$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/897c5d01-5c4e-3280-add2-fd5445e9307b.roa File: 897c5d01-5c4e-3280-add2-fd5445e9307b.roa (raw, json) Hash identifier: k1NHxWxaBiEA29GUi7NBkpnlSLktseCpXe8cW4B6SFg= Subject key identifier: 4D:90:5E:8B:2C:07:7E:A1:5C:D8:58:11:52:BC:8B:DB:A4:BE:CE:BE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2E5C444F04E53F3BBBC70000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/897c5d01-5c4e-3280-add2-fd5445e9307b.roa Signing time: Sat 13 Sep 2025 13:00:41 +0000 ROA not before: Sat 13 Sep 2025 13:00:41 +0000 ROA not after: Fri 12 Dec 2025 14:00:41 +0000 asID: 214238 IP address blocks: 136.0.78.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:2e:5c:44:4f:04:e5:3f:3b:bb:c7:00:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 13 13:00:41 2025 GMT Not After : Dec 12 14:00:41 2025 GMT Subject: CN=6da464ba-bf70-490b-9b17-0af0a2b50a30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:08:a0:eb:9e:eb:0b:13:82:84:58:71:cb:9c: 76:ad:e4:8e:fc:a6:bd:e4:b8:e3:72:0c:69:2a:44: f7:d7:81:73:64:42:09:33:d2:c5:8c:5b:4f:1a:08: a3:3c:00:24:f7:30:03:7b:70:03:29:97:de:a8:42: 3e:91:9f:cd:6e:2d:e0:6c:09:b9:95:aa:c8:ab:50: 2e:16:f6:98:63:c3:eb:18:cb:ba:a5:7e:97:ec:68: 51:7d:8c:65:2e:0c:7f:35:4e:a9:bc:12:27:39:13: e4:98:05:47:d8:65:5d:a1:55:38:d7:6a:d4:3e:40: 88:a1:6c:9a:6f:bc:54:ec:5a:e2:66:04:c7:81:ff: f7:88:7a:48:c3:09:8d:73:2c:b6:ac:90:37:0d:62: de:55:ea:7c:27:d8:6a:88:4b:d1:71:4f:db:67:dc: 69:cf:be:ba:6c:81:c1:ca:07:6c:df:4f:33:54:42: c9:7b:ed:39:5e:28:14:44:cf:9d:bf:45:b3:b9:78: f8:35:12:d7:8d:3e:ec:06:ee:f1:10:42:dd:fb:a5: 00:c9:a4:ea:56:79:3d:2c:08:e0:7c:4d:e4:da:e2: 63:13:ab:41:78:3a:56:6d:69:17:16:eb:39:2a:87: 65:ec:ee:e2:21:bb:af:69:81:c6:df:b2:8d:cd:c3: 18:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:90:5E:8B:2C:07:7E:A1:5C:D8:58:11:52:BC:8B:DB:A4:BE:CE:BE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/897c5d01-5c4e-3280-add2-fd5445e9307b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.78.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:bf:88:1c:0e:52:46:f5:c1:f7:4c:d1:1b:00:d6:e6:72:fa: eb:7c:e1:ae:ba:47:ca:cb:df:83:ab:f5:4a:5e:fe:3f:96:93: f6:e0:96:1e:04:16:67:67:c3:32:6f:f2:1c:28:57:ea:46:8c: 4a:39:a4:ee:1e:f3:e8:b0:1e:59:a1:fe:87:06:7e:c9:4f:b9: 85:59:f1:a1:28:b1:5d:99:63:cc:57:37:75:db:b4:6d:c6:72: a3:5a:e5:5f:ad:98:32:9d:de:25:08:88:9e:24:1c:77:25:5a: 84:d9:dd:52:c8:4c:a7:7a:c8:77:79:2e:20:01:d1:eb:65:84: 83:c6:3d:e6:d0:35:fb:0b:31:bf:0c:ca:a3:03:fc:fc:4e:32: 0e:2e:b6:b3:64:2f:8f:b3:5c:6f:99:b9:97:cb:51:71:db:ad: 76:6e:5f:53:84:17:34:1e:12:79:e9:76:c5:b6:a0:75:cc:cf: 8f:19:62:51:7a:23:4d:b1:ec:bb:f5:c0:21:ac:c6:4a:27:52: 88:1e:7d:08:91:84:2b:ca:4d:50:a7:c6:e4:fa:fc:17:33:9e: f5:aa:4e:b7:f2:79:91:39:f7:fe:56:e8:a0:94:fd:b6:f0:3d: a3:d5:8d:28:a8:20:0a:0d:ac:9f:87:68:02:0a:16:36:26:72: 53:d0:4f:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsuXERPBOU/O7vHAAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMzEzMDA0MVoXDTI1MTIxMjE0MDA0MVowLzEtMCsGA1UEAxMk NmRhNDY0YmEtYmY3MC00OTBiLTliMTctMGFmMGEyYjUwYTMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAig657rCxOChFhxy5x2reSO/Ka95Ljjcgxp KkT314FzZEIJM9LFjFtPGgijPAAk9zADe3ADKZfeqEI+kZ/Nbi3gbAm5larIq1Au FvaYY8PrGMu6pX6X7GhRfYxlLgx/NU6pvBInORPkmAVH2GVdoVU412rUPkCIoWya b7xU7FriZgTHgf/3iHpIwwmNcyy2rJA3DWLeVep8J9hqiEvRcU/bZ9xpz766bIHB ygds308zVELJe+05XigURM+dv0WzuXj4NRLXjT7sBu7xEELd+6UAyaTqVnk9LAjg fE3k2uJjE6tBeDpWbWkXFus5Kodl7O7iIbuvaYHG37KNzcMYWwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE2QXossB36hXNhYEVK8i9ukvs6+MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODk3YzVkMDEtNWM0ZS0z MjgwLWFkZDItZmQ1NDQ1ZTkzMDdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABOMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE2/iBwOUkb1wfdM0RsA1uZy+ut84a66R8rL34Or9Upe/j+Wk/bglh4E FmdnwzJv8hwoV+pGjEo5pO4e8+iwHlmh/ocGfslPuYVZ8aEosV2ZY8xXN3XbtG3G cqNa5V+tmDKd3iUIiJ4kHHclWoTZ3VLITKd6yHd5LiAB0etlhIPGPebQNfsLMb8M yqMD/PxOMg4utrNkL4+zXG+ZuZfLUXHbrXZuX1OEFzQeEnnpdsW2oHXMz48ZYlF6 I02x7Lv1wCGsxkonUogefQiRhCvKTVCnxuT6/BcznvWqTrfyeZE59/5W6KCU/bbw PaPVjSioIAoNrJ+HaAIKFjYmclPQT7c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:44:17 2025 by rpki-client