$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa File: ab45727f-3999-34db-bbfb-7d55ed100de3.roa (raw, json) Hash identifier: 8whUQ9jpLxmKeT4oFzXt4m91AB5bRPgyJNZQTaAVsCk= Subject key identifier: A8:4E:54:E5:DB:0D:96:66:32:D0:E9:9D:03:2F:97:91:A5:17:56:82 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772DC3B125D351F65E52A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 136.0.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2d:c3:b1:25:d3:51:f6:5e:52:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=4989c61b-ccbb-4e70-a3f2-895ef9e17427 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:a9:b0:6f:7f:17:88:85:ae:40:64:f6:ae:00: 8a:10:14:c3:7f:f4:dd:8f:f5:9d:f5:53:64:04:1c: 81:4f:ac:09:d0:d1:08:26:15:d3:43:6f:a1:44:98: 9d:b4:cb:e0:f0:f0:c5:15:ff:57:11:ea:34:ba:ae: 04:26:b6:7b:82:68:d4:7e:31:7a:c8:24:bd:6a:2d: ae:d8:74:9d:6e:f6:4f:c1:26:42:a3:4d:37:2a:96: 06:c5:06:65:73:4b:93:16:5a:aa:da:80:3f:c7:16: 15:9b:c1:65:c2:32:88:83:04:ff:b3:ce:fa:ec:46: 78:54:e9:9f:1a:69:4a:b1:57:88:05:88:11:25:b8: 80:7a:cf:88:36:bb:bb:b5:3c:d0:be:68:db:a5:cb: bc:63:99:bf:3d:88:a4:bb:5c:72:b0:aa:49:50:b1: 65:33:63:ff:52:ad:31:8a:aa:f8:f6:ed:a1:01:cf: 3e:d8:2d:47:89:71:da:80:cf:6e:3e:dd:76:e7:cd: 48:88:9d:7b:04:73:2a:f4:6e:73:34:80:de:4d:a8: 96:de:d1:38:3d:63:6f:66:b3:58:d6:4d:ec:15:21: 44:89:4b:9d:cb:7d:80:18:68:da:9a:b3:bd:91:3b: 79:d8:1e:4f:c7:10:d3:aa:24:e9:e2:56:1f:5c:cd: 3d:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:4E:54:E5:DB:0D:96:66:32:D0:E9:9D:03:2F:97:91:A5:17:56:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 44:a3:62:bb:e1:d3:ab:e9:fb:e1:e8:38:34:5a:b8:33:b6:0b: 3d:c6:aa:01:2b:9f:27:89:45:49:4d:41:00:c6:68:91:7c:1a: 4c:de:d0:cb:69:c5:63:8e:f4:e1:4f:e6:1d:a1:c7:a6:af:cd: e3:a3:8f:4b:43:5b:59:8c:0c:37:1f:61:51:0e:e6:88:a1:81: 10:60:44:d0:2a:7d:2e:bf:45:f2:f2:af:d5:b7:a3:34:96:fd: 4e:bf:94:8e:70:6e:90:be:3d:46:73:9a:d8:8b:b3:c3:01:6d: 10:b6:0a:b5:66:a1:5f:9d:70:bd:2d:98:a8:7d:3b:f6:c2:14: dc:17:f3:5a:e2:1a:01:83:b7:5e:48:dc:df:40:3c:0e:58:b9: 60:30:fd:db:72:c9:3a:c7:bc:e4:fb:a0:a2:21:29:77:e0:92: 11:04:67:d6:b7:75:69:83:91:39:53:c7:30:59:ab:5f:85:76: 12:ac:28:ea:4f:f1:62:cd:ac:77:4e:d9:e8:97:67:41:e4:1b: d4:0d:0e:9e:9f:69:35:f2:96:d2:f1:94:fe:02:bb:2b:3b:fa: d3:fc:d0:e8:8b:7e:da:71:ed:68:42:ea:e6:6c:09:ef:15:35: a3:1b:7e:7e:d1:fc:b6:e3:48:49:7e:79:91:ad:3f:d4:e8:99: 7a:a0:fe:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy3DsSXTUfZeUqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NDk4OWM2MWItY2NiYi00ZTcwLWEzZjItODk1ZWY5ZTE3NDI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKmwb38XiIWuQGT2rgCKEBTDf/Tdj/Wd9VNk BByBT6wJ0NEIJhXTQ2+hRJidtMvg8PDFFf9XEeo0uq4EJrZ7gmjUfjF6yCS9ai2u 2HSdbvZPwSZCo003KpYGxQZlc0uTFlqq2oA/xxYVm8FlwjKIgwT/s8767EZ4VOmf GmlKsVeIBYgRJbiAes+INru7tTzQvmjbpcu8Y5m/PYiku1xysKpJULFlM2P/Uq0x iqr49u2hAc8+2C1HiXHagM9uPt12581IiJ17BHMq9G5zNIDeTaiW3tE4PWNvZrNY 1k3sFSFEiUudy32AGGjamrO9kTt52B5PxxDTqiTp4lYfXM09EwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKhOVOXbDZZmMtDpnQMvl5GlF1aCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWI0NTcyN2YtMzk5OS0z NGRiLWJiZmItN2Q1NWVkMTAwZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAESjYrvh06vp++HoODRauDO2Cz3GqgErnyeJRUlNQQDGaJF8Gkze0Mtp xWOO9OFP5h2hx6avzeOjj0tDW1mMDDcfYVEO5oihgRBgRNAqfS6/RfLyr9W3ozSW /U6/lI5wbpC+PUZzmtiLs8MBbRC2CrVmoV+dcL0tmKh9O/bCFNwX81riGgGDt15I 3N9APA5YuWAw/dtyyTrHvOT7oKIhKXfgkhEEZ9a3dWmDkTlTxzBZq1+FdhKsKOpP 8WLNrHdO2eiXZ0HkG9QNDp6faTXyltLxlP4Cuys7+tP80OiLftpx7WhC6uZsCe8V NaMbfn7R/LbjSEl+eZGtP9TomXqg/kE= -----END CERTIFICATE-----Generated at Sat Oct 11 08:43:04 2025 by rpki-client