$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa File: f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa (raw, json) Hash identifier: oXzVJR6UIesyV0DcFX7kYiSPRNHgUmNbmQuix5n/9JE= Subject key identifier: 3B:E8:B5:F7:D3:75:48:E4:9D:DF:64:97:91:C2:40:6C:26:FE:3E:79 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75C3863BAA4F01D7E17C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 136.0.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5c:38:63:ba:a4:f0:1d:7e:17:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=1b0a0aad-25c3-4ef5-8d53-d7313212c301 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:5c:43:c2:64:21:83:8e:c8:2f:b8:b7:4d:57: e6:6c:11:fc:f1:fc:86:a0:8e:fa:25:34:62:7f:f7: 85:0e:87:94:2b:cf:89:ad:19:f1:a7:41:c2:0d:c3: 38:79:43:d2:ea:a6:0c:c7:7e:11:b6:61:de:d3:ef: bc:54:c3:43:80:be:bb:43:0f:83:0a:60:90:ca:3a: 32:c7:3d:bf:a2:af:e0:52:6f:9b:15:bc:eb:b9:37: 15:17:ee:31:9e:75:30:5f:82:02:6d:d8:e2:3e:40: 70:32:72:98:de:91:38:ff:02:fe:81:41:2d:d9:e0: cd:49:25:17:a4:4f:9a:d6:47:12:08:f4:d8:bf:19: 02:1e:ca:5c:9d:ca:41:46:a1:8f:ae:0e:56:46:2b: 60:8d:00:e2:ee:54:48:38:45:6b:b5:e9:28:6f:ad: 64:96:c8:a7:5c:66:7d:fa:78:16:cc:88:eb:e0:21: 15:90:01:a1:dc:4a:64:c0:07:48:16:d8:3d:3d:ef: 8f:16:32:3e:2e:d9:c9:ba:f8:ca:7c:91:01:49:d9: 77:3c:c3:26:00:42:c1:75:8e:bd:7c:39:f6:f8:df: ad:c7:09:09:2d:8d:12:fa:1c:8a:ed:16:a1:a4:37: c4:47:df:31:d8:b5:ba:ea:f3:c3:72:34:a5:df:79: 3f:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E8:B5:F7:D3:75:48:E4:9D:DF:64:97:91:C2:40:6C:26:FE:3E:79 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1e:25:40:e3:dc:9a:00:37:5c:7c:f0:25:46:ec:09:50:7e:3f: de:09:47:97:f7:8c:ce:28:7e:40:ae:9e:1c:39:04:9a:4e:40: 44:62:6f:4c:86:30:d1:9b:6e:a0:6f:8b:7c:22:b3:65:5e:a0: 10:27:f9:b9:b2:d8:44:d2:0d:46:40:4c:15:e4:88:28:63:a8: 96:57:7f:7d:2c:95:26:51:d0:55:b2:4b:3d:c2:6b:16:3d:de: b8:c0:84:a3:80:95:13:fd:8b:be:5f:c3:9a:0a:98:54:93:3d: be:39:96:d8:cf:8a:ac:e9:b5:9d:9f:59:7c:28:aa:9b:7a:23: 81:4d:03:d6:0c:57:53:7e:45:44:78:ed:d3:f5:dc:3d:7d:c0: 3b:08:c5:a5:bd:70:cf:d1:17:40:d1:3a:31:f6:87:b3:66:0d: e8:3e:30:27:e5:49:f5:cc:8d:cd:03:e4:d9:35:76:ed:49:d0: 56:c2:a2:b9:78:ee:a6:04:eb:ee:46:6a:98:91:b0:b4:72:fa: bf:76:f2:0b:56:3f:1b:0c:3c:27:ed:f0:fb:c2:97:c5:fc:51: 8b:4d:23:83:f8:e3:2f:48:f2:54:fb:78:bb:7b:b1:2c:b6:2b: 27:b3:29:c6:4c:00:2f:0d:8c:50:f9:ed:d3:2a:d4:cd:5b:37: fe:93:f5:cc -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1w4Y7qk8B1+F8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk MWIwYTBhYWQtMjVjMy00ZWY1LThkNTMtZDczMTMyMTJjMzAxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVxDwmQhg47IL7i3TVfmbBH88fyGoI76JTRi f/eFDoeUK8+JrRnxp0HCDcM4eUPS6qYMx34RtmHe0++8VMNDgL67Qw+DCmCQyjoy xz2/oq/gUm+bFbzruTcVF+4xnnUwX4ICbdjiPkBwMnKY3pE4/wL+gUEt2eDNSSUX pE+a1kcSCPTYvxkCHspcncpBRqGPrg5WRitgjQDi7lRIOEVrtekob61klsinXGZ9 +ngWzIjr4CEVkAGh3EpkwAdIFtg9Pe+PFjI+LtnJuvjKfJEBSdl3PMMmAELBdY69 fDn2+N+txwkJLY0S+hyK7RahpDfER98x2LW66vPDcjSl33k/HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDvotffTdUjknd9kl5HCQGwm/j55MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIxZjFlODUtNzM2My0z YzNhLWJiNzAtYjViYTEyNGNiOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAB4lQOPcmgA3XHzwJUbsCVB+P94JR5f3jM4ofkCunhw5BJpOQERib0yG MNGbbqBvi3wis2VeoBAn+bmy2ETSDUZATBXkiChjqJZXf30slSZR0FWySz3CaxY9 3rjAhKOAlRP9i75fw5oKmFSTPb45ltjPiqzptZ2fWXwoqpt6I4FNA9YMV1N+RUR4 7dP13D19wDsIxaW9cM/RF0DROjH2h7NmDeg+MCflSfXMjc0D5Nk1du1J0FbCorl4 7qYE6+5GapiRsLRy+r928gtWPxsMPCft8PvCl8X8UYtNI4P44y9I8lT7eLt7sSy2 KyezKcZMAC8NjFD57dMq1M1bN/6T9cw= -----END CERTIFICATE-----Generated at Sat Oct 11 08:47:28 2025 by rpki-client