$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa File: daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa (raw, json) Hash identifier: xR5EaR3Jcq9qFhgwFrgUHtfKqJearjLjjlWf7FItliA= Subject key identifier: A6:33:92:41:84:A5:26:FD:C2:B6:A3:6D:3E:85:F0:14:B8:8C:94:90 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B4E772D88A2F7070C53660F80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa Signing time: Thu 25 Sep 2025 01:00:33 +0000 ROA not before: Thu 25 Sep 2025 01:00:33 +0000 ROA not after: Wed 24 Dec 2025 02:00:33 +0000 asID: 18779 IP address blocks: 136.0.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:4e:77:2d:88:a2:f7:07:0c:53:66:0f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:33 2025 GMT Not After : Dec 24 02:00:33 2025 GMT Subject: CN=75550d8a-80f6-4dc4-be65-859c97d7649a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:36:ca:f9:ad:89:dd:a3:95:b1:6a:9a:f0:ff: 47:eb:5d:8c:29:76:33:e3:82:7a:3d:32:9d:4a:74: 91:b7:77:93:58:1f:2f:73:15:83:7f:f9:a4:82:dc: e3:f3:2b:38:df:a2:fc:1c:3a:4c:73:73:50:d1:82: 3d:87:94:a2:7e:98:fa:00:5a:5c:fe:ff:6a:0a:36: e9:5b:3d:35:ea:c2:11:e0:68:4e:47:d3:8c:ad:bb: 28:a4:ae:80:2a:85:c6:09:f1:4d:19:c9:36:02:1f: 9c:22:df:5e:8c:c7:43:ad:da:2f:46:e1:44:42:b6: 53:20:7e:4f:65:b5:7a:a9:52:55:5c:02:99:21:93: 58:93:fe:6a:4c:e5:3e:95:8c:48:2b:7d:5e:14:ff: 1e:e7:0b:37:40:0a:82:f1:fa:89:34:44:15:cc:c1: f0:47:21:2a:10:0d:a1:96:0d:ff:57:2f:cf:85:52: a5:70:59:a0:f4:b0:8e:b0:68:58:a8:36:db:24:d8: 28:c0:39:84:17:34:2c:1d:69:82:1d:74:79:91:c7: 53:49:4c:06:56:35:99:44:1e:18:98:a2:c8:90:dd: a0:d2:b3:44:ff:66:87:11:a2:07:50:48:18:f1:32: 79:0a:86:2a:d4:10:20:e5:c9:f8:d4:ed:bb:ff:44: 8c:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:33:92:41:84:A5:26:FD:C2:B6:A3:6D:3E:85:F0:14:B8:8C:94:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8e:ab:fe:13:a9:17:7e:f1:bf:6b:3a:e1:68:e8:e1:6d:bb:b0: 81:a9:0a:ea:a2:ec:9f:0e:27:18:33:6b:2e:9b:d4:10:b8:25: 5e:d5:9f:cb:94:49:c0:09:68:1b:dc:83:16:1b:4e:40:3c:ef: d1:e1:92:91:56:50:dd:d3:e9:ce:10:1d:43:a9:99:84:b6:18: 9c:11:b7:03:31:06:66:d7:a2:50:eb:12:cb:73:c1:7d:9a:6c: a7:9a:c7:05:eb:7d:c7:19:54:84:ed:b0:35:4b:c9:60:b5:4e: 54:10:6e:10:1a:4f:42:c9:84:e5:e0:a2:0d:53:30:fc:74:4c: 51:e7:ea:88:2b:95:98:92:bf:65:81:0a:54:e0:74:4c:71:ff: 75:a0:f6:6f:7c:c8:33:f7:94:75:c5:25:4d:c5:b0:65:79:8e: 44:45:82:9e:fa:b0:c9:0b:fb:43:ed:9a:73:e1:f1:1a:66:95: 7a:c8:43:36:29:5a:02:66:e9:4f:38:a9:3c:81:66:e1:a2:9e: 57:5f:32:13:04:c2:7c:7c:a3:a7:7a:96:1e:6e:b7:44:93:9f: d9:f8:a0:53:71:2f:b2:b9:dd:bb:fa:44:f1:6a:5c:fa:02:63: cc:1e:c6:54:21:fb:a4:44:cb:74:82:d5:7d:e2:a1:d9:dc:ed: 74:aa:4e:89 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtOdy2IovcHDFNmD4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNTAxMDAzM1oXDTI1MTIyNDAyMDAzM1owLzEtMCsGA1UEAxMk NzU1NTBkOGEtODBmNi00ZGM0LWJlNjUtODU5Yzk3ZDc2NDlhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszbK+a2J3aOVsWqa8P9H612MKXYz44J6PTKd SnSRt3eTWB8vcxWDf/mkgtzj8ys436L8HDpMc3NQ0YI9h5Sifpj6AFpc/v9qCjbp Wz016sIR4GhOR9OMrbsopK6AKoXGCfFNGck2Ah+cIt9ejMdDrdovRuFEQrZTIH5P ZbV6qVJVXAKZIZNYk/5qTOU+lYxIK31eFP8e5ws3QAqC8fqJNEQVzMHwRyEqEA2h lg3/Vy/PhVKlcFmg9LCOsGhYqDbbJNgowDmEFzQsHWmCHXR5kcdTSUwGVjWZRB4Y mKLIkN2g0rNE/2aHEaIHUEgY8TJ5CoYq1BAg5cn41O27/0SMZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKYzkkGEpSb9wrajbT6F8BS4jJSQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGFmNWNjMTctNWY2NC0z MmJlLWJhNGMtMWI5OGNiNzQ3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAI6r/hOpF37xv2s64Wjo4W27sIGpCuqi7J8OJxgzay6b1BC4JV7Vn8uU ScAJaBvcgxYbTkA879HhkpFWUN3T6c4QHUOpmYS2GJwRtwMxBmbXolDrEstzwX2a bKeaxwXrfccZVITtsDVLyWC1TlQQbhAaT0LJhOXgog1TMPx0TFHn6ogrlZiSv2WB ClTgdExx/3Wg9m98yDP3lHXFJU3FsGV5jkRFgp76sMkL+0PtmnPh8RpmlXrIQzYp WgJm6U84qTyBZuGinldfMhMEwnx8o6d6lh5ut0STn9n4oFNxL7K53bv6RPFqXPoC Y8wexlQh+6REy3SC1X3iodnc7XSqTok= -----END CERTIFICATE-----Generated at Sat Oct 11 08:42:50 2025 by rpki-client