$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b355a14-d71d-35b6-918d-e5cbf73259f4.roa File: 5b355a14-d71d-35b6-918d-e5cbf73259f4.roa (raw, json) Hash identifier: 4/LCTvk3x0O4hc8ymj2fZo55B0J34iA4vF9gbUA6XfU= Subject key identifier: DA:B4:57:31:92:44:80:84:69:31:46:74:94:6A:FA:C6:48:5A:93:80 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75D2E843D57A191149E00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b355a14-d71d-35b6-918d-e5cbf73259f4.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 136.0.254.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5d:2e:84:3d:57:a1:91:14:9e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=393e46ba-858a-48c0-84b0-6c7dec5e35be Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:6c:06:16:49:9c:d2:b0:9e:60:39:69:de:d2: 37:cd:ed:30:93:1d:18:73:8a:79:c8:ea:b4:a1:bb: e8:d7:82:0c:94:f1:2e:42:d3:ec:c3:8a:5c:84:8e: cc:43:e5:d9:65:b8:a7:ba:95:93:1e:8a:8e:c7:17: 6f:70:73:35:7a:45:e5:bd:c5:27:67:d0:88:b7:64: f0:9f:31:bf:e0:b2:ec:5e:8d:15:c9:78:a3:1a:13: ab:a3:ab:66:8b:c1:e1:e4:82:92:a9:21:44:d2:0d: 1e:6c:00:c5:b1:ee:23:d2:19:af:93:90:56:64:a7: de:ed:32:d2:ed:d4:55:25:e6:9c:58:7c:5e:91:4b: be:3c:b5:c8:ff:30:7e:84:96:7c:7e:b3:ab:74:58: 1b:d6:60:1b:f7:ba:79:ae:07:00:bf:84:ed:1c:cc: c7:3c:61:98:a8:7d:8c:8a:3b:f3:31:cf:36:24:e9: 95:7a:1c:ec:0e:03:1c:a3:b5:ce:a4:10:4f:f5:dc: 9c:a2:c9:3d:f6:71:9e:08:e2:9d:ed:ec:1c:8f:e4: 52:67:e2:55:9a:05:77:5c:4d:94:c5:34:39:b5:f3: 9b:38:23:3d:b7:bf:bc:9b:7b:c1:ea:f4:c5:bb:51: 5e:47:c8:dd:0a:0b:81:d9:d1:09:d5:7b:cb:7f:de: 4b:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:B4:57:31:92:44:80:84:69:31:46:74:94:6A:FA:C6:48:5A:93:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b355a14-d71d-35b6-918d-e5cbf73259f4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.254.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4f:ac:52:e8:fd:76:48:4c:d6:06:e0:12:c3:c4:84:bd:4c:de: 6a:e4:b8:8c:b7:3d:ce:71:5a:40:ac:51:be:4f:f1:88:5b:02: e4:ce:58:7e:a7:0f:6f:b4:c0:f9:ae:85:4c:1b:1a:38:00:db: af:b2:a5:32:e9:d0:c4:ad:cd:14:91:3a:69:72:96:4d:b5:ea: 7e:23:dd:74:21:fe:62:1a:38:b9:0e:56:29:fe:e8:1b:6d:32: 59:2f:d8:b0:71:8b:84:b5:bf:6c:74:9b:27:54:b8:54:ea:15: af:10:72:da:6f:82:27:71:50:5a:9c:be:3a:e8:9f:c9:30:1e: 19:e8:35:ce:f3:1e:4d:c1:c2:de:40:a8:50:17:02:a0:fd:9c: b6:18:13:af:22:fd:2a:45:41:0d:30:30:a8:db:c0:8f:6e:02: 11:01:22:47:81:59:1b:bf:96:b9:50:ae:94:2a:9f:f7:76:f4: 0f:bb:35:2b:1b:40:af:92:2e:ee:84:2f:d3:50:0f:ea:a6:28: 64:2c:b4:06:f3:09:eb:0a:27:a3:23:e2:1d:e5:ec:97:a9:da: 25:47:61:9a:81:ef:ce:04:58:0e:73:bd:60:e3:0e:62:e7:19: eb:3a:bc:32:11:53:9e:bf:b6:c8:96:22:05:95:1d:1c:43:66: 65:8c:96:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp10uhD1XoZEUngAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MzkzZTQ2YmEtODU4YS00OGMwLTg0YjAtNmM3ZGVjNWUzNWJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlmwGFkmc0rCeYDlp3tI3ze0wkx0Yc4p5yOq0 obvo14IMlPEuQtPsw4pchI7MQ+XZZbinupWTHoqOxxdvcHM1ekXlvcUnZ9CIt2Tw nzG/4LLsXo0VyXijGhOro6tmi8Hh5IKSqSFE0g0ebADFse4j0hmvk5BWZKfe7TLS 7dRVJeacWHxekUu+PLXI/zB+hJZ8frOrdFgb1mAb97p5rgcAv4TtHMzHPGGYqH2M ijvzMc82JOmVehzsDgMco7XOpBBP9dycosk99nGeCOKd7ewcj+RSZ+JVmgV3XE2U xTQ5tfObOCM9t7+8m3vB6vTFu1FeR8jdCguB2dEJ1XvLf95LBQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNq0VzGSRICEaTFGdJRq+sZIWpOAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIzNTVhMTQtZDcxZC0z NWI2LTkxOGQtZTVjYmY3MzI1OWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD+MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE+sUuj9dkhM1gbgEsPEhL1M3mrkuIy3Pc5xWkCsUb5P8YhbAuTOWH6n D2+0wPmuhUwbGjgA26+ypTLp0MStzRSROmlylk216n4j3XQh/mIaOLkOVin+6Btt Mlkv2LBxi4S1v2x0mydUuFTqFa8QctpvgidxUFqcvjron8kwHhnoNc7zHk3Bwt5A qFAXAqD9nLYYE68i/SpFQQ0wMKjbwI9uAhEBIkeBWRu/lrlQrpQqn/d29A+7NSsb QK+SLu6EL9NQD+qmKGQstAbzCesKJ6Mj4h3l7Jep2iVHYZqB784EWA5zvWDjDmLn Ges6vDIRU56/tsiWIgWVHRxDZmWMlnM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:43 2025 by rpki-client