$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa File: f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa (raw, json) Hash identifier: o0nb00EqN99iex7icUegMOB7zHORL/aJv1d5DUT6+9U= Subject key identifier: 21:9D:3D:C2:7B:A1:3F:72:45:9E:49:1A:68:55:1F:D2:D5:51:7D:87 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AD3A1289673B4B75A9F815920 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa Signing time: Tue 12 Aug 2025 01:00:32 +0000 ROA not before: Tue 12 Aug 2025 01:00:32 +0000 ROA not after: Mon 10 Nov 2025 02:00:32 +0000 asID: 49770 IP address blocks: 136.0.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Aug 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:d3:a1:28:96:73:b4:b7:5a:9f:81:59:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 12 01:00:32 2025 GMT Not After : Nov 10 02:00:32 2025 GMT Subject: CN=2deab839-a485-4dc4-9a67-d6e2e7b4707a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:47:0c:e0:61:19:0e:33:82:49:63:15:8d:62: 54:59:62:38:80:b6:ed:8f:e9:5b:dd:3c:42:a5:35: 90:1a:28:f1:f9:03:9a:1e:02:07:ec:61:6e:16:0a: 24:2e:5e:f4:53:6f:6b:54:cb:27:a9:88:4d:94:d5: 4b:a4:09:62:bf:30:40:38:11:d0:b9:8a:27:8c:f3: 18:4f:e7:c5:22:da:7b:ff:09:64:b3:3e:24:f8:36: b3:49:7f:51:c2:07:bd:0c:2e:ec:4c:e3:f9:b2:7a: 12:81:42:a7:ac:ef:95:f6:40:26:a4:65:75:1b:20: 94:b3:2d:08:22:db:fe:2f:70:c2:90:0b:fa:48:a4: 89:0b:56:f1:58:ab:95:61:c0:96:2f:bf:db:bc:98: df:ef:3a:b3:3a:3c:29:96:40:48:8a:84:d4:6e:bd: f7:38:9a:f3:cc:97:3f:dd:bc:1d:87:33:fc:f6:ab: d0:3b:0f:3e:90:66:6d:4a:1a:8e:3c:ca:bc:6f:e0: 46:8f:77:76:75:d8:1f:b5:da:8f:90:9b:1d:f2:6a: 4c:c2:92:e6:d5:8b:44:0e:c4:99:72:45:c6:94:56: 6f:52:f3:c7:d8:c1:99:39:97:f7:1d:09:74:75:04: 26:c8:4a:b7:e3:99:cf:82:9f:33:95:d7:d1:15:13: 82:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:9D:3D:C2:7B:A1:3F:72:45:9E:49:1A:68:55:1F:D2:D5:51:7D:87 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a2:62:96:2d:ed:77:76:a9:f2:29:41:1d:0a:29:53:c2:b8:d0: 77:75:4f:10:72:42:d4:d2:ae:ad:df:a9:cc:08:e9:95:e4:1e: 75:87:11:06:2f:f0:16:ec:4f:00:c3:e6:e3:27:f9:47:4a:31: 00:ba:d3:a8:1a:74:64:c0:87:be:07:d0:29:c9:3a:5f:fa:f1: 25:5e:de:b2:93:75:71:85:09:59:51:d8:10:d6:b8:e6:f1:fc: 55:d5:59:0b:ac:bd:b4:ab:26:53:e3:28:09:8c:3a:0b:09:e1: ff:0b:70:15:2a:36:17:28:67:bc:26:40:a1:25:fe:b0:a2:0d: 76:c7:31:98:c7:69:4c:c6:ef:3c:50:e8:82:9c:8c:97:b1:bc: ad:6e:0b:42:b8:1d:e5:3c:dd:f5:31:95:c3:5c:88:45:c3:e9: bb:63:a8:22:e7:02:2b:4b:0e:74:23:e3:81:ad:d3:8d:73:54: d2:be:fa:ab:23:c3:cb:ce:24:d6:e3:6c:82:c1:96:be:69:3c: 7c:88:1b:7f:93:a3:69:c0:1b:8b:7c:aa:ed:8b:63:a5:82:40: a3:d4:d1:28:10:6b:67:65:98:78:a8:de:d0:0b:ee:7c:85:8e: a2:80:d1:17:71:01:3b:21:8f:b0:3c:5f:dd:c9:e7:b3:81:2d: 70:26:0a:59 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToSiWc7S3Wp+BWSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk MmRlYWI4MzktYTQ4NS00ZGM0LTlhNjctZDZlMmU3YjQ3MDdhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApkcM4GEZDjOCSWMVjWJUWWI4gLbtj+lb3TxC pTWQGijx+QOaHgIH7GFuFgokLl70U29rVMsnqYhNlNVLpAlivzBAOBHQuYonjPMY T+fFItp7/wlksz4k+DazSX9Rwge9DC7sTOP5snoSgUKnrO+V9kAmpGV1GyCUsy0I Itv+L3DCkAv6SKSJC1bxWKuVYcCWL7/bvJjf7zqzOjwplkBIioTUbr33OJrzzJc/ 3bwdhzP89qvQOw8+kGZtShqOPMq8b+BGj3d2ddgftdqPkJsd8mpMwpLm1YtEDsSZ ckXGlFZvUvPH2MGZOZf3HQl0dQQmyEq345nPgp8zldfRFROCGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCGdPcJ7oT9yRZ5JGmhVH9LVUX2HMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjNjNzRiNWUtODJhOC0z MzZmLWJhZWQtYjg1N2FjM2Y3OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKJili3td3ap8ilBHQopU8K40Hd1TxByQtTSrq3fqcwI6ZXkHnWHEQYv 8BbsTwDD5uMn+UdKMQC606gadGTAh74H0CnJOl/68SVe3rKTdXGFCVlR2BDWuObx /FXVWQusvbSrJlPjKAmMOgsJ4f8LcBUqNhcoZ7wmQKEl/rCiDXbHMZjHaUzG7zxQ 6IKcjJexvK1uC0K4HeU83fUxlcNciEXD6btjqCLnAitLDnQj44Gt041zVNK++qsj w8vOJNbjbILBlr5pPHyIG3+To2nAG4t8qu2LY6WCQKPU0SgQa2dlmHio3tAL7nyF jqKA0RdxATshj7A8X93J57OBLXAmClk= -----END CERTIFICATE-----Generated at Sat Aug 23 17:33:59 2025 by rpki-client