$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa File: 4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa (raw, json) Hash identifier: 7kMHwlzHx54sxwRzmrhxTIXutr8rIWy5CjYakHQlqxE= Subject key identifier: 38:C7:A3:C7:65:D2:14:57:9C:A8:40:1A:D2:4E:B2:A9:25:1B:B0:86 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75CEE8F1E9697D284F680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 136.0.235.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5c:ee:8f:1e:96:97:d2:84:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=4183d0a6-d4de-4a65-a425-a891c7ff3300 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:df:0d:bc:7a:bc:02:eb:7b:8b:d4:f9:49:4d: 3a:1b:11:8b:6b:96:9c:a2:1e:96:34:51:e6:3d:78: 2b:22:3e:7c:fe:ab:8e:65:72:02:b4:35:90:b1:64: 74:e5:d1:be:fe:f7:fe:c4:c9:f5:b6:d4:07:18:1e: 40:fd:03:71:1a:b6:5b:fd:53:e0:ac:ad:95:f5:98: ff:5b:19:9d:f6:2c:b9:fb:89:a5:7b:48:cf:76:2c: cf:9c:be:86:f8:b4:49:86:c3:68:4d:5e:3b:b5:c6: a9:10:59:ef:35:cd:c8:c9:63:76:8b:1b:c8:59:8f: 8e:24:1b:c1:40:9d:f9:39:49:84:ca:18:9a:81:e7: f1:e9:66:da:e0:a0:17:cc:e8:c5:74:f5:9a:bc:ba: c1:81:d3:00:2e:87:54:70:c2:7f:b0:6a:9e:33:4e: c1:5f:f0:e4:ef:dd:b0:b5:23:6f:79:d5:25:07:f1: c9:d1:79:4f:46:b5:72:49:11:47:5c:69:41:43:5f: 79:10:e2:5e:85:e3:10:d3:6f:50:b2:cc:59:cf:a6: de:5d:01:17:bb:3a:dc:fe:81:5a:45:b2:fd:b7:3e: 44:96:27:11:28:a6:66:91:07:4f:3c:12:8a:89:8a: bb:ae:2c:c6:5e:d1:fd:c5:86:e6:95:e7:03:48:07: ca:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:C7:A3:C7:65:D2:14:57:9C:A8:40:1A:D2:4E:B2:A9:25:1B:B0:86 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4522fac1-ef1e-3781-8337-9a3cc91eb9e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.235.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 16:8c:50:f9:a9:b6:ef:f8:69:4b:72:af:ff:a4:cf:6b:cf:fe: 9a:b5:12:55:55:ab:fb:ac:06:77:f3:6d:22:46:19:2f:11:ef: 8b:48:d9:88:99:b2:f4:13:84:f4:86:d8:89:b4:53:18:51:f7: 74:13:af:2a:d0:a6:c3:80:cb:01:b2:8f:18:dd:83:f0:22:d1: 58:0f:15:09:e6:fa:b5:33:a1:e3:6a:ae:76:6f:72:3d:d4:2e: 94:bd:f8:cf:57:d1:10:8e:bc:f6:11:d6:df:8a:26:fc:12:c0: 99:bb:24:de:38:ce:1f:9b:51:45:b5:44:d2:73:cb:44:40:f4: c8:0f:d1:37:49:b4:be:ee:21:50:94:8e:8f:d1:ca:e2:6e:60: 8a:2e:8c:37:ad:6c:e3:17:dd:57:ae:70:7b:c7:af:6b:a8:e6: eb:2c:bd:a8:7b:e8:4a:0f:75:94:34:03:7a:a8:f0:8b:3a:8b: 97:8b:58:05:66:bf:6a:7d:f1:9c:e4:94:f8:60:57:c0:ce:b1: ee:6f:3b:13:69:37:74:5a:80:96:31:bc:d1:bd:80:93:8a:fd: c4:59:97:76:f1:f9:64:09:f2:c9:ff:f7:90:39:33:89:f6:a0: 67:c1:9e:61:92:ef:7f:ad:d1:1c:af:91:7e:d4:16:50:4a:ca: b8:91:31:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1zujx6Wl9KE9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk NDE4M2QwYTYtZDRkZS00YTY1LWE0MjUtYTg5MWM3ZmYzMzAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3N8NvHq8Aut7i9T5SU06GxGLa5acoh6WNFHm PXgrIj58/quOZXICtDWQsWR05dG+/vf+xMn1ttQHGB5A/QNxGrZb/VPgrK2V9Zj/ Wxmd9iy5+4mle0jPdizPnL6G+LRJhsNoTV47tcapEFnvNc3IyWN2ixvIWY+OJBvB QJ35OUmEyhiagefx6Wba4KAXzOjFdPWavLrBgdMALodUcMJ/sGqeM07BX/Dk792w tSNvedUlB/HJ0XlPRrVySRFHXGlBQ195EOJeheMQ029QssxZz6beXQEXuzrc/oFa RbL9tz5ElicRKKZmkQdPPBKKiYq7rizGXtH9xYbmlecDSAfKeQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDjHo8dl0hRXnKhAGtJOsqklG7CGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDUyMmZhYzEtZWYxZS0z NzgxLTgzMzctOWEzY2M5MWViOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABaMUPmptu/4aUtyr/+kz2vP/pq1ElVVq/usBnfzbSJGGS8R74tI2YiZ svQThPSG2Im0UxhR93QTryrQpsOAywGyjxjdg/Ai0VgPFQnm+rUzoeNqrnZvcj3U LpS9+M9X0RCOvPYR1t+KJvwSwJm7JN44zh+bUUW1RNJzy0RA9MgP0TdJtL7uIVCU jo/RyuJuYIoujDetbOMX3VeucHvHr2uo5ussvah76EoPdZQ0A3qo8Is6i5eLWAVm v2p98ZzklPhgV8DOse5vOxNpN3RagJYxvNG9gJOK/cRZl3bx+WQJ8sn/95A5M4n2 oGfBnmGS73+t0RyvkX7UFlBKyriRMeA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:50:06 2025 by rpki-client