$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dcd4f31-817b-377e-8a6a-cd4427dc1a30.roa File: 5dcd4f31-817b-377e-8a6a-cd4427dc1a30.roa (raw, json) Hash identifier: TRto16ngi3B+exqAf3h6vF+eZNus7u6jiYC6BWwiONQ= Subject key identifier: 92:2D:AD:CF:26:39:66:E6:B9:31:4D:43:36:91:E4:2B:2C:72:00:27 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B5EC4789B6F9DD4E922F7BE40 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dcd4f31-817b-377e-8a6a-cd4427dc1a30.roa Signing time: Tue 30 Sep 2025 21:09:33 +0000 ROA not before: Tue 30 Sep 2025 21:09:33 +0000 ROA not after: Mon 29 Dec 2025 22:09:33 +0000 asID: 401152 IP address blocks: 136.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:5e:c4:78:9b:6f:9d:d4:e9:22:f7:be:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 30 21:09:33 2025 GMT Not After : Dec 29 22:09:33 2025 GMT Subject: CN=a0142f08-397c-4299-8e36-96050394e9c0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:ba:b8:dc:c9:99:18:0d:67:42:1b:15:ba:ea: ba:65:a9:41:52:5c:f4:27:d2:60:6e:eb:a8:f7:0d: 66:15:a5:ed:cf:55:c6:f5:b0:b1:9f:a4:a2:04:5d: 6c:be:80:8e:9e:33:83:16:3a:76:88:46:48:7a:2a: c2:18:21:98:c1:dd:91:c4:9f:8f:55:52:80:26:cd: c0:b2:c6:3f:58:5b:7a:77:28:75:03:97:69:b8:a9: a0:6e:d4:50:34:f0:8b:2e:58:de:9f:cf:ed:05:65: 0c:51:69:32:83:2c:51:59:cb:2e:79:0e:88:1e:b4: 68:56:85:ae:bc:c3:c6:20:0e:1a:48:65:31:1b:1d: 38:1e:a3:0e:4b:f5:fd:7d:3a:f1:ae:9f:7f:55:e3: 93:b5:79:59:8c:e3:41:f2:14:93:da:44:83:7c:2d: bd:fd:f3:51:90:0b:ef:3b:f6:ce:97:0b:f1:12:3a: c4:7c:17:5f:ad:34:ad:31:3b:b6:60:7c:ba:9f:55: 14:fb:b9:28:c1:f7:b3:96:97:79:88:e4:71:98:fd: 27:a1:04:0a:ca:b8:57:6a:ea:03:05:8f:49:76:e0: ce:c8:9f:f4:50:26:f3:10:83:9f:1d:73:0b:c5:c0: 8f:44:bc:95:e0:06:ad:ee:18:2a:3b:56:06:a4:19: 56:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:2D:AD:CF:26:39:66:E6:B9:31:4D:43:36:91:E4:2B:2C:72:00:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5dcd4f31-817b-377e-8a6a-cd4427dc1a30.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8c:e5:94:3d:45:bc:3f:4e:14:73:f4:7c:ba:d6:6f:96:3e:47: 27:bb:4b:9b:cf:5d:38:cf:93:58:38:f4:54:48:8f:c7:f0:77: 9f:19:33:19:ed:b6:9f:4b:5f:88:b8:45:c1:eb:d8:2c:67:d2: 5c:59:3b:fc:08:b4:c5:74:f1:11:bd:c3:f4:24:3d:d1:63:8d: 83:72:89:15:6b:91:d1:83:74:25:0b:3f:e5:85:a0:fb:1f:2e: 33:a7:7e:49:1e:a6:0a:e8:41:8b:26:eb:50:01:42:c5:e5:9d: 72:10:8d:60:ae:ce:fa:59:9c:ad:51:40:81:66:7b:a4:5b:df: 94:c4:35:71:67:f3:ff:00:63:a7:16:f3:db:30:24:6d:e8:1b: ce:20:67:80:34:b2:67:05:e8:cb:ae:2a:e0:5a:c0:21:84:21: b4:5e:36:ca:a4:34:b4:f5:f2:00:4c:a1:16:19:9d:98:cf:cf: 1a:b0:bd:90:c4:c0:e0:33:f8:0f:a8:ea:79:10:fb:7a:0d:de: e8:78:94:c6:37:31:f5:09:f8:1a:1c:73:30:a7:3f:fc:a4:6f: e1:53:e7:b0:b4:75:97:93:0c:06:69:91:d4:08:5a:37:c4:08: 67:ff:84:42:78:11:67:24:33:19:a4:18:7a:8a:70:40:d9:49: 10:e4:0a:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtexHibb53U6SL3vkAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkzMDIxMDkzM1oXDTI1MTIyOTIyMDkzM1owLzEtMCsGA1UEAxMk YTAxNDJmMDgtMzk3Yy00Mjk5LThlMzYtOTYwNTAzOTRlOWMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbq43MmZGA1nQhsVuuq6ZalBUlz0J9Jgbuuo 9w1mFaXtz1XG9bCxn6SiBF1svoCOnjODFjp2iEZIeirCGCGYwd2RxJ+PVVKAJs3A ssY/WFt6dyh1A5dpuKmgbtRQNPCLLljen8/tBWUMUWkygyxRWcsueQ6IHrRoVoWu vMPGIA4aSGUxGx04HqMOS/X9fTrxrp9/VeOTtXlZjONB8hST2kSDfC29/fNRkAvv O/bOlwvxEjrEfBdfrTStMTu2YHy6n1UU+7kowfezlpd5iORxmP0noQQKyrhXauoD BY9JduDOyJ/0UCbzEIOfHXMLxcCPRLyV4Aat7hgqO1YGpBlWLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJItrc8mOWbmuTFNQzaR5CsscgAnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWRjZDRmMzEtODE3Yi0z NzdlLThhNmEtY2Q0NDI3ZGMxYTMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIzllD1FvD9OFHP0fLrWb5Y+Rye7S5vPXTjPk1g49FRIj8fwd58ZMxnt tp9LX4i4RcHr2Cxn0lxZO/wItMV08RG9w/QkPdFjjYNyiRVrkdGDdCULP+WFoPsf LjOnfkkepgroQYsm61ABQsXlnXIQjWCuzvpZnK1RQIFme6Rb35TENXFn8/8AY6cW 89swJG3oG84gZ4A0smcF6MuuKuBawCGEIbReNsqkNLT18gBMoRYZnZjPzxqwvZDE wOAz+A+o6nkQ+3oN3uh4lMY3MfUJ+BocczCnP/ykb+FT57C0dZeTDAZpkdQIWjfE CGf/hEJ4EWckMxmkGHqKcEDZSRDkCsY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:01 2025 by rpki-client