$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb83ec8d-9a12-3a85-a93b-70df90e27534.roa File: eb83ec8d-9a12-3a85-a93b-70df90e27534.roa (raw, json) Hash identifier: jYywR1EdgwIKx1JiCi30ostna/NPC04AmxKEVkc665c= Subject key identifier: FE:47:1C:C5:93:EE:02:A8:82:93:38:0B:A5:ED:14:A1:30:A1:4D:B5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B77715B9A26E9350CDACDA980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb83ec8d-9a12-3a85-a93b-70df90e27534.roa Signing time: Thu 09 Oct 2025 17:17:18 +0000 ROA not before: Thu 09 Oct 2025 17:17:18 +0000 ROA not after: Wed 07 Jan 2026 18:17:18 +0000 asID: 215590 IP address blocks: 136.0.133.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:77:71:5b:9a:26:e9:35:0c:da:cd:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 17:17:18 2025 GMT Not After : Jan 7 18:17:18 2026 GMT Subject: CN=ad7ca26b-4e9a-4911-b7af-be22b039454d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:de:b0:e8:28:db:be:df:93:e1:9e:0f:28:64: 7a:1e:a6:9b:2d:67:a1:f8:9c:18:99:69:38:3f:7e: 22:3b:ab:14:6f:1c:b0:30:4d:47:43:45:24:d1:2d: 16:4b:fb:30:0b:ee:6f:42:16:0c:eb:58:14:82:22: 5b:6c:25:13:7d:f8:5b:5d:7c:62:ad:e0:8c:3b:f7: fa:c3:e9:02:fc:36:b4:cd:d7:34:3c:c0:c8:c8:ad: e0:0d:84:fb:ab:db:03:97:cb:bc:9e:32:f8:2e:b0: 3f:24:d2:ff:f9:e5:24:ee:f3:2e:e2:b5:19:b7:6d: 64:c9:ca:a9:74:1c:a6:06:b4:6f:3f:30:ab:00:1d: f4:9a:d0:36:57:41:5c:e6:b4:ee:5e:9f:55:f6:9e: 71:59:24:d7:4d:33:19:1c:7c:72:62:63:23:01:d6: 4b:f4:16:8f:ce:ae:ee:a7:07:6b:33:a1:32:1b:1f: de:82:09:e9:59:d1:86:fd:93:80:09:04:60:3d:92: b2:7b:f3:6e:2b:85:8b:47:df:9c:03:4f:da:fa:c0: 04:da:da:9a:e1:43:fb:cd:6d:6c:a9:f4:9f:bb:cd: 27:89:4d:d2:5c:28:98:a6:69:85:bf:0f:d0:02:f7: 61:1c:76:f2:41:8b:e7:20:54:5c:4b:d8:2b:38:1f: ab:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:47:1C:C5:93:EE:02:A8:82:93:38:0B:A5:ED:14:A1:30:A1:4D:B5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/eb83ec8d-9a12-3a85-a93b-70df90e27534.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.133.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:6f:3f:6e:ed:25:8b:62:72:40:ca:d5:f4:f9:41:72:54:f8: 99:65:63:86:cb:59:df:8f:a3:dc:9c:24:bc:dd:16:05:46:bd: 3f:8f:16:0a:78:7b:94:95:44:ff:7a:a0:0e:59:71:e7:46:4a: 4b:e0:c4:21:e0:ff:e2:ea:89:30:d6:02:3d:a0:49:8e:fb:c2: b5:bb:d1:a0:a3:79:f7:ab:96:9f:52:91:07:06:28:7e:eb:69: 4a:32:b3:4f:84:d2:68:f1:e0:bb:59:52:f7:2a:70:01:44:da: 7e:f1:d4:aa:39:d5:75:1a:8d:96:d7:8a:be:a3:9a:12:e6:45: 86:5c:88:47:3b:fc:dc:0e:79:b1:11:6a:18:cb:85:ce:72:a0: d1:d8:3b:5c:38:14:03:53:59:cf:a5:e8:ca:7c:e5:78:be:20: b2:0c:c5:28:4c:40:2b:df:5c:53:98:77:0a:a0:58:8d:84:c2: 36:dc:f0:12:a1:07:d0:19:44:5b:29:bf:90:0a:ee:c3:6c:46: a6:05:ec:94:a7:48:20:3a:25:29:36:74:87:f5:43:a2:69:cf: f7:50:98:28:d1:4d:25:6d:a1:7a:5f:5b:16:4f:94:98:4e:26: ec:74:5a:7f:38:0e:48:95:29:e9:2a:f2:c9:db:0a:cc:46:55: 7f:53:be:26 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt3cVuaJuk1DNrNqYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTE3MTcxOFoXDTI2MDEwNzE4MTcxOFowLzEtMCsGA1UEAxMk YWQ3Y2EyNmItNGU5YS00OTExLWI3YWYtYmUyMmIwMzk0NTRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN6w6Cjbvt+T4Z4PKGR6HqabLWeh+JwYmWk4 P34iO6sUbxywME1HQ0Uk0S0WS/swC+5vQhYM61gUgiJbbCUTffhbXXxireCMO/f6 w+kC/Da0zdc0PMDIyK3gDYT7q9sDl8u8njL4LrA/JNL/+eUk7vMu4rUZt21kycqp dBymBrRvPzCrAB30mtA2V0Fc5rTuXp9V9p5xWSTXTTMZHHxyYmMjAdZL9BaPzq7u pwdrM6EyGx/eggnpWdGG/ZOACQRgPZKye/NuK4WLR9+cA0/a+sAE2tqa4UP7zW1s qfSfu80niU3SXCiYpmmFvw/QAvdhHHbyQYvnIFRcS9grOB+rbwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFP5HHMWT7gKogpM4C6XtFKEwoU21MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZWI4M2VjOGQtOWExMi0z YTg1LWE5M2ItNzBkZjkwZTI3NTM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGdvP27tJYtickDK1fT5QXJU+JllY4bLWd+Po9ycJLzdFgVGvT+PFgp4 e5SVRP96oA5ZcedGSkvgxCHg/+LqiTDWAj2gSY77wrW70aCjeferlp9SkQcGKH7r aUoys0+E0mjx4LtZUvcqcAFE2n7x1Ko51XUajZbXir6jmhLmRYZciEc7/NwOebER ahjLhc5yoNHYO1w4FANTWc+l6Mp85Xi+ILIMxShMQCvfXFOYdwqgWI2Ewjbc8BKh B9AZRFspv5AK7sNsRqYF7JSnSCA6JSk2dIf1Q6Jpz/dQmCjRTSVtoXpfWxZPlJhO Jux0Wn84DkiVKekq8snbCsxGVX9TviY= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:07 2025 by rpki-client