$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a9f3a8d-2b9c-3624-92d9-bcf9cb6222a3.roa File: 7a9f3a8d-2b9c-3624-92d9-bcf9cb6222a3.roa (raw, json) Hash identifier: vGEsJrkzERXQZCsdHxFLtEWoZNf18Nfor9bWEksjZHs= Subject key identifier: 26:BA:FD:DA:9D:85:4F:37:80:98:E4:16:E2:B9:C3:8B:F5:D2:C5:76 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B3DBA2CA77D6A970197819200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a9f3a8d-2b9c-3624-92d9-bcf9cb6222a3.roa Signing time: Fri 19 Sep 2025 01:00:33 +0000 ROA not before: Fri 19 Sep 2025 01:00:33 +0000 ROA not after: Thu 18 Dec 2025 02:00:33 +0000 asID: 401152 IP address blocks: 136.0.233.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:3d:ba:2c:a7:7d:6a:97:01:97:81:92:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 19 01:00:33 2025 GMT Not After : Dec 18 02:00:33 2025 GMT Subject: CN=a3281db8-5f35-40d3-adb9-6f562314d4f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:ab:b1:38:10:41:27:ee:8e:96:b0:e5:85:07: 05:56:43:33:79:a0:09:cc:f2:77:f7:4e:38:34:26: f2:6f:6a:03:aa:95:f7:cf:83:44:f1:28:07:e2:84: cb:92:7c:a4:d8:e3:4e:1f:9a:18:0f:b1:d2:97:f7: a3:5c:c1:b4:94:7d:cb:09:06:64:ef:dc:05:18:9a: 3d:33:e6:80:d7:ca:ff:f1:f9:d5:5e:bc:87:2a:f4: c1:46:85:8d:ca:99:64:92:95:4d:cf:d9:5c:02:3e: a4:ca:18:e4:5f:cc:ba:37:b7:21:01:2c:b1:cd:2e: 3a:75:84:b6:ae:63:3a:7e:63:f9:5b:64:fd:37:48: 2e:d0:76:c6:41:cc:5f:f1:d1:4d:33:70:49:c7:81: 0a:b6:c1:4e:7f:5b:58:87:d4:22:1c:cb:95:77:f8: 53:9c:96:2c:81:9e:48:a3:f0:58:a8:5f:40:87:4f: 10:2e:c4:d5:ba:be:b5:67:19:48:38:93:51:4f:b3: b1:15:1a:17:23:d2:ca:3f:09:1e:91:1a:1b:32:50: 5f:49:58:83:0a:e4:23:57:85:31:ac:0e:de:9d:10: 10:c4:02:2a:fa:34:0f:f1:5b:8e:b1:01:bf:59:01: 1c:c1:90:be:ab:38:50:cc:5f:2c:67:60:de:67:83: 32:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:BA:FD:DA:9D:85:4F:37:80:98:E4:16:E2:B9:C3:8B:F5:D2:C5:76 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a9f3a8d-2b9c-3624-92d9-bcf9cb6222a3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.233.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 33:f2:d3:d6:c0:0e:5d:b3:9f:2d:5e:da:db:69:41:60:de:31: 14:6f:3a:72:4e:87:51:25:80:3a:41:9d:5a:77:0e:b1:c2:b6: 01:e5:e4:e0:96:06:63:0f:41:3d:39:02:05:68:a8:bb:1c:00: f1:ac:a0:16:f1:6f:89:45:fa:07:0b:e6:8f:7d:98:28:11:0a: 88:f1:c9:c1:6a:fa:fd:27:ef:de:8f:68:04:3d:af:5e:11:cc: c8:58:a9:43:8d:47:b6:2f:7e:72:57:37:98:6d:48:16:ed:69: 38:39:a3:da:d1:8e:a7:26:8d:5e:65:ae:8d:01:7c:8d:63:58: 3f:eb:7b:79:a7:26:1c:67:04:5b:56:47:2d:fd:00:67:d6:71: 79:37:97:7c:d5:15:fb:45:e1:1a:66:7a:b1:84:f4:6a:72:e3: 78:fa:49:36:7d:3c:3d:9a:fe:27:06:42:7e:4f:9d:91:2d:c3: d0:cb:8c:fc:b3:4d:be:a3:71:e5:1a:eb:8b:14:7a:70:54:c9: 63:75:a2:39:10:4f:8c:5d:bd:89:f7:c8:60:22:e7:ab:5f:66: b8:a1:47:6b:c4:b9:aa:1e:eb:8f:bc:0c:6b:63:ee:c0:af:59: e7:c0:10:b9:c4:5a:9f:6e:55:78:36:06:70:f1:57:12:d2:4c: ca:61:67:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs9uiynfWqXAZeBkgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxOTAxMDAzM1oXDTI1MTIxODAyMDAzM1owLzEtMCsGA1UEAxMk YTMyODFkYjgtNWYzNS00MGQzLWFkYjktNmY1NjIzMTRkNGYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApauxOBBBJ+6OlrDlhQcFVkMzeaAJzPJ39044 NCbyb2oDqpX3z4NE8SgH4oTLknyk2ONOH5oYD7HSl/ejXMG0lH3LCQZk79wFGJo9 M+aA18r/8fnVXryHKvTBRoWNyplkkpVNz9lcAj6kyhjkX8y6N7chASyxzS46dYS2 rmM6fmP5W2T9N0gu0HbGQcxf8dFNM3BJx4EKtsFOf1tYh9QiHMuVd/hTnJYsgZ5I o/BYqF9Ah08QLsTVur61ZxlIOJNRT7OxFRoXI9LKPwkekRobMlBfSViDCuQjV4Ux rA7enRAQxAIq+jQP8VuOsQG/WQEcwZC+qzhQzF8sZ2DeZ4MyuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCa6/dqdhU83gJjkFuK5w4v10sV2MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2E5ZjNhOGQtMmI5Yy0z NjI0LTkyZDktYmNmOWNiNjIyMmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADpMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADPy09bADl2zny1e2ttpQWDeMRRvOnJOh1ElgDpBnVp3DrHCtgHl5OCW BmMPQT05AgVoqLscAPGsoBbxb4lF+gcL5o99mCgRCojxycFq+v0n796PaAQ9r14R zMhYqUONR7YvfnJXN5htSBbtaTg5o9rRjqcmjV5lro0BfI1jWD/re3mnJhxnBFtW Ry39AGfWcXk3l3zVFftF4RpmerGE9Gpy43j6STZ9PD2a/icGQn5PnZEtw9DLjPyz Tb6jceUa64sUenBUyWN1ojkQT4xdvYn3yGAi56tfZrihR2vEuaoe64+8DGtj7sCv WefAELnEWp9uVXg2BnDxVxLSTMphZ/M= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:50 2025 by rpki-client