$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a24cb3a-327e-3e45-a503-f2dd73220502.roa File: 3a24cb3a-327e-3e45-a503-f2dd73220502.roa (raw, json) Hash identifier: y0yK803J47fVIiZWtEVHXnBK13QBWxxWXCk7e3tQaTw= Subject key identifier: 96:76:B0:8F:58:6A:1A:91:87:41:03:D2:B1:6A:5A:49:4F:EF:B2:D2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B13D6D5E99B65C80EE26731C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a24cb3a-327e-3e45-a503-f2dd73220502.roa Signing time: Thu 04 Sep 2025 01:00:33 +0000 ROA not before: Thu 04 Sep 2025 01:00:33 +0000 ROA not after: Wed 03 Dec 2025 02:00:33 +0000 asID: 9009 IP address blocks: 136.0.171.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:13:d6:d5:e9:9b:65:c8:0e:e2:67:31:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 4 01:00:33 2025 GMT Not After : Dec 3 02:00:33 2025 GMT Subject: CN=4d0c4925-94fb-4f07-8ec7-1882288648a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:65:9e:c6:c2:e3:5e:0e:78:74:4a:25:9a:94: 06:42:f4:1d:5a:b5:18:72:73:70:7e:7d:18:89:6e: c1:74:bc:81:dc:6e:c7:c1:b7:20:f9:0b:56:67:ef: 0c:ee:b0:32:be:66:48:73:21:f8:6b:14:8d:68:2f: 7b:92:d6:d2:81:2f:dc:0f:8c:cd:56:90:4d:0c:93: ae:61:fb:02:bc:19:aa:be:60:65:88:62:cf:31:a9: 94:b1:b6:6e:00:79:72:c2:00:e6:c9:f2:db:2d:0d: d7:c8:c6:14:4c:ec:a1:b1:b9:66:94:04:82:32:fc: 9e:ae:b7:8c:0f:b9:64:5d:22:a4:b5:49:21:4c:74: f4:ce:5b:34:28:42:b4:5f:b4:49:12:71:1a:df:c6: 57:98:d2:39:9b:18:17:86:19:26:c7:5f:35:43:98: 53:78:69:b9:24:f8:b9:1f:ce:1c:5e:e1:15:58:4d: 2d:02:c8:53:3e:29:23:cd:6d:39:8a:d9:a0:5f:d3: 0b:fe:44:78:6d:8b:b6:e7:92:c7:b9:a0:e4:e9:07: ce:a9:70:d7:88:38:71:be:2e:fc:57:71:1a:d7:61: 71:e7:57:3b:96:8d:5f:0b:b2:fb:34:7d:37:2d:9b: ef:11:d2:76:83:94:cf:c7:66:ab:40:dd:f8:ad:9c: b9:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:76:B0:8F:58:6A:1A:91:87:41:03:D2:B1:6A:5A:49:4F:EF:B2:D2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3a24cb3a-327e-3e45-a503-f2dd73220502.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.171.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 71:bf:de:18:4d:bd:0d:ac:35:2f:86:d9:94:17:7f:09:06:4e: a4:3c:fb:b0:2a:89:c9:5d:84:23:8b:f1:bc:02:41:5b:6d:6f: de:8e:7e:58:7f:ad:b2:e2:f4:e1:4d:19:3a:c9:0d:cc:da:56: 60:50:90:55:b3:9f:a3:37:5b:72:25:84:de:6b:f7:7c:b2:e7: 58:27:d9:61:0c:a9:2a:1d:76:ad:12:55:72:79:6a:15:fc:b7: ca:71:a9:ec:c4:86:f9:29:8a:4f:ca:36:18:9b:c9:8c:5a:4f: bd:ff:77:84:1c:88:91:19:55:69:2a:cf:50:50:4b:55:31:a2: ce:bf:68:bf:21:3b:41:ca:8e:35:c5:58:94:88:40:59:d4:36: 76:9c:b1:ae:ba:c6:60:b9:e0:c7:93:8d:03:ec:69:c3:36:4e: d8:d6:9c:e5:5b:65:ce:de:a6:d6:a2:bc:45:a2:6e:5e:50:50: 2c:a8:cd:7a:c0:d8:17:de:3e:b8:cf:68:02:09:84:05:04:b7: af:60:54:65:f6:dd:b4:bf:46:90:75:66:a2:8b:d9:2e:aa:84: fc:a7:43:a6:ec:fe:e0:1d:31:b2:21:30:dd:6c:33:3c:20:ae: 23:dd:16:0e:16:87:63:ab:80:38:66:9f:df:d7:ec:47:c6:d8: d2:4b:d4:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsT1tXpm2XIDuJnMcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNDAxMDAzM1oXDTI1MTIwMzAyMDAzM1owLzEtMCsGA1UEAxMk NGQwYzQ5MjUtOTRmYi00ZjA3LThlYzctMTg4MjI4ODY0OGEwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2WexsLjXg54dEolmpQGQvQdWrUYcnNwfn0Y iW7BdLyB3G7Hwbcg+QtWZ+8M7rAyvmZIcyH4axSNaC97ktbSgS/cD4zNVpBNDJOu YfsCvBmqvmBliGLPMamUsbZuAHlywgDmyfLbLQ3XyMYUTOyhsblmlASCMvyerreM D7lkXSKktUkhTHT0zls0KEK0X7RJEnEa38ZXmNI5mxgXhhkmx181Q5hTeGm5JPi5 H84cXuEVWE0tAshTPikjzW05itmgX9ML/kR4bYu255LHuaDk6QfOqXDXiDhxvi78 V3Ea12Fx51c7lo1fC7L7NH03LZvvEdJ2g5TPx2arQN34rZy5MwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJZ2sI9YahqRh0ED0rFqWklP77LSMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2EyNGNiM2EtMzI3ZS0z ZTQ1LWE1MDMtZjJkZDczMjIwNTAyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHG/3hhNvQ2sNS+G2ZQXfwkGTqQ8+7AqicldhCOL8bwCQVttb96Oflh/ rbLi9OFNGTrJDczaVmBQkFWzn6M3W3IlhN5r93yy51gn2WEMqSoddq0SVXJ5ahX8 t8pxqezEhvkpik/KNhibyYxaT73/d4QciJEZVWkqz1BQS1Uxos6/aL8hO0HKjjXF WJSIQFnUNnacsa66xmC54MeTjQPsacM2TtjWnOVbZc7eptaivEWibl5QUCyozXrA 2BfePrjPaAIJhAUEt69gVGX23bS/RpB1ZqKL2S6qhPynQ6bs/uAdMbIhMN1sMzwg riPdFg4Wh2OrgDhmn9/X7EfG2NJL1C4= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:38 2025 by rpki-client