$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa File: 1d49a194-b663-3145-9023-045b5bb94e66.roa (raw, json) Hash identifier: GNr8vkVX+VYx0ykDNIR7+rbzKeCy20WTxU7IyXft4BU= Subject key identifier: FF:E5:9F:05:CC:56:F1:5B:55:74:22:21:5C:F0:99:80:CF:3B:43:F8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF9514FD8150FEF28BC457B00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 136.0.68.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4f:d8:15:0f:ef:28:bc:45:7b:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=41cf81bf-200e-449c-80a6-812056d5b660 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:68:55:bd:c3:5f:df:5b:33:bd:de:00:63:4d: c2:1b:47:7b:77:7a:0a:51:df:73:88:f7:96:e1:fc: bf:ba:5d:82:c2:51:4f:35:8b:ff:bf:53:f2:33:98: 85:48:fd:98:6f:3a:a1:6c:e4:68:f5:72:12:d0:40: 34:ee:e4:d1:df:8d:e9:59:b0:9c:63:78:98:01:41: fa:17:70:f7:0d:76:78:78:01:1b:7c:05:c8:aa:ff: d5:4f:9e:c1:f3:37:62:9e:5d:8d:ca:cc:3e:c6:bd: 63:d5:2b:cf:19:33:2d:5e:d4:41:18:00:ca:dc:32: 40:fd:a5:67:f9:1b:2f:8d:85:a6:06:d1:c3:d5:bd: 9c:1b:fb:d5:02:a4:d1:55:48:b0:10:4c:8b:25:67: f7:13:e9:34:31:64:47:db:5a:a6:38:e7:e6:d5:73: fd:28:0c:a1:92:5a:ad:c3:15:c9:29:cd:53:30:5d: bb:03:bc:ae:b9:93:34:75:b7:f4:bb:8f:72:5d:6e: c1:1c:9b:9c:82:a3:ea:a9:1f:3b:74:c7:c7:e0:49: 04:ed:b6:96:69:1a:39:c5:93:32:0d:d3:4a:7b:31: aa:86:ef:9e:f8:ba:d9:6a:7c:bf:b5:44:94:6d:63: a8:4f:12:e5:c1:22:aa:ce:52:c0:70:2e:5c:ca:58: cf:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:E5:9F:05:CC:56:F1:5B:55:74:22:21:5C:F0:99:80:CF:3B:43:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1d49a194-b663-3145-9023-045b5bb94e66.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.68.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:b8:72:8e:c1:33:e8:fd:e5:66:25:a7:66:f0:e7:49:76:dc: 4b:7e:2a:92:97:71:7e:54:f0:33:c0:28:58:91:21:b1:35:04: fe:b2:81:6d:bf:5b:e1:74:a8:6c:9f:b1:69:8f:98:ea:f1:1c: 85:b7:ac:f9:85:63:73:3c:76:bb:f5:64:b0:df:d9:fb:2c:76: 59:0f:5b:83:01:65:c3:3d:20:7c:91:46:a3:a7:0c:7b:ec:ba: bf:18:b6:cc:1b:79:7d:87:b2:ca:6a:2b:f1:17:a3:2e:83:28: 68:e7:59:7a:84:fa:9b:29:66:4e:e2:94:ec:84:94:7c:81:42: c5:24:d8:71:d3:83:0e:92:58:4d:16:45:b5:72:ff:ec:13:97: 6f:4c:3a:40:7d:ba:30:23:7e:97:3b:43:bd:85:a4:48:23:df: 15:04:f6:a5:87:3b:43:a2:eb:f0:21:23:55:15:57:8b:bb:10: 86:38:98:7c:43:a5:32:dc:68:b8:05:78:c3:3b:0f:f0:d2:1d: 38:90:c7:01:b3:40:bf:b2:a9:63:1c:17:3e:f8:55:09:40:62: 78:58:d3:de:a5:34:6d:b5:92:2e:95:80:9a:c2:6b:c3:c5:b2: 25:14:12:bc:fc:dd:6e:33:00:b4:3d:7b:ae:48:8d:a4:6a:3f: 92:28:f0:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU/YFQ/vKLxFewAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk NDFjZjgxYmYtMjAwZS00NDljLTgwYTYtODEyMDU2ZDViNjYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGhVvcNf31szvd4AY03CG0d7d3oKUd9ziPeW 4fy/ul2CwlFPNYv/v1PyM5iFSP2YbzqhbORo9XIS0EA07uTR343pWbCcY3iYAUH6 F3D3DXZ4eAEbfAXIqv/VT57B8zdinl2Nysw+xr1j1SvPGTMtXtRBGADK3DJA/aVn +RsvjYWmBtHD1b2cG/vVAqTRVUiwEEyLJWf3E+k0MWRH21qmOOfm1XP9KAyhklqt wxXJKc1TMF27A7yuuZM0dbf0u49yXW7BHJucgqPqqR87dMfH4EkE7baWaRo5xZMy DdNKezGqhu+e+LrZany/tUSUbWOoTxLlwSKqzlLAcC5cyljPJwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP/lnwXMVvFbVXQiIVzwmYDPO0P4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWQ0OWExOTQtYjY2My0z MTQ1LTkwMjMtMDQ1YjViYjk0ZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAS4co7BM+j95WYlp2bw50l23Et+KpKXcX5U8DPAKFiRIbE1BP6ygW2/ W+F0qGyfsWmPmOrxHIW3rPmFY3M8drv1ZLDf2fssdlkPW4MBZcM9IHyRRqOnDHvs ur8YtswbeX2HsspqK/EXoy6DKGjnWXqE+pspZk7ilOyElHyBQsUk2HHTgw6SWE0W RbVy/+wTl29MOkB9ujAjfpc7Q72FpEgj3xUE9qWHO0Oi6/AhI1UVV4u7EIY4mHxD pTLcaLgFeMM7D/DSHTiQxwGzQL+yqWMcFz74VQlAYnhY096lNG21ki6VgJrCa8PF siUUErz83W4zALQ9e65IjaRqP5Io8FU= -----END CERTIFICATE-----Generated at Tue Aug 26 18:06:24 2025 by rpki-client