$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa File: 52c21e94-873d-37f3-9993-0053617532ab.roa (raw, json) Hash identifier: +HJ3MyCsAUpMTa7BGSZQ3Zqo+5XMxO+6D6dbMFOSbcU= Subject key identifier: AA:03:78:11:7D:4D:72:D2:73:01:E5:9B:B8:A9:AD:62:0D:7D:68:FB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B56D7334BD59C8C7B6059E300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa Signing time: Sun 28 Sep 2025 01:00:33 +0000 ROA not before: Sun 28 Sep 2025 01:00:33 +0000 ROA not after: Sat 27 Dec 2025 02:00:33 +0000 asID: 10557 IP address blocks: 136.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:56:d7:33:4b:d5:9c:8c:7b:60:59:e3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 28 01:00:33 2025 GMT Not After : Dec 27 02:00:33 2025 GMT Subject: CN=560c2a94-0906-4be1-83b4-7b2c4bd4e797 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:e0:4a:32:0e:de:18:e5:a7:b1:fb:63:f0:dd: 45:7a:d9:70:3d:dd:a6:76:ef:6d:3f:1a:c3:6e:d0: 50:71:0e:4b:ff:0a:27:a8:77:98:12:ca:18:7b:69: fa:70:34:8c:59:c7:c7:b5:1d:55:b5:e8:80:76:e9: f9:21:75:78:5a:ce:39:78:46:ff:21:76:35:cc:87: 58:44:1e:b0:a0:a1:68:dd:25:e3:95:7b:13:e5:7a: 23:ea:e2:77:9c:a8:82:a3:53:5a:be:38:8b:45:7e: 76:61:44:90:4a:0e:d3:77:54:92:76:f9:3b:6e:12: 57:82:43:15:4f:3c:42:e5:96:da:54:6c:1d:a0:5a: ca:0c:bc:b7:00:a1:1b:35:5e:d1:21:0f:05:3a:6d: 26:17:ab:13:78:c6:c2:4d:15:52:ba:7e:6b:78:01: 14:df:b7:8c:f5:47:b2:2d:cd:4d:cb:be:56:22:d6: de:cb:fc:3f:a3:1a:58:9b:1d:6c:10:25:13:0f:80: 88:8a:3a:75:0e:7b:ea:ff:75:66:d8:9d:42:fc:2d: 2d:fa:b8:d2:33:24:16:44:95:01:f2:e9:9c:10:08: 76:ce:1e:86:da:b5:e1:f1:76:3e:7b:3d:cc:bf:b0: b1:44:f7:04:a1:de:dd:7c:95:2a:c2:41:c1:ac:52: dd:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:03:78:11:7D:4D:72:D2:73:01:E5:9B:B8:A9:AD:62:0D:7D:68:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 65:71:16:38:0e:d1:38:da:2b:e9:fe:d6:94:81:8b:d6:b7:7c: 01:42:07:75:d5:cd:89:18:ac:e0:be:1a:a3:b0:59:7e:b5:96: ac:56:65:7e:0e:82:b3:84:e9:5b:65:11:b3:19:0f:9a:3d:8b: 02:c2:9f:ee:2d:2d:ac:e8:a4:b0:22:55:77:f7:a2:af:92:be: 9e:8b:20:b5:2c:a6:27:b2:0e:d2:3d:17:6c:31:da:ae:5b:6d: d4:9a:f1:fc:e4:2c:af:1c:bf:2f:06:37:7b:5b:24:0d:e4:c6: d7:5b:88:87:6d:94:e5:d6:a3:fc:9d:ab:97:fd:ea:56:c6:2c: 08:b2:a1:55:76:63:b9:44:86:db:d1:aa:90:af:9d:83:4f:62: e8:4c:a8:b5:cb:db:7e:d2:14:eb:f5:e2:af:9c:26:1a:4b:19: ec:8b:63:d7:19:00:57:1d:46:fb:01:db:ef:91:f1:30:20:21: 56:e7:0c:dc:67:03:58:21:2f:fa:6f:f2:24:f7:07:93:6c:c2: 79:8b:d6:9f:1b:88:2a:d8:38:27:eb:de:1c:6c:72:9b:9b:7f: 5b:54:92:5e:a7:78:42:af:58:d1:c8:17:fd:84:89:bb:fa:ac: 1d:13:3c:a1:38:92:de:6f:aa:c1:8b:a1:cd:36:c1:6a:32:13: 3c:a8:93:5b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtW1zNL1ZyMe2BZ4wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyODAxMDAzM1oXDTI1MTIyNzAyMDAzM1owLzEtMCsGA1UEAxMk NTYwYzJhOTQtMDkwNi00YmUxLTgzYjQtN2IyYzRiZDRlNzk3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjuBKMg7eGOWnsftj8N1FetlwPd2mdu9tPxrD btBQcQ5L/wonqHeYEsoYe2n6cDSMWcfHtR1VteiAdun5IXV4Ws45eEb/IXY1zIdY RB6woKFo3SXjlXsT5Xoj6uJ3nKiCo1NavjiLRX52YUSQSg7Td1SSdvk7bhJXgkMV TzxC5ZbaVGwdoFrKDLy3AKEbNV7RIQ8FOm0mF6sTeMbCTRVSun5reAEU37eM9Uey Lc1Ny75WItbey/w/oxpYmx1sECUTD4CIijp1Dnvq/3Vm2J1C/C0t+rjSMyQWRJUB 8umcEAh2zh6G2rXh8XY+ez3Mv7CxRPcEod7dfJUqwkHBrFLdOQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKoDeBF9TXLScwHlm7iprWINfWj7MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTJjMjFlOTQtODczZC0z N2YzLTk5OTMtMDA1MzYxNzUzMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGVxFjgO0TjaK+n+1pSBi9a3fAFCB3XVzYkYrOC+GqOwWX61lqxWZX4O grOE6VtlEbMZD5o9iwLCn+4tLazopLAiVXf3oq+Svp6LILUspieyDtI9F2wx2q5b bdSa8fzkLK8cvy8GN3tbJA3kxtdbiIdtlOXWo/ydq5f96lbGLAiyoVV2Y7lEhtvR qpCvnYNPYuhMqLXL237SFOv14q+cJhpLGeyLY9cZAFcdRvsB2++R8TAgIVbnDNxn A1ghL/pv8iT3B5NswnmL1p8biCrYOCfr3hxscpubf1tUkl6neEKvWNHIF/2Eibv6 rB0TPKE4kt5vqsGLoc02wWoyEzyok1s= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:28 2025 by rpki-client