$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa File: a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa (raw, json) Hash identifier: lFWsneYLp9LaTYz2yxmhCugxP6WjsS7kT8XZ6ySsaGo= Subject key identifier: 6D:30:23:F0:9C:87:AE:D0:F5:1F:0D:A5:18:DC:77:FC:87:09:41:46 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6C33C3666F411CC423C80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 136.0.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c3:3c:36:66:f4:11:cc:42:3c:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=be16dfc9-bea5-42a3-be9c-6b70ee2a1900 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c3:82:67:a4:82:3d:72:6b:0b:59:02:13:e1: 1e:66:b9:3d:a5:0e:d4:16:fc:a2:b0:22:2d:5a:87: 56:ea:64:6b:f7:5f:ee:45:d8:83:e3:af:e6:93:ef: 7c:66:e1:9f:3e:4c:47:6f:69:1d:85:ab:88:8d:c7: 08:94:6a:b6:87:aa:8b:8a:2f:96:43:73:be:c4:84: 77:14:69:b8:0b:54:d7:e8:26:c9:09:0e:03:8b:b3: df:26:61:ca:92:54:e8:70:51:ae:94:52:95:f9:89: 9f:d0:39:8b:19:f0:4f:f9:a6:96:0f:bb:f2:2b:fc: dc:13:ea:45:da:83:2e:6d:ff:59:1e:c3:52:27:ac: f9:12:2e:78:29:0d:a6:4a:88:3c:52:db:70:1c:0b: 81:0a:ed:79:2d:cd:10:f2:5a:e0:ff:8d:d2:77:8e: bd:17:85:3f:f2:ea:f3:1c:cf:97:60:c8:3c:f3:f8: 52:d1:9b:34:17:df:ad:c7:56:b0:f4:40:55:83:27: 0e:69:1b:e9:ad:d3:15:b8:dd:ee:18:31:cf:e8:04: 68:77:56:40:da:a8:95:1f:b2:ad:3b:4b:ac:6e:2d: d6:b1:ea:79:46:43:76:e6:99:0d:9b:fd:be:75:c0: 39:87:4b:11:19:e7:d3:68:07:19:af:48:ef:d5:ae: 5b:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6D:30:23:F0:9C:87:AE:D0:F5:1F:0D:A5:18:DC:77:FC:87:09:41:46 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a4:45:f3:23:a4:6b:37:f3:5d:c8:0c:7e:c3:05:e0:fe:2b:5d: f1:75:ab:98:65:c3:74:7c:52:58:4e:fc:4c:60:67:22:cf:56: 88:6f:a4:17:26:4a:79:5b:a6:5c:fc:20:a7:be:ae:25:f1:ec: ec:28:bc:35:99:62:f4:1b:fd:0f:4c:e1:18:1b:25:63:bc:36: 16:81:2d:2f:b1:21:e8:77:77:48:7a:bc:08:dc:e4:2e:b8:ad: 01:96:01:03:ee:aa:14:e1:6e:6c:ca:a4:e6:2c:4a:dd:b3:a0: 9e:35:66:a6:49:78:e5:a7:b0:62:f3:f6:97:b0:58:c4:be:32: a2:53:e7:e9:ef:ec:8d:20:66:d6:ed:8a:94:d3:43:60:4f:e3: a9:ba:c7:78:5a:81:7a:02:8d:73:0a:13:df:45:b4:e8:df:62: be:61:d0:8c:69:08:7b:74:7c:df:7f:2a:b0:60:ba:e8:6c:3c: eb:41:d1:c4:b1:fa:c9:3a:46:20:fe:06:ad:3a:aa:62:67:9c: ab:67:aa:10:13:7d:3f:d1:88:c5:73:44:ce:49:96:58:f0:cf: 3c:a8:0b:8a:7d:86:57:6b:76:e7:1d:4b:2d:a8:cf:6a:5d:05: fd:28:a7:97:9a:a4:1b:56:b7:28:0b:32:a7:9a:4c:6a:28:5b: e3:52:5a:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsM8Nmb0EcxCPIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YmUxNmRmYzktYmVhNS00MmEzLWJlOWMtNmI3MGVlMmExOTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcOCZ6SCPXJrC1kCE+EeZrk9pQ7UFvyisCIt WodW6mRr91/uRdiD46/mk+98ZuGfPkxHb2kdhauIjccIlGq2h6qLii+WQ3O+xIR3 FGm4C1TX6CbJCQ4Di7PfJmHKklTocFGulFKV+Ymf0DmLGfBP+aaWD7vyK/zcE+pF 2oMubf9ZHsNSJ6z5Ei54KQ2mSog8UttwHAuBCu15Lc0Q8lrg/43Sd469F4U/8urz HM+XYMg88/hS0Zs0F9+tx1aw9EBVgycOaRvprdMVuN3uGDHP6ARod1ZA2qiVH7Kt O0usbi3Wsep5RkN25pkNm/2+dcA5h0sRGefTaAcZr0jv1a5bNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFG0wI/Cch67Q9R8NpRjcd/yHCUFGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNkYzBhOGUtYjRlNS0z NDg2LWEwYzAtZDJmN2EzZTkxMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKRF8yOkazfzXcgMfsMF4P4rXfF1q5hlw3R8UlhO/ExgZyLPVohvpBcm Snlbplz8IKe+riXx7OwovDWZYvQb/Q9M4RgbJWO8NhaBLS+xIeh3d0h6vAjc5C64 rQGWAQPuqhThbmzKpOYsSt2zoJ41ZqZJeOWnsGLz9pewWMS+MqJT5+nv7I0gZtbt ipTTQ2BP46m6x3hagXoCjXMKE99FtOjfYr5h0IxpCHt0fN9/KrBguuhsPOtB0cSx +sk6RiD+Bq06qmJnnKtnqhATfT/RiMVzRM5JlljwzzyoC4p9hldrducdSy2oz2pd Bf0op5eapBtWtygLMqeaTGooW+NSWsM= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:50 2025 by rpki-client