$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/11e8a979-8040-388e-9db4-1265767f80e5.roa File: 11e8a979-8040-388e-9db4-1265767f80e5.roa (raw, json) Hash identifier: PzAX2ikzlfbLdM/Pu1G7XnILnqSXpzzdvSCLcdtZPJs= Subject key identifier: 22:22:FA:3A:BA:6B:DE:41:F9:20:07:88:73:37:0F:FA:62:A3:D4:0D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B45865043B4CF5D1C8AD64D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/11e8a979-8040-388e-9db4-1265767f80e5.roa Signing time: Sun 21 Sep 2025 20:09:06 +0000 ROA not before: Sun 21 Sep 2025 20:09:06 +0000 ROA not after: Sat 20 Dec 2025 21:09:06 +0000 asID: 44547 IP address blocks: 136.0.200.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:45:86:50:43:b4:cf:5d:1c:8a:d6:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 21 20:09:06 2025 GMT Not After : Dec 20 21:09:06 2025 GMT Subject: CN=55430d4b-0dbb-496d-a85f-650c3061b5c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:11:f9:f7:cf:bc:f9:01:be:4b:1b:1d:cb:76: d5:24:83:dc:bd:47:b4:56:7b:12:be:10:21:b5:ee: 23:fd:e2:ae:2f:5c:f0:31:5f:b8:97:39:e8:d9:97: 96:54:d2:39:af:53:34:bf:34:14:b3:40:5d:04:50: e7:12:81:d6:97:b4:87:96:20:94:f0:fe:d6:0d:57: 18:b6:46:a5:54:73:e4:53:e5:ff:9c:2f:5a:aa:77: df:7c:47:29:d7:3d:11:e3:c7:95:9a:3e:2f:51:cd: 65:22:50:09:e4:d4:db:08:f1:ff:c2:27:40:e7:9f: b4:3b:10:36:aa:e2:6f:7c:b6:92:8e:78:d6:f5:45: 1e:1a:d3:79:82:92:57:49:97:67:81:16:1a:7f:32: 23:ae:4f:2e:b5:8c:08:a8:24:9a:70:05:fd:f5:ef: 08:5b:0e:04:77:fb:57:44:78:85:ef:bb:ca:c9:d4: 95:f4:f6:28:ab:86:29:75:4b:35:9f:a8:7a:da:ec: 55:ae:47:9c:89:61:f4:86:3e:96:5f:2b:0d:b9:a2: 1c:43:9a:cb:76:dc:59:7f:70:ba:1d:47:f5:11:6e: 98:75:49:c9:61:56:51:03:91:72:82:e7:46:3c:39: 78:24:53:bc:1c:07:01:5d:be:24:38:00:b5:e4:09: 62:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:22:FA:3A:BA:6B:DE:41:F9:20:07:88:73:37:0F:FA:62:A3:D4:0D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/11e8a979-8040-388e-9db4-1265767f80e5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.200.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0a:cc:81:3a:8e:4e:a5:5e:00:b9:16:1b:1f:94:80:b7:b8:f6: 33:db:6e:55:d1:95:49:1a:35:47:d4:84:3e:30:9f:77:7f:78: 2b:ee:0e:77:61:a5:39:85:46:c0:77:f1:f2:36:20:82:40:89: 2b:9d:e0:7d:a4:92:22:a3:b5:42:68:31:8e:71:d9:0a:92:98: 35:12:bb:cc:02:cf:5b:f9:9c:47:23:76:d7:87:d7:f9:48:9f: 84:3b:ab:f6:8d:b3:f5:f6:0a:de:16:36:65:8a:d9:12:1e:3d: 6b:12:fd:a5:2e:fc:62:b2:84:a8:ff:ee:72:ae:a4:18:0a:65: 61:10:1f:9c:97:19:75:5d:82:2e:2f:21:0e:33:92:93:94:bf: 21:4f:70:e1:33:85:05:b6:93:7f:fc:86:fb:de:09:74:84:14: 87:a6:c5:8c:a7:ed:30:57:4d:a6:ca:e4:dc:d5:4c:28:db:53: cc:a6:4e:bb:04:7a:0e:ab:a0:2b:ca:22:0a:17:51:12:65:8d: 3d:f9:0d:89:9e:a6:5c:ea:9a:0f:0c:26:11:53:6a:c6:88:7b: 06:d8:cc:58:88:65:ad:90:f5:6f:49:0d:1b:5f:f2:53:a2:96: 92:3d:56:83:70:de:07:21:79:fc:bb:22:fe:fd:8a:84:89:9f: fd:dc:a4:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtFhlBDtM9dHIrWTYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyMTIwMDkwNloXDTI1MTIyMDIxMDkwNlowLzEtMCsGA1UEAxMk NTU0MzBkNGItMGRiYi00OTZkLWE4NWYtNjUwYzMwNjFiNWM0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhH598+8+QG+Sxsdy3bVJIPcvUe0VnsSvhAh te4j/eKuL1zwMV+4lzno2ZeWVNI5r1M0vzQUs0BdBFDnEoHWl7SHliCU8P7WDVcY tkalVHPkU+X/nC9aqnfffEcp1z0R48eVmj4vUc1lIlAJ5NTbCPH/widA55+0OxA2 quJvfLaSjnjW9UUeGtN5gpJXSZdngRYafzIjrk8utYwIqCSacAX99e8IWw4Ed/tX RHiF77vKydSV9PYoq4YpdUs1n6h62uxVrkeciWH0hj6WXysNuaIcQ5rLdtxZf3C6 HUf1EW6YdUnJYVZRA5FygudGPDl4JFO8HAcBXb4kOAC15AliSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCIi+jq6a95B+SAHiHM3D/pio9QNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTFlOGE5NzktODA0MC0z ODhlLTlkYjQtMTI2NTc2N2Y4MGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAArMgTqOTqVeALkWGx+UgLe49jPbblXRlUkaNUfUhD4wn3d/eCvuDndh pTmFRsB38fI2IIJAiSud4H2kkiKjtUJoMY5x2QqSmDUSu8wCz1v5nEcjdteH1/lI n4Q7q/aNs/X2Ct4WNmWK2RIePWsS/aUu/GKyhKj/7nKupBgKZWEQH5yXGXVdgi4v IQ4zkpOUvyFPcOEzhQW2k3/8hvveCXSEFIemxYyn7TBXTabK5NzVTCjbU8ymTrsE eg6roCvKIgoXURJljT35DYmeplzqmg8MJhFTasaIewbYzFiIZa2Q9W9JDRtf8lOi lpI9VoNw3gchefy7Iv79ioSJn/3cpAo= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:01 2025 by rpki-client