$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41576a70-b172-3fa5-83c9-71c7469a5596.roa File: 41576a70-b172-3fa5-83c9-71c7469a5596.roa (raw, json) Hash identifier: UNWaaNiMIKbSXEX7I8r6kgwGc3B4bK14oArSVmzVfx0= Subject key identifier: 6E:9E:51:14:48:51:18:59:81:68:FB:E8:70:2E:D6:14:7B:57:32:F8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772D75A5E8C442C14B3180 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41576a70-b172-3fa5-83c9-71c7469a5596.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 136.0.108.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2d:75:a5:e8:c4:42:c1:4b:31:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=8bce5a60-3a17-4963-b6ca-c50d0a8da360 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:ab:21:c3:9c:aa:25:08:9e:2e:84:fc:da:fd: 89:6c:6e:db:44:ac:5d:b4:6c:2a:13:c1:61:40:20: 30:c6:0c:cf:42:c4:0f:cb:31:27:82:94:e4:e1:78: 58:1c:1f:2c:69:23:a7:32:bb:a4:ad:bf:f8:f9:25: bd:76:73:91:00:89:75:a2:f3:f8:ea:4c:ed:ae:c7: a0:95:c5:98:2e:bf:1d:b5:95:de:86:fc:ab:d1:d8: 05:26:71:3e:db:1c:d4:be:81:fd:a2:95:94:70:c5: ed:48:ab:b4:83:8d:96:48:80:e0:76:4b:2b:2c:0d: e9:f7:ac:13:7b:a6:1f:ef:36:19:d7:9b:a7:90:b2: b3:af:b9:b4:a7:9c:04:1a:38:14:cf:ef:8c:ac:be: ce:9c:ee:1d:8a:4f:43:8d:23:e7:b5:f3:d1:a7:b6: 86:8f:9d:d3:85:e7:39:67:1e:9c:75:4b:52:9e:9c: 44:0b:62:81:69:17:a8:c9:06:38:b5:9c:30:c9:1c: 76:b1:82:7d:df:f9:49:e2:42:ec:08:c4:81:13:b8: ca:26:a1:2e:52:4c:d2:c3:11:6b:2c:a7:c5:9e:c7: 86:67:d9:2c:b8:cc:15:72:a1:a4:d5:5b:10:92:70: a5:30:d9:2d:15:57:6a:a9:f5:e9:65:88:12:65:a8: 69:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:9E:51:14:48:51:18:59:81:68:FB:E8:70:2E:D6:14:7B:57:32:F8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/41576a70-b172-3fa5-83c9-71c7469a5596.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.108.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 52:49:41:13:36:b2:0b:82:f4:1c:0a:11:1b:fd:c4:5f:52:18: 92:04:1f:2a:cd:43:05:76:b6:04:62:a9:78:8f:3e:87:f8:cd: fa:48:ba:76:56:a8:d1:77:47:f3:9e:48:30:53:5f:71:5c:20: 57:04:bf:c2:ad:0c:44:19:cf:44:ae:32:5a:30:bb:56:06:38: b2:4f:7e:5a:6b:27:fd:b2:ea:7d:9e:bd:74:40:11:d7:4d:2d: 55:4b:58:73:b0:82:ee:3d:36:60:ab:02:b9:9d:bc:93:74:3c: 56:94:ce:d1:11:a7:bf:a0:6f:ee:ea:16:42:fb:1b:d6:de:f5: f3:7f:47:6c:c6:ff:fc:74:1d:63:f2:de:72:5a:d7:3f:ea:d4: 64:da:34:30:e8:e3:7a:12:fe:22:f8:41:d3:54:32:d6:76:1d: 18:14:09:b5:5e:c8:6d:ce:59:d6:cb:8a:a9:f2:df:4d:85:d3: cd:2e:94:11:b6:52:db:cf:68:a7:d8:06:44:51:47:ad:7a:d7: c4:5b:51:b2:ba:d5:a2:02:b3:80:5a:f5:91:6f:ed:d3:dc:c4: 02:2a:90:89:29:dc:c3:31:42:e4:fa:21:50:68:92:0e:11:e3: 42:6a:98:f3:64:01:99:a7:32:0c:75:49:05:cb:c2:54:78:0a: 99:33:3d:21 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy11pejEQsFLMYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk OGJjZTVhNjAtM2ExNy00OTYzLWI2Y2EtYzUwZDBhOGRhMzYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjqshw5yqJQieLoT82v2JbG7bRKxdtGwqE8Fh QCAwxgzPQsQPyzEngpTk4XhYHB8saSOnMrukrb/4+SW9dnORAIl1ovP46kztrseg lcWYLr8dtZXehvyr0dgFJnE+2xzUvoH9opWUcMXtSKu0g42WSIDgdksrLA3p96wT e6Yf7zYZ15unkLKzr7m0p5wEGjgUz++MrL7OnO4dik9DjSPntfPRp7aGj53Thec5 Zx6cdUtSnpxEC2KBaReoyQY4tZwwyRx2sYJ93/lJ4kLsCMSBE7jKJqEuUkzSwxFr LKfFnseGZ9ksuMwVcqGk1VsQknClMNktFVdqqfXpZYgSZahpqQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG6eURRIURhZgWj76HAu1hR7VzL4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDE1NzZhNzAtYjE3Mi0z ZmE1LTgzYzktNzFjNzQ2OWE1NTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABsMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFJJQRM2sguC9BwKERv9xF9SGJIEHyrNQwV2tgRiqXiPPof4zfpIunZW qNF3R/OeSDBTX3FcIFcEv8KtDEQZz0SuMlowu1YGOLJPflprJ/2y6n2evXRAEddN LVVLWHOwgu49NmCrArmdvJN0PFaUztERp7+gb+7qFkL7G9be9fN/R2zG//x0HWPy 3nJa1z/q1GTaNDDo43oS/iL4QdNUMtZ2HRgUCbVeyG3OWdbLiqny302F080ulBG2 UtvPaKfYBkRRR61618RbUbK61aICs4Ba9ZFv7dPcxAIqkIkp3MMxQuT6IVBokg4R 40JqmPNkAZmnMgx1SQXLwlR4CpkzPSE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:48 2025 by rpki-client