$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa File: 5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa (raw, json) Hash identifier: cFfLdMU7+IHoNBQ68i38pIqJhVLcxkm/xz/Vb157V/o= Subject key identifier: B6:33:99:31:5B:6F:71:9B:2E:2F:4C:66:6F:86:AA:92:7C:39:96:E7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A87B8A87786669401459D7170 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa Signing time: Tue 15 Jul 2025 20:26:57 +0000 ROA not before: Tue 15 Jul 2025 20:26:57 +0000 ROA not after: Mon 13 Oct 2025 20:26:57 +0000 asID: 44559 IP address blocks: 136.0.131.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:87:b8:a8:77:86:66:94:01:45:9d:71:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 15 20:26:57 2025 GMT Not After : Oct 13 20:26:57 2025 GMT Subject: CN=6a19e463-8557-4dcf-937a-4c8502d524c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:43:d5:b9:f7:7e:82:2a:bf:b2:8f:f8:32:a0: da:1e:03:fa:12:36:40:7d:6f:e5:13:4e:f1:09:e6: e7:1f:e4:52:0f:16:7a:e3:ff:b2:55:d1:54:4f:f8: a4:e0:6b:8a:d3:ea:d5:ca:11:a7:27:41:ef:37:84: 7d:b2:99:b9:e3:0b:0e:71:38:92:73:2d:33:4f:f3: 45:6b:c2:e8:42:3b:50:c7:47:87:9b:40:f5:f4:87: ff:4c:8a:cb:4b:58:09:5b:47:86:59:a5:d8:32:ad: 62:39:8a:64:2d:ff:a7:68:46:87:d3:2a:c8:fc:73: 67:32:39:ec:2e:a3:9d:1d:0d:ca:5c:cd:c6:59:9f: 6b:06:28:c5:c6:80:0d:a7:3d:a2:4d:b0:0b:f4:c0: b6:94:26:32:bd:59:a5:81:ad:5f:9a:c3:b3:5f:32: e3:27:cc:b7:af:4f:a9:8c:3a:49:11:a2:32:be:3f: 86:0e:19:77:06:f5:70:d8:dd:56:86:ca:e5:41:93: 5a:39:1c:78:a8:7e:c1:08:23:1c:bc:e2:4b:b8:7c: 3c:8f:89:06:3a:83:50:b5:5a:f6:6a:12:11:00:0c: 61:db:33:34:78:42:24:49:7a:4c:8f:34:7e:8d:fd: ec:85:06:35:3a:fe:a8:1f:57:13:46:d9:7c:34:07: 8c:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:33:99:31:5B:6F:71:9B:2E:2F:4C:66:6F:86:AA:92:7C:39:96:E7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5684d1c4-4014-3c44-a0e1-fb8935baedfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.131.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:f7:c9:9d:37:c0:58:f8:4c:26:a2:9c:6a:f2:35:8d:57:f3: 45:a8:45:e3:12:d4:b8:5d:04:44:16:75:75:11:41:8d:31:fa: 6f:9e:dc:64:2e:39:7f:36:d2:b8:f1:44:64:da:cb:97:ba:62: 58:7d:bb:c8:bc:4a:62:1a:cc:cf:12:fc:95:a5:1f:a4:0c:8b: 56:4c:a5:80:55:c0:17:e7:68:8f:9c:18:52:d5:38:bd:7a:fe: 83:be:5b:f5:81:f7:4b:92:48:fe:3f:88:97:29:67:9b:21:f7: ba:fb:80:2d:6e:ee:52:f2:21:b0:ff:ed:44:d4:31:e5:62:4d: f2:0e:4c:c7:52:cc:2c:ff:76:5d:8d:94:11:3a:a4:4e:82:9b: f5:e8:0d:93:48:2a:e4:a6:fc:b7:65:7e:72:55:04:9c:4f:bb: d2:53:39:9d:86:50:6b:8a:46:ef:0c:e4:d7:af:4b:10:37:6f: 7e:ac:a8:0c:49:ef:f6:71:65:42:22:92:68:a7:5e:3a:36:2d: 58:20:d9:17:ea:fa:56:10:45:da:d7:7b:5b:8d:dd:c3:c9:0b: d1:4c:87:a7:a1:f3:cf:2c:e0:47:08:4a:1b:60:d8:0b:c3:86: c7:91:5c:73:90:01:46:5a:31:f0:bd:a5:b5:4d:29:ce:44:68: 71:17:5a:54 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqHuKh3hmaUAUWdcXAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcxNTIwMjY1N1oXDTI1MTAxMzIwMjY1N1owLzEtMCsGA1UEAxMk NmExOWU0NjMtODU1Ny00ZGNmLTkzN2EtNGM4NTAyZDUyNGMzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0UPVufd+giq/so/4MqDaHgP6EjZAfW/lE07x CebnH+RSDxZ64/+yVdFUT/ik4GuK0+rVyhGnJ0HvN4R9spm54wsOcTiScy0zT/NF a8LoQjtQx0eHm0D19If/TIrLS1gJW0eGWaXYMq1iOYpkLf+naEaH0yrI/HNnMjns LqOdHQ3KXM3GWZ9rBijFxoANpz2iTbAL9MC2lCYyvVmlga1fmsOzXzLjJ8y3r0+p jDpJEaIyvj+GDhl3BvVw2N1WhsrlQZNaORx4qH7BCCMcvOJLuHw8j4kGOoNQtVr2 ahIRAAxh2zM0eEIkSXpMjzR+jf3shQY1Ov6oH1cTRtl8NAeMpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLYzmTFbb3GbLi9MZm+GqpJ8OZbnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTY4NGQxYzQtNDAxNC0z YzQ0LWEwZTEtZmI4OTM1YmFlZGZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACDMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHj3yZ03wFj4TCainGryNY1X80WoReMS1LhdBEQWdXURQY0x+m+e3GQu OX820rjxRGTay5e6Ylh9u8i8SmIazM8S/JWlH6QMi1ZMpYBVwBfnaI+cGFLVOL16 /oO+W/WB90uSSP4/iJcpZ5sh97r7gC1u7lLyIbD/7UTUMeViTfIOTMdSzCz/dl2N lBE6pE6Cm/XoDZNIKuSm/LdlfnJVBJxPu9JTOZ2GUGuKRu8M5NevSxA3b36sqAxJ 7/ZxZUIikminXjo2LVgg2Rfq+lYQRdrXe1uN3cPJC9FMh6eh888s4EcIShtg2AvD hseRXHOQAUZaMfC9pbVNKc5EaHEXWlQ= -----END CERTIFICATE-----Generated at Mon Jul 21 13:03:59 2025 by rpki-client