$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa File: a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa (raw, json) Hash identifier: N0a/OUNqvQkR0V9I/kdclGM6foCjTdY7FU6YYZMiYiE= Subject key identifier: 2D:7D:4F:66:42:C6:42:E7:DD:A1:6B:6D:F9:02:17:07:21:48:26:D1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6C32684F0B2C9A5333F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 136.0.166.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c3:26:84:f0:b2:c9:a5:33:3f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=2d1ce7a5-dfba-4bde-9761-f8f90534d305 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:17:47:bd:b1:af:46:79:66:c8:4f:f3:43:ad: d3:de:19:25:2e:f0:0e:18:01:07:cf:7d:5e:88:aa: e7:c1:0a:7e:3e:9f:55:3e:ba:2e:6e:0c:d1:8f:62: 83:1e:7a:cb:83:91:da:1b:0c:13:4e:62:87:4b:fb: 2f:1c:4a:ab:8a:fc:05:c5:d7:d9:fd:52:7f:75:b9: 88:6d:57:c7:5e:97:2d:da:44:41:48:26:37:45:0e: a1:e1:d7:fb:3e:21:76:63:49:36:59:f8:78:b1:db: 24:2e:f9:06:c2:62:66:9b:25:42:22:bd:89:bd:6c: 1b:cd:a3:df:cb:0c:e1:aa:70:ff:ae:84:30:00:c6: 4f:68:da:df:d0:fc:21:81:88:eb:22:2b:24:e0:8f: f1:42:f3:09:de:19:d4:bf:ca:7c:75:c7:18:b5:98: 6a:75:9a:37:b2:0e:78:ca:29:94:87:ee:1e:48:aa: 39:7e:72:79:f0:3f:a2:db:ba:2d:b7:15:a6:d5:60: 9c:5a:40:69:62:36:a8:33:8a:3a:5a:36:34:4d:70: df:71:de:3b:42:5c:fc:bd:bb:b6:72:b6:92:e3:1e: cf:fb:4f:de:29:4b:cf:fc:98:23:8d:fe:84:ff:dd: 27:95:d1:34:d5:42:ed:48:25:7b:79:3d:84:7d:82: 00:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:7D:4F:66:42:C6:42:E7:DD:A1:6B:6D:F9:02:17:07:21:48:26:D1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a33bc4a1-bed1-3ed9-a82a-7f1dfec49d8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.166.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:56:8e:8f:b2:2d:79:d7:e0:ec:36:1f:e2:39:97:a8:b3:a9: 50:46:c1:e1:00:67:3d:ae:2a:d4:1c:42:bd:98:3c:74:7c:04: c4:fc:a5:37:a7:bf:fa:47:2f:23:35:7f:3d:49:0c:54:39:f1: 1f:96:ec:d8:93:21:b2:59:2f:19:4e:b2:87:0f:ec:c6:ac:f1: 1c:6b:d2:1b:fd:09:25:9b:f1:a9:7e:c1:f6:af:a5:6d:b3:93: 77:1f:19:c1:02:d2:64:8b:53:92:da:a4:65:c8:18:80:3b:ec: 8e:46:12:58:2e:ef:87:24:45:7f:e4:0f:b8:f9:0e:99:9b:3a: 5a:38:3b:ef:85:dd:8c:61:1e:8f:c9:50:cc:21:3c:9e:bf:5a: e9:6d:f6:e5:83:eb:81:1d:1c:80:e7:f6:4d:e2:d7:fb:12:aa: f7:45:fd:24:7a:c5:c4:76:12:02:c6:6c:6e:0f:44:f9:ea:b5: 2e:57:7d:d9:10:3e:b8:71:5b:65:d3:2e:06:8d:9c:04:d7:16: cb:01:f3:f0:64:ae:6a:b1:cf:ab:f3:10:f0:98:f1:7c:92:6b: 64:bd:eb:00:54:66:64:77:50:d7:8c:b1:4d:34:02:95:1b:99: 7a:6c:cb:04:29:28:00:2e:64:bb:2a:a0:62:c4:73:d8:3a:b3: 80:1d:b2:f0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsMmhPCyyaUzPwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk MmQxY2U3YTUtZGZiYS00YmRlLTk3NjEtZjhmOTA1MzRkMzA1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlBdHvbGvRnlmyE/zQ63T3hklLvAOGAEHz31e iKrnwQp+Pp9VProubgzRj2KDHnrLg5HaGwwTTmKHS/svHEqrivwFxdfZ/VJ/dbmI bVfHXpct2kRBSCY3RQ6h4df7PiF2Y0k2Wfh4sdskLvkGwmJmmyVCIr2JvWwbzaPf ywzhqnD/roQwAMZPaNrf0PwhgYjrIisk4I/xQvMJ3hnUv8p8dccYtZhqdZo3sg54 yimUh+4eSKo5fnJ58D+i27ottxWm1WCcWkBpYjaoM4o6WjY0TXDfcd47Qlz8vbu2 craS4x7P+0/eKUvP/Jgjjf6E/90nldE01ULtSCV7eT2EfYIARwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFC19T2ZCxkLn3aFrbfkCFwchSCbRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMzYmM0YTEtYmVkMS0z ZWQ5LWE4MmEtN2YxZGZlYzQ5ZDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAChWjo+yLXnX4Ow2H+I5l6izqVBGweEAZz2uKtQcQr2YPHR8BMT8pTen v/pHLyM1fz1JDFQ58R+W7NiTIbJZLxlOsocP7Mas8Rxr0hv9CSWb8al+wfavpW2z k3cfGcEC0mSLU5LapGXIGIA77I5GElgu74ckRX/kD7j5DpmbOlo4O++F3YxhHo/J UMwhPJ6/Wult9uWD64EdHIDn9k3i1/sSqvdF/SR6xcR2EgLGbG4PRPnqtS5XfdkQ PrhxW2XTLgaNnATXFssB8/Bkrmqxz6vzEPCY8XySa2S96wBUZmR3UNeMsU00ApUb mXpsywQpKAAuZLsqoGLEc9g6s4AdsvA= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:02 2025 by rpki-client