$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55b97e43-83c5-3bce-980f-0ad56eb2d6ff.roa File: 55b97e43-83c5-3bce-980f-0ad56eb2d6ff.roa (raw, json) Hash identifier: Q0IIdoWPwsu6kLPaOlyZVbFZqa1Tm9UWyp/ELUq6ARw= Subject key identifier: D4:19:D6:85:2D:08:CF:BA:33:5C:FB:EF:0F:85:83:ED:75:53:6A:FE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584AF9514FFDFD70C7BF1F83AD00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55b97e43-83c5-3bce-980f-0ad56eb2d6ff.roa Signing time: Mon 25 Aug 2025 13:00:39 +0000 ROA not before: Mon 25 Aug 2025 13:00:39 +0000 ROA not after: Sun 23 Nov 2025 14:00:39 +0000 asID: 5650 IP address blocks: 136.0.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 28 Aug 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:f9:51:4f:fd:fd:70:c7:bf:1f:83:ad:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 25 13:00:39 2025 GMT Not After : Nov 23 14:00:39 2025 GMT Subject: CN=bb94a952-4b6d-4d9a-a16b-bf28ead87f37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:7c:44:c9:3c:62:f5:9f:3b:d1:9c:c5:05:38: 85:7e:78:1a:6f:54:82:20:be:95:bd:ac:0e:44:f8: 8a:4c:a1:f1:34:cb:4a:65:5a:06:58:a3:2e:9e:fc: 37:61:df:fc:4f:85:12:64:9f:de:a3:b9:16:50:d4: b0:0d:86:c4:aa:c0:c2:1f:48:99:62:55:63:64:44: cc:9c:64:12:11:84:6a:b1:96:25:ae:18:23:a2:d2: fd:0d:23:0f:00:a3:05:52:eb:60:e8:27:e9:da:98: 53:a1:d8:6d:3d:75:a0:1d:03:ca:f7:9a:ed:36:07: 51:c6:48:ce:e1:dc:39:88:fe:1c:c9:1f:32:56:5c: 30:43:d1:cd:72:fd:21:c0:43:b3:43:ca:aa:1b:be: c7:d6:64:db:69:68:01:a9:f1:e3:80:76:1c:2d:71: f4:f7:da:c7:7f:70:22:b7:8d:77:72:eb:d3:f6:52: 1a:cb:27:5a:6a:93:7c:c2:f5:5b:f3:4d:7a:78:1d: 9f:31:6a:e1:36:4f:24:ac:76:6a:7e:c1:97:6f:76: 18:c7:19:f0:04:f5:9f:1e:7c:74:b9:4e:a6:82:9f: cf:5d:77:ec:2e:92:d3:d5:a7:23:31:15:bf:78:14: f1:41:f7:5e:bf:c1:1f:8f:04:a8:f6:90:22:04:11: 91:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:19:D6:85:2D:08:CF:BA:33:5C:FB:EF:0F:85:83:ED:75:53:6A:FE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/55b97e43-83c5-3bce-980f-0ad56eb2d6ff.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 27:15:26:3a:f6:2d:e5:2b:87:0e:f8:54:b4:35:bd:1b:49:b3: b7:b0:77:7a:e5:49:0f:b3:55:03:8d:68:2b:66:dc:6a:12:69: 27:0d:e4:d6:c2:28:31:d2:85:16:60:c1:22:12:b6:ea:00:aa: 7f:c7:38:b5:60:2f:86:30:02:66:d4:3e:d7:48:d1:f0:b2:d2: 3d:9e:ca:1c:94:e7:3a:92:b6:43:4d:59:48:3e:0e:15:e6:99: 67:2c:f0:ee:96:09:61:c1:1b:49:97:ee:ee:c9:f5:0f:6c:e1: df:37:c9:94:08:15:df:fd:93:91:dd:4c:de:3d:57:b5:53:8f: 34:d5:3f:c3:6f:64:e7:d4:ee:6f:1e:ee:3b:b6:5a:74:0c:79: 97:a4:e4:dd:14:a9:78:1a:be:45:ba:fd:e6:8e:66:13:90:81: ef:ee:bb:bf:ae:0a:97:30:b5:af:19:7b:05:44:1b:ec:a0:d1: e4:17:0b:b2:29:c8:31:b4:9e:a4:0d:02:bc:c9:db:79:74:88: 7b:e5:90:74:84:3b:0f:87:6e:79:f4:c9:7f:a8:95:c1:3f:9a: 7e:68:4b:27:42:dc:1a:c2:79:57:a8:b6:0a:66:6b:79:73:f1: 42:78:da:b7:92:6c:36:87:d1:09:a0:74:4c:38:9e:91:89:f5: 4c:6d:a8:50 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEr5UU/9/XDHvx+DrQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDgyNTEzMDAzOVoXDTI1MTEyMzE0MDAzOVowLzEtMCsGA1UEAxMk YmI5NGE5NTItNGI2ZC00ZDlhLWExNmItYmYyOGVhZDg3ZjM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXxEyTxi9Z870ZzFBTiFfngab1SCIL6VvawO RPiKTKHxNMtKZVoGWKMunvw3Yd/8T4USZJ/eo7kWUNSwDYbEqsDCH0iZYlVjZETM nGQSEYRqsZYlrhgjotL9DSMPAKMFUutg6Cfp2phTodhtPXWgHQPK95rtNgdRxkjO 4dw5iP4cyR8yVlwwQ9HNcv0hwEOzQ8qqG77H1mTbaWgBqfHjgHYcLXH099rHf3Ai t413cuvT9lIayydaapN8wvVb8016eB2fMWrhNk8krHZqfsGXb3YYxxnwBPWfHnx0 uU6mgp/PXXfsLpLT1acjMRW/eBTxQfdev8EfjwSo9pAiBBGR0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNQZ1oUtCM+6M1z77w+Fg+11U2r+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTViOTdlNDMtODNjNS0z YmNlLTk4MGYtMGFkNTZlYjJkNmZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACcVJjr2LeUrhw74VLQ1vRtJs7ewd3rlSQ+zVQONaCtm3GoSaScN5NbC KDHShRZgwSIStuoAqn/HOLVgL4YwAmbUPtdI0fCy0j2eyhyU5zqStkNNWUg+DhXm mWcs8O6WCWHBG0mX7u7J9Q9s4d83yZQIFd/9k5HdTN49V7VTjzTVP8NvZOfU7m8e 7ju2WnQMeZek5N0UqXgavkW6/eaOZhOQge/uu7+uCpcwta8ZewVEG+yg0eQXC7Ip yDG0nqQNArzJ23l0iHvlkHSEOw+Hbnn0yX+olcE/mn5oSydC3BrCeVeotgpma3lz 8UJ42reSbDaH0QmgdEw4npGJ9UxtqFA= -----END CERTIFICATE-----Generated at Tue Aug 26 18:03:40 2025 by rpki-client