$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa File: def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa (raw, json) Hash identifier: 8S5Mjp+HWqVam0W/KkKRahbOowaAZUBEQVrzZ1NQ9EI= Subject key identifier: 4E:32:EA:D6:5C:BD:49:6C:72:72:5D:AF:0C:C2:D8:16:26:AA:21:82 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6C2D30C1B0A6663C12980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 136.0.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c2:d3:0c:1b:0a:66:63:c1:29:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=ac3b77b7-88b4-4d35-92a4-1ba13094e327 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:78:11:9d:c1:c8:29:38:7a:86:ba:f8:fd:fe: 12:8d:2f:1e:ef:3a:80:23:e7:b3:95:8a:30:d0:d9: 1e:80:32:60:21:bb:31:84:4b:da:aa:dd:c6:c3:fd: d5:ce:8e:c5:ae:20:3e:58:64:e3:8a:82:5b:44:ae: 01:0c:dc:6f:92:da:49:21:b2:0d:fc:33:92:21:23: 2d:7d:05:7a:18:4b:0e:21:89:34:37:24:47:33:1b: ee:7f:e4:5b:cb:3d:20:04:d1:99:b3:81:43:bf:5f: 82:1d:d3:7c:26:4b:07:e2:2c:2e:b8:6d:b6:0c:75: ab:28:c7:d9:f3:46:f7:5a:ac:5d:de:4d:02:a3:79: c9:a4:32:09:ef:41:e6:bb:fc:2d:f6:1d:0a:51:82: 56:85:9f:d8:79:8d:cb:13:66:2f:18:c0:a0:35:92: 25:02:22:01:b5:4f:12:5d:55:bf:eb:42:6d:3e:94: 5e:36:44:f7:a7:6f:09:cb:4b:58:43:60:11:94:5d: c7:34:30:40:f7:78:50:75:77:6a:70:a0:3f:50:88: b5:b6:89:96:0d:fe:52:5a:71:6d:9e:2d:5f:f5:1b: 7a:09:5a:56:48:55:12:aa:3e:76:8d:30:ba:ef:e6: b6:2b:34:3c:8b:96:4b:ec:71:d8:7e:9c:08:85:94: 4e:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:32:EA:D6:5C:BD:49:6C:72:72:5D:AF:0C:C2:D8:16:26:AA:21:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:87:03:e1:b9:1a:86:97:48:d8:b8:c2:a3:71:b7:e2:4f:59: 41:12:20:f8:89:34:a8:77:f0:ae:e3:8b:dc:8b:36:2a:8b:e2: 4b:a4:83:8b:19:3a:cb:32:19:d1:3e:47:e8:08:5e:b0:ae:e2: e1:92:bd:6d:e6:32:77:16:37:c7:e9:4c:94:83:4b:35:52:a9: 28:3e:27:d5:16:54:83:1d:dc:31:c9:85:4a:e6:8d:37:49:6a: 0c:aa:f2:50:11:8c:64:ee:cb:05:74:0e:9e:d8:41:f3:8f:e1: ea:6f:f8:dc:cd:fc:bf:c5:dc:3a:3e:bf:64:ba:15:d3:c2:50: e8:1c:44:55:39:ea:c0:df:82:4c:88:27:1a:e4:ce:35:42:52: d8:c6:11:0a:a5:e6:30:ef:f0:7d:98:33:e5:07:e4:b2:b4:15: 8f:2b:0c:29:12:00:bb:cc:e8:38:8c:eb:e8:19:55:2e:17:a9: b8:de:df:ea:5a:96:fe:3f:7d:8e:da:31:37:24:4b:d4:83:93: 90:08:45:80:ca:4c:f2:9a:b2:67:cb:c7:98:fe:16:33:ab:ea: 16:ae:eb:c8:93:d6:56:87:cc:06:f6:e8:dd:7e:03:b3:c5:3f: d1:72:4b:35:6b:98:47:4e:45:30:ce:cf:df:c3:7d:76:92:30: fa:15:2c:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsLTDBsKZmPBKYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk YWMzYjc3YjctODhiNC00ZDM1LTkyYTQtMWJhMTMwOTRlMzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHgRncHIKTh6hrr4/f4SjS8e7zqAI+ezlYow 0NkegDJgIbsxhEvaqt3Gw/3Vzo7FriA+WGTjioJbRK4BDNxvktpJIbIN/DOSISMt fQV6GEsOIYk0NyRHMxvuf+Rbyz0gBNGZs4FDv1+CHdN8JksH4iwuuG22DHWrKMfZ 80b3Wqxd3k0Co3nJpDIJ70Hmu/wt9h0KUYJWhZ/YeY3LE2YvGMCgNZIlAiIBtU8S XVW/60JtPpReNkT3p28Jy0tYQ2ARlF3HNDBA93hQdXdqcKA/UIi1tomWDf5SWnFt ni1f9Rt6CVpWSFUSqj52jTC67+a2KzQ8i5ZL7HHYfpwIhZROqwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFE4y6tZcvUlscnJdrwzC2BYmqiGCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGVmNmNjMDMtZWYyMS0z MGQyLTlhMDItNWU3NzFlMWEwNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIOHA+G5GoaXSNi4wqNxt+JPWUESIPiJNKh38K7ji9yLNiqL4kukg4sZ OssyGdE+R+gIXrCu4uGSvW3mMncWN8fpTJSDSzVSqSg+J9UWVIMd3DHJhUrmjTdJ agyq8lARjGTuywV0Dp7YQfOP4epv+NzN/L/F3Do+v2S6FdPCUOgcRFU56sDfgkyI JxrkzjVCUtjGEQql5jDv8H2YM+UH5LK0FY8rDCkSALvM6DiM6+gZVS4Xqbje3+pa lv4/fY7aMTckS9SDk5AIRYDKTPKasmfLx5j+FjOr6hau68iT1laHzAb26N1+A7PF P9FySzVrmEdORTDOz9/DfXaSMPoVLBw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:46:39 2025 by rpki-client