$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2749a1-a970-3c79-9359-848464c4546d.roa File: 8c2749a1-a970-3c79-9359-848464c4546d.roa (raw, json) Hash identifier: U2W9OJq2Jkm4Wz3BtYM5DjBsvZMqXkpxuYE26GvAguo= Subject key identifier: F8:55:32:0E:80:E0:25:96:2A:49:51:EB:61:C6:B7:45:B2:D5:3F:5B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B25FC47AC43C298E76D385580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2749a1-a970-3c79-9359-848464c4546d.roa Signing time: Wed 10 Sep 2025 13:00:41 +0000 ROA not before: Wed 10 Sep 2025 13:00:41 +0000 ROA not after: Tue 09 Dec 2025 14:00:41 +0000 asID: 401152 IP address blocks: 136.0.70.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:25:fc:47:ac:43:c2:98:e7:6d:38:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 10 13:00:41 2025 GMT Not After : Dec 9 14:00:41 2025 GMT Subject: CN=2c55a090-2f66-4925-a986-50aa3d857100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fb:74:bf:7a:66:57:7f:b3:c7:cc:90:bf:4d: 25:d9:e2:79:20:57:51:e9:b1:8d:fb:4f:c5:8e:70: 16:7a:81:4e:75:1a:ee:33:87:cc:92:cc:56:db:cd: 60:fc:e3:ae:97:5f:be:65:e2:69:29:c2:d8:91:36: b6:f1:62:8d:ca:53:cc:34:d2:75:67:6a:26:64:50: 29:46:61:4d:2c:65:8f:69:c1:cd:75:c6:65:de:de: ca:4c:88:56:80:b0:90:7d:3d:a5:8d:0f:04:69:f8: 7a:a9:be:89:c6:7b:b6:12:95:3f:1d:aa:91:0b:1a: 84:a1:50:61:31:70:6d:38:64:a5:bf:a8:e9:fc:1d: 2a:9d:09:0a:7c:64:6c:92:8c:f1:92:53:71:46:3b: 50:70:8f:2a:3d:8f:5d:9a:1f:a3:18:9f:4c:09:af: f9:e3:30:ec:91:d1:97:84:56:11:23:7d:84:25:37: b1:14:bc:5b:d3:67:98:88:da:9a:5c:3a:29:a1:3e: 3b:0d:9c:f4:7f:db:5d:9c:01:d8:25:7d:40:d1:e2: 92:35:7a:45:cb:d0:06:7e:72:59:15:24:26:df:29: 1b:4b:8f:40:61:0e:2e:f6:f6:18:93:3d:dc:4a:73: 20:51:f3:f2:87:78:cc:79:e7:f7:50:bd:ef:bd:d8: 76:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:55:32:0E:80:E0:25:96:2A:49:51:EB:61:C6:B7:45:B2:D5:3F:5B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8c2749a1-a970-3c79-9359-848464c4546d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.70.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:1a:01:86:cd:53:ab:a4:ae:e7:56:a2:57:f8:d8:0a:6a:16: 88:5f:36:be:8b:4f:b1:83:3f:a5:cd:78:ce:83:87:27:26:4c: 3e:d5:89:9f:2f:27:4c:9b:a4:15:a3:d7:76:0d:8f:b9:93:03: 7b:6b:ac:fd:0f:d8:72:b3:c6:6f:5c:c4:89:34:59:22:77:6b: 4e:fb:ea:54:2b:be:78:6e:ec:df:1c:e9:d9:1e:4a:26:66:7f: c1:49:5d:cb:7f:47:42:a4:c5:78:1d:35:db:e7:78:68:2a:5d: 9d:1a:7b:66:6c:b0:f9:12:1d:53:ce:db:7d:b2:78:60:89:57: 31:91:ce:fe:bd:9a:02:2d:9d:2f:0b:07:23:79:bc:c1:45:f1: f2:77:42:ff:20:13:1d:68:f1:f9:cd:d8:6a:52:5e:6a:ed:98: 25:7c:62:2f:fd:3f:bf:6b:33:4c:85:ba:23:ad:3a:20:45:49: 83:b4:30:21:2f:3c:be:db:d9:97:9a:73:d6:ea:54:10:ff:fd: 79:a1:05:7b:95:ca:55:ed:8e:46:24:db:c1:51:85:a4:34:0b: a1:96:41:b2:f4:1d:94:82:7b:ad:40:c5:03:17:31:2e:05:78: 47:0d:de:01:62:38:56:3a:a4:8d:2d:3e:9e:b2:2b:20:0d:68: 4b:d7:2b:13 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsl/EesQ8KY5204VYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMDEzMDA0MVoXDTI1MTIwOTE0MDA0MVowLzEtMCsGA1UEAxMk MmM1NWEwOTAtMmY2Ni00OTI1LWE5ODYtNTBhYTNkODU3MTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkft0v3pmV3+zx8yQv00l2eJ5IFdR6bGN+0/F jnAWeoFOdRruM4fMksxW281g/OOul1++ZeJpKcLYkTa28WKNylPMNNJ1Z2omZFAp RmFNLGWPacHNdcZl3t7KTIhWgLCQfT2ljQ8Eafh6qb6Jxnu2EpU/HaqRCxqEoVBh MXBtOGSlv6jp/B0qnQkKfGRskozxklNxRjtQcI8qPY9dmh+jGJ9MCa/54zDskdGX hFYRI32EJTexFLxb02eYiNqaXDopoT47DZz0f9tdnAHYJX1A0eKSNXpFy9AGfnJZ FSQm3ykbS49AYQ4u9vYYkz3cSnMgUfPyh3jMeef3UL3vvdh2rQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPhVMg6A4CWWKklR62HGt0Wy1T9bMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGMyNzQ5YTEtYTk3MC0z Yzc5LTkzNTktODQ4NDY0YzQ1NDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABGMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABwaAYbNU6ukrudWolf42ApqFohfNr6LT7GDP6XNeM6DhycmTD7ViZ8v J0ybpBWj13YNj7mTA3trrP0P2HKzxm9cxIk0WSJ3a0776lQrvnhu7N8c6dkeSiZm f8FJXct/R0KkxXgdNdvneGgqXZ0ae2ZssPkSHVPO232yeGCJVzGRzv69mgItnS8L ByN5vMFF8fJ3Qv8gEx1o8fnN2GpSXmrtmCV8Yi/9P79rM0yFuiOtOiBFSYO0MCEv PL7b2Zeac9bqVBD//XmhBXuVylXtjkYk28FRhaQ0C6GWQbL0HZSCe61AxQMXMS4F eEcN3gFiOFY6pI0tPp6yKyANaEvXKxM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:45:48 2025 by rpki-client