4FgXe+AQCHq44MHA mFikW2am7qKUAQjTtBOAXzBgu6zkCuAZg5SwvRCJ8+JOpzCirwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJU+s9F3g9/8hhxPBLwwiYxuXUQJMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMzNmEyZGMtOGVhMC0z ODI0LThkZGQtMWNjNzM3ZGZkZGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABBMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB84Rt81fgdqADpLjVDd/T5W9TOKczfXR3XT98sTCkIH93U9N4iaBH+A v37/InDoOWdKOgEWne3cmZXhsXr/6bd1ddBIULRxU99Z+sOBXEBrqkplN9hLa915 hVMOVCGKq/OwsNSFIOugPLqQLdsl6/kgC8IyPgmIWWSIv4mHx15uMaF96SoJSWAP q/l1EyqkeJeOzNgr4Kp/EM4lD8zBN800Gf8Nvz/z0VkPRVgns3r45bNq7LGt1TPL aIRxT8/rahLhe+9vTpSJLHK8z+Zsp3EmgB2+HZiFCPWss5QlggERPBWP2Z7joNlN mWrr1evHkY1RQebOKDRUC60TlLiIR/o= -----END CERTIFICATE-----Generated at Sat Aug 23 20:11:23 2025 by rpki-client