$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e5b56f-4d76-3b87-8ecc-62655be97364.roa File: f3e5b56f-4d76-3b87-8ecc-62655be97364.roa (raw, json) Hash identifier: 3Ndaq7XpQSXD02ACsRZ3D7msN/vCq7RN3O8i5N615Yo= Subject key identifier: 04:5A:69:FD:4C:63:E3:56:23:2D:9C:5D:34:3D:0C:28:C9:FE:AA:F0 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B239BD8ABC43D2E833CFFCA80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e5b56f-4d76-3b87-8ecc-62655be97364.roa Signing time: Tue 09 Sep 2025 16:35:00 +0000 ROA not before: Tue 09 Sep 2025 16:35:00 +0000 ROA not after: Mon 08 Dec 2025 17:35:00 +0000 asID: 214238 IP address blocks: 136.0.144.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:23:9b:d8:ab:c4:3d:2e:83:3c:ff:ca:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 9 16:35:00 2025 GMT Not After : Dec 8 17:35:00 2025 GMT Subject: CN=3d11e6a5-46ec-486b-8ed8-5228d61e59f8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:16:41:05:f5:9a:b3:6a:22:da:f0:39:23:e7: 56:db:25:30:50:a1:35:d3:89:22:bd:47:0b:d6:cf: 19:96:bb:05:cc:12:b7:d0:7d:48:db:22:3c:fc:80: 34:7c:ea:ae:c1:ec:2d:6e:d8:ef:f1:3c:5c:fa:56: 8d:9e:50:02:b5:13:4a:8b:43:1a:a5:a1:aa:08:d7: ea:d2:94:0b:05:70:22:02:3b:48:ba:d7:f6:cd:f1: 8c:d5:98:5f:bd:5e:58:52:f4:c9:22:37:74:7f:29: 62:58:55:bf:07:fb:31:55:96:fe:33:83:19:de:85: 08:08:7d:97:0b:75:21:4a:ee:29:13:f2:08:4e:29: 79:e8:85:f8:12:9c:04:2c:d6:4b:a9:97:be:af:72: 98:18:62:11:fc:84:1a:b8:7b:ed:74:03:87:8c:5f: 41:92:c4:c2:8a:b4:17:ea:8a:41:fb:a5:ed:04:3d: 6b:74:c8:03:fb:ac:61:dd:a8:f3:57:98:6c:0d:a8: 11:bf:95:a5:23:1a:c9:52:23:70:ec:6a:a2:6c:0c: 37:26:1c:41:73:2d:0d:f3:7c:1b:64:3a:c7:fd:7a: 8c:84:d7:0e:38:1b:01:fa:71:53:bf:d0:8c:a5:ca: 71:ee:25:50:8a:4e:b9:47:f4:b5:18:a6:d4:f2:ad: b0:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:5A:69:FD:4C:63:E3:56:23:2D:9C:5D:34:3D:0C:28:C9:FE:AA:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3e5b56f-4d76-3b87-8ecc-62655be97364.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.144.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:be:5c:96:3b:ea:07:ce:4d:5a:de:97:d4:b0:8c:1a:93:e2: 61:1a:ac:24:1a:00:c3:d7:b8:0e:29:d4:07:1d:8d:a4:0c:3a: 85:84:01:9c:f9:53:04:67:d3:22:1a:b0:55:74:ee:a8:8c:e6: c3:d3:c2:c1:d6:ab:7b:99:94:f0:69:be:9a:81:06:3c:af:a4: 3e:64:77:4b:7d:d6:5d:d2:fe:1f:ae:8c:2f:bd:e1:d4:9d:e7: 0f:68:a8:dd:71:74:05:a4:f0:69:e5:43:a0:07:3e:4a:9e:be: 5e:cf:2e:7a:81:51:32:ac:37:72:1b:5f:e1:68:f4:6c:e1:e6: 57:f3:47:29:3a:51:42:6b:da:d7:94:81:2e:ca:a8:11:9a:2f: 2a:33:f6:c0:57:23:ab:65:97:37:03:e3:6b:bb:07:d9:3c:39: cf:93:2d:c5:70:e8:0c:5f:0b:4f:9a:3e:be:03:da:98:fd:63: b1:bb:9e:6c:f4:5b:55:12:dd:93:46:fc:7a:1f:a3:51:d5:15: c0:01:1b:34:e8:fe:12:50:cc:bf:a2:3b:d9:be:70:87:fd:90: 35:f1:f9:48:a7:8a:4f:55:8c:fc:fd:5a:c6:bb:55:10:ea:ad: b6:7a:55:3b:ee:15:95:70:31:0d:5d:03:d7:50:81:e1:60:5e: f4:2f:c3:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsjm9irxD0ugzz/yoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwOTE2MzUwMFoXDTI1MTIwODE3MzUwMFowLzEtMCsGA1UEAxMk M2QxMWU2YTUtNDZlYy00ODZiLThlZDgtNTIyOGQ2MWU1OWY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBZBBfWas2oi2vA5I+dW2yUwUKE104kivUcL 1s8ZlrsFzBK30H1I2yI8/IA0fOquwewtbtjv8Txc+laNnlACtRNKi0MapaGqCNfq 0pQLBXAiAjtIutf2zfGM1ZhfvV5YUvTJIjd0fyliWFW/B/sxVZb+M4MZ3oUICH2X C3UhSu4pE/IITil56IX4EpwELNZLqZe+r3KYGGIR/IQauHvtdAOHjF9BksTCirQX 6opB+6XtBD1rdMgD+6xh3ajzV5hsDagRv5WlIxrJUiNw7GqibAw3JhxBcy0N83wb ZDrH/XqMhNcOOBsB+nFTv9CMpcpx7iVQik65R/S1GKbU8q2wtwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFARaaf1MY+NWIy2cXTQ9DCjJ/qrwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjNlNWI1NmYtNGQ3Ni0z Yjg3LThlY2MtNjI2NTViZTk3MzY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACQMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAH6+XJY76gfOTVrel9SwjBqT4mEarCQaAMPXuA4p1AcdjaQMOoWEAZz5 UwRn0yIasFV07qiM5sPTwsHWq3uZlPBpvpqBBjyvpD5kd0t91l3S/h+ujC+94dSd 5w9oqN1xdAWk8GnlQ6AHPkqevl7PLnqBUTKsN3IbX+Fo9Gzh5lfzRyk6UUJr2teU gS7KqBGaLyoz9sBXI6tllzcD42u7B9k8Oc+TLcVw6AxfC0+aPr4D2pj9Y7G7nmz0 W1US3ZNG/Hofo1HVFcABGzTo/hJQzL+iO9m+cIf9kDXx+Uinik9VjPz9Wsa7VRDq rbZ6VTvuFZVwMQ1dA9dQgeFgXvQvw4c= -----END CERTIFICATE-----Generated at Sat Oct 11 08:41:08 2025 by rpki-client