$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa File: ddb8352c-dd41-3b64-94b7-dc20399581b8.roa (raw, json) Hash identifier: xpPGVdOsJXE0+RMX3Ronh5s8BNpGt4ig6s/DJrU2A+M= Subject key identifier: 05:5C:FF:40:FC:AB:1B:8F:F3:E5:65:96:79:C7:D7:92:F8:61:4D:76 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F43285849F5E1B5489C77910C89EEF270 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa Signing time: Sat 24 May 2025 14:41:39 +0000 ROA not before: Sat 24 May 2025 14:41:39 +0000 ROA not after: Fri 22 Aug 2025 14:41:39 +0000 asID: 214238 IP address blocks: 136.0.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 08 Jun 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:49:f5:e1:b5:48:9c:77:91:0c:89:ee:f2:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 24 14:41:39 2025 GMT Not After : Aug 22 14:41:39 2025 GMT Subject: CN=727fa65c-94df-4935-b27f-c024101d5df5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9a:bf:48:c0:a5:96:e0:d7:78:88:6c:ba:d7: d9:e2:ee:ec:e8:48:bf:18:17:e8:86:13:ec:74:ea: 4b:46:78:93:b0:ee:2b:61:f3:e2:18:e1:a4:6a:17: 1e:0a:b8:8e:09:e4:ec:ac:26:e4:69:6f:7a:f0:62: 0b:d4:50:f1:ef:12:44:31:fd:83:c2:20:5c:38:9b: 0b:6d:76:14:96:c4:0e:39:25:27:07:b8:51:0d:09: a0:6a:96:de:a8:52:1b:39:28:19:02:a1:b2:c3:90: 12:ef:c9:16:9b:5b:e0:37:da:43:c2:af:29:7e:6b: 3c:16:b5:37:95:a3:dd:bc:a9:07:e9:84:cf:82:6e: 35:1c:a9:2a:f3:38:0d:b2:db:23:2a:f7:7d:97:cb: 1a:d0:2e:92:2d:e6:53:0b:d4:1c:14:71:82:70:2b: 77:c1:a3:9f:d4:4f:45:8c:7d:e4:d5:24:76:21:eb: d2:71:50:5a:c5:bf:3c:3b:12:ee:a4:55:35:71:71: 1c:62:9b:c9:32:55:41:f3:4d:59:5a:72:d7:81:48: 72:44:0b:fd:24:03:07:31:ee:7b:e0:1f:fb:5a:78: 0e:3b:e6:a6:8f:32:6a:a5:ec:af:9d:56:5e:cd:19: 44:01:af:f5:4c:33:aa:2f:ad:13:7e:96:4c:de:2e: a8:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:5C:FF:40:FC:AB:1B:8F:F3:E5:65:96:79:C7:D7:92:F8:61:4D:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:a4:3d:54:d1:a9:d3:ca:09:7a:02:e9:1f:fe:ae:f3:81:64: 2f:bc:ff:0b:f8:6d:42:41:d4:b1:7f:41:9b:15:93:a5:19:ec: 2e:bf:ec:9d:db:80:ea:78:6a:1d:d7:1d:df:37:d8:31:e8:c2: 17:a3:1f:13:23:cc:d0:bd:85:34:a8:7d:18:fc:f3:ee:14:5e: 9a:e6:32:af:1d:74:20:4e:05:f5:70:7f:e1:2c:a1:3b:79:4e: 66:a1:5a:82:6e:92:75:f1:05:21:93:f0:a9:51:3d:25:d1:04: 1e:e3:29:1e:99:02:32:b5:ea:21:25:77:d2:bc:77:4d:2d:b3: 24:8f:56:d9:77:14:86:70:45:2d:99:c0:16:01:74:56:c8:56: 52:84:8c:11:c1:68:de:96:b9:1f:3b:44:ed:51:7b:88:7e:7c: e2:85:30:43:75:79:41:61:10:07:33:c9:fc:0e:ea:72:99:85: 12:9e:dd:f6:0f:ac:d3:10:c5:e8:04:fc:ef:1a:b5:ce:86:29: a7:69:7f:63:ba:f1:55:de:02:81:78:1e:d3:10:c4:2f:d5:e3: d9:08:41:6b:ed:c2:0d:ad:44:f0:92:42:ad:5b:db:db:92:95: 6e:58:53:d2:81:f4:b3:ac:34:39:6a:5d:d4:96:37:69:84:36: 54:7b:c2:44 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn14bVInHeRDInu8nAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDUyNDE0NDEzOVoXDTI1MDgyMjE0NDEzOVowLzEtMCsGA1UEAxMk NzI3ZmE2NWMtOTRkZi00OTM1LWIyN2YtYzAyNDEwMWQ1ZGY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZq/SMClluDXeIhsutfZ4u7s6Ei/GBfohhPs dOpLRniTsO4rYfPiGOGkahceCriOCeTsrCbkaW968GIL1FDx7xJEMf2DwiBcOJsL bXYUlsQOOSUnB7hRDQmgapbeqFIbOSgZAqGyw5AS78kWm1vgN9pDwq8pfms8FrU3 laPdvKkH6YTPgm41HKkq8zgNstsjKvd9l8sa0C6SLeZTC9QcFHGCcCt3waOf1E9F jH3k1SR2IevScVBaxb88OxLupFU1cXEcYpvJMlVB801ZWnLXgUhyRAv9JAMHMe57 4B/7WngOO+amjzJqpeyvnVZezRlEAa/1TDOqL60TfpZM3i6ogwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAVc/0D8qxuP8+VllnnH15L4YU12MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGRiODM1MmMtZGQ0MS0z YjY0LTk0YjctZGMyMDM5OTU4MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABykPVTRqdPKCXoC6R/+rvOBZC+8/wv4bUJB1LF/QZsVk6UZ7C6/7J3b gOp4ah3XHd832DHowhejHxMjzNC9hTSofRj88+4UXprmMq8ddCBOBfVwf+EsoTt5 TmahWoJuknXxBSGT8KlRPSXRBB7jKR6ZAjK16iEld9K8d00tsySPVtl3FIZwRS2Z wBYBdFbIVlKEjBHBaN6WuR87RO1Re4h+fOKFMEN1eUFhEAczyfwO6nKZhRKe3fYP rNMQxegE/O8atc6GKadpf2O68VXeAoF4HtMQxC/V49kIQWvtwg2tRPCSQq1b29uS lW5YU9KB9LOsNDlqXdSWN2mENlR7wkQ= -----END CERTIFICATE-----Generated at Sat Jun 7 04:09:54 2025 by rpki-client