$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb30c8f-33da-3481-8acc-5ddf9b75e3dc.roa File: fdb30c8f-33da-3481-8acc-5ddf9b75e3dc.roa (raw, json) Hash identifier: JguF1jAKRM+kRUBDMYPm7JSO0KPZi4ZgtgKFLYCn9YA= Subject key identifier: 3E:0B:92:8E:EB:7B:9D:D2:6E:09:BE:AC:B1:31:35:04:81:5E:7A:50 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584A6679AC90944F05E42E3AD380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb30c8f-33da-3481-8acc-5ddf9b75e3dc.roa Signing time: Thu 03 Jul 2025 22:38:22 +0000 ROA not before: Thu 03 Jul 2025 22:38:22 +0000 ROA not after: Wed 01 Oct 2025 22:38:22 +0000 asID: 401152 IP address blocks: 144.225.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 07 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4a:66:79:ac:90:94:4f:05:e4:2e:3a:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 3 22:38:22 2025 GMT Not After : Oct 1 22:38:22 2025 GMT Subject: CN=c3f2ddb1-c8f7-4ecb-b895-15f45e4a0e36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:88:c1:18:cc:9b:8c:65:90:d4:68:71:07:ab: 95:3d:84:31:da:64:40:fb:4a:6d:df:f6:f4:6d:e9: 43:29:31:37:a3:ce:6f:52:7e:a8:d5:c2:06:5c:b8: 1b:5a:f4:63:62:24:db:70:de:e6:dc:f0:29:75:2c: 33:46:5c:bc:8d:a1:b6:cc:35:3d:92:84:e6:18:17: 39:64:99:bc:d3:bc:8b:e8:e4:5a:d3:c9:ff:20:d4: 31:13:b3:2c:7f:bb:d5:73:1a:59:66:b5:39:12:6f: 16:b2:23:9c:62:98:db:5a:1f:ac:14:b4:b2:76:01: 34:eb:89:e2:7e:fa:9e:d5:59:83:46:67:4e:97:93: f5:4f:7e:c6:e0:1a:b8:5c:27:b1:be:9f:2b:fe:0f: 5c:fd:0d:32:bc:1d:d8:4a:c0:39:95:a9:5a:cb:ff: b1:67:1b:20:f4:05:ff:79:22:0a:5c:b5:3c:f1:f4: 97:82:d2:e8:07:b9:08:c2:49:d2:d5:4f:25:2f:4c: 54:00:24:a8:ac:6a:2a:55:f4:6b:d3:8f:d9:73:ca: f6:c3:5c:cd:90:fc:d8:85:b7:73:0b:91:2e:13:12: 03:71:4c:85:95:d3:9a:9f:ed:ef:c6:c3:cb:9d:12: 0c:b7:a7:4f:0e:8f:f4:85:8a:d6:8f:93:30:b2:d3: 5d:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:0B:92:8E:EB:7B:9D:D2:6E:09:BE:AC:B1:31:35:04:81:5E:7A:50 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fdb30c8f-33da-3481-8acc-5ddf9b75e3dc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 144.225.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:2b:69:b3:77:30:76:59:57:da:da:15:57:38:b3:af:23:7e: 92:52:f5:62:08:02:90:53:2e:2d:3c:91:a8:6e:66:8b:de:9b: d3:63:90:54:9f:14:dc:1f:5b:6a:f6:c5:83:37:68:3f:e1:57: e5:fe:e9:49:91:d8:49:6b:3c:4a:f7:51:c0:ca:a0:25:32:34: 1c:af:be:c3:e5:ad:0a:52:b2:4d:72:2e:2c:31:84:19:4a:10: 6f:b5:27:29:d2:e5:05:93:cf:b0:a2:de:5c:88:21:af:ed:7d: 48:30:48:81:23:84:da:ca:c1:73:18:ab:55:c8:d2:fc:bb:b3: 90:5b:c2:66:79:da:cd:15:31:fa:f9:ac:4b:43:0e:a7:d2:f5: cc:43:12:bc:31:ec:cc:fc:72:ed:d7:ad:f4:c3:33:e2:40:7e: 5e:27:c4:d7:a6:50:5f:be:29:df:de:f2:55:ca:b9:02:32:6c: fd:46:0f:69:1d:bc:2c:26:18:c8:00:00:f6:05:5c:aa:8c:bc: 78:96:02:3b:a2:a7:c0:78:e5:a6:63:cc:df:7f:e9:23:a1:c4: 5c:24:7d:0f:07:1b:6c:b3:74:97:c7:ad:21:01:28:54:13:74: af:9f:fb:2b:c6:8f:d7:13:82:33:d7:bb:bb:dc:65:b0:62:ab: ae:4f:f3:7d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmeayQlE8F5C4604AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDcwMzIyMzgyMloXDTI1MTAwMTIyMzgyMlowLzEtMCsGA1UEAxMk YzNmMmRkYjEtYzhmNy00ZWNiLWI4OTUtMTVmNDVlNGEwZTM2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4jBGMybjGWQ1GhxB6uVPYQx2mRA+0pt3/b0 belDKTE3o85vUn6o1cIGXLgbWvRjYiTbcN7m3PApdSwzRly8jaG2zDU9koTmGBc5 ZJm807yL6ORa08n/INQxE7Msf7vVcxpZZrU5Em8WsiOcYpjbWh+sFLSydgE064ni fvqe1VmDRmdOl5P1T37G4Bq4XCexvp8r/g9c/Q0yvB3YSsA5lalay/+xZxsg9AX/ eSIKXLU88fSXgtLoB7kIwknS1U8lL0xUACSorGoqVfRr04/Zc8r2w1zNkPzYhbdz C5EuExIDcUyFldOan+3vxsPLnRIMt6dPDo/0hYrWj5MwstNdGQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4Lko7re53Sbgm+rLExNQSBXnpQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmRiMzBjOGYtMzNkYS0z NDgxLThhY2MtNWRkZjliNzVlM2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCkOGIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHQrabN3MHZZV9raFVc4s68jfpJS9WIIApBTLi08kahuZovem9NjkFSf FNwfW2r2xYM3aD/hV+X+6UmR2ElrPEr3UcDKoCUyNByvvsPlrQpSsk1yLiwxhBlK EG+1JynS5QWTz7Ci3lyIIa/tfUgwSIEjhNrKwXMYq1XI0vy7s5BbwmZ52s0VMfr5 rEtDDqfS9cxDErwx7Mz8cu3XrfTDM+JAfl4nxNemUF++Kd/e8lXKuQIybP1GD2kd vCwmGMgAAPYFXKqMvHiWAjuip8B45aZjzN9/6SOhxFwkfQ8HG2yzdJfHrSEBKFQT dK+f+yvGj9cTgjPXu7vcZbBiq65P830= -----END CERTIFICATE-----Generated at Sun Jul 6 08:09:42 2025 by rpki-client