$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa File: 52c21e94-873d-37f3-9993-0053617532ab.roa (raw, json) Hash identifier: 5lgfJcTT5raGlL0S/L6FvYWXdp9QnDaYykrbSjEcL6U= Subject key identifier: 19:F7:FC:A9:CF:4E:1D:47:B8:D9:04:52:51:7C:F3:C7:2B:A6:EB:19 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A761B6460510FA5AE7CC143C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa Signing time: Wed 09 Jul 2025 13:01:04 +0000 ROA not before: Wed 09 Jul 2025 13:01:04 +0000 ROA not after: Tue 07 Oct 2025 13:01:04 +0000 asID: 10557 IP address blocks: 136.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Jul 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:76:1b:64:60:51:0f:a5:ae:7c:c1:43:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 9 13:01:04 2025 GMT Not After : Oct 7 13:01:04 2025 GMT Subject: CN=ff33583d-9c47-4e12-836e-f9f2c2308e09 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:7b:51:2a:9c:27:fc:45:1d:af:ee:c0:91:d1: 19:79:e4:8c:d4:45:40:a4:a8:74:49:27:50:5a:70: 40:6c:5c:04:a7:9d:d3:c5:89:02:e4:1f:74:bb:2c: f6:92:83:ec:e1:57:e1:11:81:cc:93:0a:ed:fa:70: 93:20:41:6f:38:52:0e:17:94:f2:94:b8:22:58:fd: c3:54:4b:2f:e5:18:ba:8c:a8:e5:98:f9:8b:b4:6f: 2d:f3:90:5b:1c:c9:75:d7:8f:50:03:98:ac:45:cf: 3a:f5:71:7e:18:01:7a:fe:78:5d:5e:7d:61:9a:cb: 7c:37:1e:79:0b:76:d7:1a:2d:e2:f0:3b:be:94:a8: 8b:9b:cf:fe:fc:de:42:4e:7e:d8:24:9d:fd:43:60: 62:de:da:7d:15:ff:99:5f:02:ec:9d:fa:77:b6:4f: fb:0f:8c:a9:b4:5e:78:c9:f2:6b:f4:a1:81:5e:32: 31:3a:b8:f0:d9:8e:03:ed:0c:bc:bc:c1:cb:b9:89: 79:47:9d:2f:99:c3:e9:1f:a1:ca:00:66:a2:81:c8: 06:96:e6:20:70:96:0e:1d:c8:10:eb:97:99:86:3e: 1b:a9:83:b6:d6:a3:4b:94:ea:a1:8c:c2:58:4e:aa: d9:38:33:23:47:0f:fc:57:60:d2:e8:80:6a:38:1f: 79:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:F7:FC:A9:CF:4E:1D:47:B8:D9:04:52:51:7C:F3:C7:2B:A6:EB:19 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7b:92:07:03:c0:90:e8:b6:ac:13:de:6e:20:b8:f3:83:48:86: c0:6b:42:30:2d:bf:4c:ca:29:e9:2a:84:d9:eb:b3:a0:75:3d: 3f:9d:71:d3:38:c2:a3:fe:29:28:92:eb:00:cb:0c:82:7b:cc: b7:03:92:11:fc:62:7b:71:f8:48:b6:77:c7:cb:1d:74:2e:73: a1:e7:77:ab:80:f2:1a:1d:48:a2:da:25:4b:91:95:6f:24:29: 55:54:f6:73:93:76:fc:fb:43:a6:d5:1f:f5:96:15:65:45:8e: 00:72:3e:b7:b0:56:d9:35:90:b6:f6:66:5b:07:4a:0b:59:a0: b2:aa:9c:42:ca:f1:40:bf:99:21:6c:bf:01:93:c2:00:ad:db: d9:c2:7c:a2:2b:1d:f7:1e:55:12:16:ea:be:8e:2a:e5:09:1a: b2:f0:8d:46:50:20:3a:ee:26:41:9e:df:08:8a:11:45:a3:84: 9e:7f:38:9a:5e:f3:5c:bc:86:f6:90:c5:34:73:57:1e:9c:3d: 6e:77:d5:a0:fc:e2:19:21:2e:43:ec:26:6f:a2:64:25:47:67: 32:9a:24:88:fa:3f:0f:f6:99:65:61:0c:02:d5:3c:18:21:f5: e8:94:32:8e:a4:ec:46:6e:e1:8d:94:55:af:39:5d:4b:f2:0d: 1d:4a:d8:a7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G2RgUQ+lrnzBQ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk ZmYzMzU4M2QtOWM0Ny00ZTEyLTgzNmUtZjlmMmMyMzA4ZTA5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjHtRKpwn/EUdr+7AkdEZeeSM1EVApKh0SSdQ WnBAbFwEp53TxYkC5B90uyz2koPs4VfhEYHMkwrt+nCTIEFvOFIOF5TylLgiWP3D VEsv5Ri6jKjlmPmLtG8t85BbHMl1149QA5isRc869XF+GAF6/nhdXn1hmst8Nx55 C3bXGi3i8Du+lKiLm8/+/N5CTn7YJJ39Q2Bi3tp9Ff+ZXwLsnfp3tk/7D4yptF54 yfJr9KGBXjIxOrjw2Y4D7Qy8vMHLuYl5R50vmcPpH6HKAGaigcgGluYgcJYOHcgQ 65eZhj4bqYO21qNLlOqhjMJYTqrZODMjRw/8V2DS6IBqOB95+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBn3/KnPTh1HuNkEUlF888crpusZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTJjMjFlOTQtODczZC0z N2YzLTk5OTMtMDA1MzYxNzUzMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHuSBwPAkOi2rBPebiC484NIhsBrQjAtv0zKKekqhNnrs6B1PT+dcdM4 wqP+KSiS6wDLDIJ7zLcDkhH8Yntx+Ei2d8fLHXQuc6Hnd6uA8hodSKLaJUuRlW8k KVVU9nOTdvz7Q6bVH/WWFWVFjgByPrewVtk1kLb2ZlsHSgtZoLKqnELK8UC/mSFs vwGTwgCt29nCfKIrHfceVRIW6r6OKuUJGrLwjUZQIDruJkGe3wiKEUWjhJ5/OJpe 81y8hvaQxTRzVx6cPW531aD84hkhLkPsJm+iZCVHZzKaJIj6Pw/2mWVhDALVPBgh 9eiUMo6k7EZu4Y2UVa85XUvyDR1K2Kc= -----END CERTIFICATE-----Generated at Thu Jul 10 19:45:32 2025 by rpki-client