$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35e592ab-b664-3638-b013-e79ccf95e774.roa File: 35e592ab-b664-3638-b013-e79ccf95e774.roa (raw, json) Hash identifier: YuG9NZctZ19Z1mZ62m5CusBHN/kKtO26Tq29NFdQKdU= Subject key identifier: B0:37:75:AC:4D:A2:96:4B:50:2A:F3:07:A6:35:81:2B:A7:F5:17:F8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6C2FD4DFAF173005527C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35e592ab-b664-3638-b013-e79ccf95e774.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 136.0.151.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c2:fd:4d:fa:f1:73:00:55:27:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=f145ba6e-c981-470b-b62b-7e8842697bf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:2d:ed:28:98:9c:89:a3:d3:7d:f4:33:e8:01: 97:72:aa:25:b9:f1:c9:6a:aa:12:be:c0:d5:09:f5: a6:d0:e3:d0:f6:e9:db:d9:22:f1:58:df:e5:60:2f: 81:04:7c:a5:d3:f2:e2:c0:c4:ed:2c:b4:1c:00:fe: 55:23:54:c0:38:c1:df:2c:e9:f5:df:f9:38:94:f2: 15:b8:ee:5e:c0:0d:cb:f3:a6:e6:00:e3:57:2d:2d: d7:3a:e8:c6:ea:dc:6b:f0:8b:4b:f4:fc:28:dc:33: af:95:06:89:4d:3f:1b:47:a7:95:e5:71:ab:2f:dd: 0d:11:99:22:d1:95:71:d6:0e:cd:4d:2a:7f:d4:f2: d4:ac:ec:0d:e5:cb:e1:12:e2:d2:a3:57:d9:2f:f3: db:03:28:b8:5c:fb:5b:9e:09:04:eb:83:65:00:49: 24:a1:6d:b6:d7:5a:8b:37:a4:68:c1:f2:53:a4:5a: 99:7b:74:14:84:2d:e3:cf:84:b8:7c:04:c0:a5:97: 24:91:c3:e7:bd:6b:29:f5:d3:12:36:00:34:44:5d: 92:fd:04:46:b3:5d:46:55:86:03:f0:4f:bf:3e:74: fe:81:43:35:da:f0:aa:46:bc:3e:34:93:d4:ee:97: 23:b2:a1:97:8c:cb:c5:43:2e:7d:e4:92:de:0a:25: 59:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:37:75:AC:4D:A2:96:4B:50:2A:F3:07:A6:35:81:2B:A7:F5:17:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35e592ab-b664-3638-b013-e79ccf95e774.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.151.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:35:4a:a9:01:44:ff:23:cd:fe:57:f3:7d:c0:bc:a8:5e:d4: 59:2c:cf:5a:c2:5d:9f:a0:d0:7d:f6:f9:76:5a:21:1e:e7:a3: 63:eb:89:ed:f0:e4:34:9d:54:f1:a1:04:27:5c:4c:72:30:e4: 1c:fe:f6:11:73:e1:3e:2f:e4:80:f0:08:71:a8:0e:2f:46:3f: 4b:77:6c:0d:a7:62:2f:e8:82:cc:45:82:8f:4f:99:b9:e7:23: a1:86:29:9a:9a:b8:f0:1b:c2:bb:0a:6b:d3:0f:07:9a:80:67: ce:1e:8f:0d:d7:3a:f4:f4:0c:b3:d6:d9:7e:2f:f5:fb:c2:0e: 1f:04:68:66:c3:bc:36:26:f1:de:bc:52:5d:07:65:f8:c6:0f: 1d:5d:c0:89:31:5d:56:c5:79:c2:92:75:19:d4:53:19:f8:d0: 9f:82:2c:10:d1:77:7f:bb:dc:82:d9:2e:13:35:63:23:c8:ed: 6b:df:b3:23:e4:f6:21:8a:02:01:b5:cc:de:2f:29:03:69:56: 58:4c:c4:ec:27:61:d5:55:da:1d:8f:fa:3f:5c:59:0c:39:ff: 90:64:3e:11:1f:05:05:41:72:83:79:81:a5:6b:69:72:f8:50: 29:27:47:83:06:84:9c:88:c1:f7:71:41:c2:a2:a2:fd:61:0b: 94:7d:61:0b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsL9TfrxcwBVJ8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk ZjE0NWJhNmUtYzk4MS00NzBiLWI2MmItN2U4ODQyNjk3YmY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgS3tKJiciaPTffQz6AGXcqolufHJaqoSvsDV CfWm0OPQ9unb2SLxWN/lYC+BBHyl0/LiwMTtLLQcAP5VI1TAOMHfLOn13/k4lPIV uO5ewA3L86bmAONXLS3XOujG6txr8ItL9Pwo3DOvlQaJTT8bR6eV5XGrL90NEZki 0ZVx1g7NTSp/1PLUrOwN5cvhEuLSo1fZL/PbAyi4XPtbngkE64NlAEkkoW2211qL N6RowfJTpFqZe3QUhC3jz4S4fATApZckkcPnvWsp9dMSNgA0RF2S/QRGs11GVYYD 8E+/PnT+gUM12vCqRrw+NJPU7pcjsqGXjMvFQy595JLeCiVZmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLA3daxNopZLUCrzB6Y1gSun9Rf4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzVlNTkyYWItYjY2NC0z NjM4LWIwMTMtZTc5Y2NmOTVlNzc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACXMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGg1SqkBRP8jzf5X833AvKhe1Fksz1rCXZ+g0H32+XZaIR7no2Prie3w 5DSdVPGhBCdcTHIw5Bz+9hFz4T4v5IDwCHGoDi9GP0t3bA2nYi/ogsxFgo9Pmbnn I6GGKZqauPAbwrsKa9MPB5qAZ84ejw3XOvT0DLPW2X4v9fvCDh8EaGbDvDYm8d68 Ul0HZfjGDx1dwIkxXVbFecKSdRnUUxn40J+CLBDRd3+73ILZLhM1YyPI7WvfsyPk 9iGKAgG1zN4vKQNpVlhMxOwnYdVV2h2P+j9cWQw5/5BkPhEfBQVBcoN5gaVraXL4 UCknR4MGhJyIwfdxQcKiov1hC5R9YQs= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:34 2025 by rpki-client