$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa File: def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa (raw, json) Hash identifier: 09jCmktfdnB44lMglk6n19c1q6ZOe2KXi3E7dHkpews= Subject key identifier: BD:75:8C:08:1E:DB:3E:B0:96:F9:23:65:21:97:6B:F7:9B:59:DB:35 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A2EEAC513815A0B66DBF99DC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa Signing time: Sat 14 Jun 2025 01:00:49 +0000 ROA not before: Sat 14 Jun 2025 01:00:49 +0000 ROA not after: Fri 12 Sep 2025 01:00:49 +0000 asID: 8881 IP address blocks: 136.0.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 01 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:2e:ea:c5:13:81:5a:0b:66:db:f9:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 14 01:00:49 2025 GMT Not After : Sep 12 01:00:49 2025 GMT Subject: CN=4d237ad4-f329-4de0-bfc8-3569ae9d5687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:1a:c5:c0:0c:47:c9:6c:0b:16:e5:42:d4:9d: 7d:4a:af:05:65:7f:91:6d:2a:52:9a:19:67:d3:fa: 39:f4:6b:2a:8b:72:18:46:08:00:8e:34:4d:97:a2: 81:a8:55:7d:0d:d5:ed:3e:ad:51:cc:7c:0f:7c:fc: 2e:2d:7a:c7:04:d2:19:fb:34:b7:d9:c7:dd:7b:b8: 33:f9:36:a5:41:8d:52:68:f2:98:3f:fb:b2:b9:bc: 44:76:4a:84:c9:36:4a:e3:03:0e:8a:05:e5:45:fb: bf:e6:ed:f3:76:42:0e:d3:78:bd:0c:95:94:8f:6a: 21:15:7b:d9:07:76:85:5b:fc:67:45:e7:2d:0b:1b: b1:58:a2:5b:1e:0c:aa:75:6a:5c:56:50:0b:b2:ae: ed:fa:3d:72:5b:d6:30:22:3e:64:62:bc:bd:e6:ca: dd:93:de:d2:9c:0a:27:58:5a:da:8d:f0:2d:91:b3: 56:ea:51:0a:7f:84:31:3b:88:ab:2f:f1:26:31:60: 5f:56:28:ab:51:b1:ef:6a:5b:c5:28:96:c2:a2:d3: 1b:78:88:57:2c:15:73:3e:e2:30:eb:f8:28:cd:cd: f9:72:93:b3:b6:49:59:93:bd:2d:13:1d:3c:d6:a1: f1:53:9f:2e:dd:12:71:e7:31:70:4b:e9:7a:94:50: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BD:75:8C:08:1E:DB:3E:B0:96:F9:23:65:21:97:6B:F7:9B:59:DB:35 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:48:c3:df:e7:49:4d:bb:89:63:e6:5d:b9:d0:05:d2:a3:d5: 54:7e:50:2b:5f:75:de:60:38:05:b0:e2:58:4c:8d:1e:ec:b5: 4b:96:ff:3c:9e:c8:07:40:b6:5e:73:5e:b9:f3:d7:9e:a9:b6: f1:42:cc:62:fd:0a:31:26:ea:46:2c:e7:72:0c:bd:9b:c1:f9: 21:22:f7:24:08:ee:dd:d5:6a:6f:f8:61:a9:c1:75:d3:b7:74: bd:aa:c7:d8:60:35:b3:e2:9a:2f:46:f1:d8:84:00:6d:3e:70: 71:5f:8a:26:28:07:dc:f8:da:96:71:70:d5:9a:e7:67:0d:61: c9:dd:31:82:06:99:51:3d:72:45:5c:d1:9a:be:50:94:39:77: 32:19:b6:3f:3d:9c:34:53:28:b5:3f:9a:ca:db:cc:f5:01:4a: 81:80:38:74:f4:73:15:80:da:ab:dc:33:15:dc:47:68:f2:67: 9d:97:28:13:e3:76:9e:ae:f0:40:cd:9b:68:0e:ff:e9:6a:62: 19:32:90:cf:41:3f:90:d7:8a:6d:5e:14:77:d7:fe:61:61:7e: 52:80:ed:56:37:29:1b:77:97:4b:5c:97:da:a4:d3:65:92:c4: e9:0a:20:71:eb:d8:e6:f8:9a:74:41:aa:ba:80:a7:2b:87:0e: 9d:66:2d:79 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEou6sUTgVoLZtv5ncAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDYxNDAxMDA0OVoXDTI1MDkxMjAxMDA0OVowLzEtMCsGA1UEAxMk NGQyMzdhZDQtZjMyOS00ZGUwLWJmYzgtMzU2OWFlOWQ1Njg3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhrFwAxHyWwLFuVC1J19Sq8FZX+RbSpSmhln 0/o59Gsqi3IYRggAjjRNl6KBqFV9DdXtPq1RzHwPfPwuLXrHBNIZ+zS32cfde7gz +TalQY1SaPKYP/uyubxEdkqEyTZK4wMOigXlRfu/5u3zdkIO03i9DJWUj2ohFXvZ B3aFW/xnRectCxuxWKJbHgyqdWpcVlALsq7t+j1yW9YwIj5kYry95srdk97SnAon WFrajfAtkbNW6lEKf4QxO4irL/EmMWBfViirUbHvalvFKJbCotMbeIhXLBVzPuIw 6/gozc35cpOztklZk70tEx081qHxU58u3RJx5zFwS+l6lFAVBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL11jAge2z6wlvkjZSGXa/ebWds1MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGVmNmNjMDMtZWYyMS0z MGQyLTlhMDItNWU3NzFlMWEwNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRIw9/nSU27iWPmXbnQBdKj1VR+UCtfdd5gOAWw4lhMjR7stUuW/zye yAdAtl5zXrnz156ptvFCzGL9CjEm6kYs53IMvZvB+SEi9yQI7t3Vam/4YanBddO3 dL2qx9hgNbPimi9G8diEAG0+cHFfiiYoB9z42pZxcNWa52cNYcndMYIGmVE9ckVc 0Zq+UJQ5dzIZtj89nDRTKLU/msrbzPUBSoGAOHT0cxWA2qvcMxXcR2jyZ52XKBPj dp6u8EDNm2gO/+lqYhkykM9BP5DXim1eFHfX/mFhflKA7VY3KRt3l0tcl9qk02WS xOkKIHHr2Ob4mnRBqrqApyuHDp1mLXk= -----END CERTIFICATE-----Generated at Sun Jun 29 17:51:19 2025 by rpki-client