$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa312531-26d9-37da-ae56-fa890d84f139.roa File: fa312531-26d9-37da-ae56-fa890d84f139.roa (raw, json) Hash identifier: 2Qfo060BHZS4iwDwpZXTUfvHNCRITRwq4gNJ5Ja6rwE= Subject key identifier: 19:D9:DA:0B:B1:E8:12:D0:E5:5C:14:5F:E8:21:C8:8B:53:6C:35:85 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B79BCB01094E5774C6310F928 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa312531-26d9-37da-ae56-fa890d84f139.roa Signing time: Fri 10 Oct 2025 13:00:37 +0000 ROA not before: Fri 10 Oct 2025 13:00:37 +0000 ROA not after: Thu 08 Jan 2026 14:00:37 +0000 asID: 401152 IP address blocks: 136.0.82.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 12 Oct 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:bc:b0:10:94:e5:77:4c:63:10:f9:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 10 13:00:37 2025 GMT Not After : Jan 8 14:00:37 2026 GMT Subject: CN=1d7a445a-5ace-440f-9075-c16de45829f0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:f9:0e:64:2f:d4:b5:e8:24:d8:39:b8:27:da: 30:d9:d8:97:f7:c2:94:e1:68:ab:c7:81:3a:39:39: 59:6c:48:18:13:d8:1b:15:9f:db:ba:e0:2e:10:c4: af:be:30:c2:e9:d7:4c:32:8a:bd:f7:d3:53:13:5d: 88:3e:3a:9d:0e:4b:a5:6c:4b:e2:e2:53:7c:a6:3f: 8f:85:15:b3:00:42:22:7b:26:35:d0:a8:43:85:97: 87:a5:bf:91:cc:ce:f4:7c:1b:52:12:7d:54:29:00: 48:35:3d:8d:cd:d6:ee:a5:23:6f:da:a3:5f:4e:2d: 54:71:73:c9:26:a5:bc:e8:57:7c:4f:4b:19:8d:ee: bb:7d:c2:cd:0f:4a:48:32:47:47:d0:a3:f0:fe:3d: 76:d0:1e:d7:1a:b4:16:69:9b:25:fb:d6:c9:95:70: a4:7c:ac:09:67:fa:6d:d1:5b:b3:ec:b9:d6:cc:22: 12:6f:7e:c9:d7:1e:e7:3f:02:25:7a:ac:01:60:01: 07:52:99:d2:12:d2:e0:70:58:e6:5a:4c:9a:28:76: 47:fe:46:4a:8b:20:ea:91:8b:c6:23:d0:64:5c:b9: 79:a6:0e:0e:8c:f6:8f:42:b8:83:f2:f0:ea:7a:34: cd:e3:9b:3d:62:7c:a5:4b:8a:6d:75:dd:95:a6:e4: 66:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:D9:DA:0B:B1:E8:12:D0:E5:5C:14:5F:E8:21:C8:8B:53:6C:35:85 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/fa312531-26d9-37da-ae56-fa890d84f139.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.82.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 91:db:90:64:b6:32:65:cc:9f:2d:d9:66:d2:00:7c:5a:3b:c7: 54:2e:e5:44:f2:5a:cd:74:cf:6a:ae:96:2b:54:d7:78:dd:d2: b9:54:07:53:62:9a:e5:52:3e:13:90:19:43:3a:f3:7d:95:6a: 5f:4b:7a:7b:7e:49:c7:85:9b:f0:d7:90:b7:47:f9:12:06:c5: 76:bf:5d:22:16:d0:86:52:0d:a5:35:79:5a:24:42:55:c7:71: 0b:4c:25:8d:88:36:66:e3:18:49:f1:eb:99:c1:b7:49:d2:2a: 46:62:2c:7b:f9:45:1a:ee:d1:0d:8a:b6:e9:69:0c:72:10:00: 85:6e:f1:44:f4:3f:6b:31:95:45:60:2f:4c:8d:f2:53:e0:d3: 33:65:15:15:89:5d:92:54:e6:1d:1e:de:4b:42:10:8a:11:02: cc:8d:8b:d9:22:2a:90:2c:30:24:63:ba:ec:3f:35:8c:cd:8c: 36:79:23:f4:f2:09:08:7d:25:62:f3:4a:30:37:52:f6:12:3e: b0:57:0c:89:20:29:a9:7b:94:b2:8a:81:04:f8:79:fc:4b:24: fb:6d:a5:ec:29:d6:87:34:dd:de:ba:8b:82:06:f6:d9:7d:78: d2:26:25:53:26:79:7d:c4:91:96:08:9c:82:5b:ee:bb:cd:35: 07:4e:d6:4a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5vLAQlOV3TGMQ+SgwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMDEzMDAzN1oXDTI2MDEwODE0MDAzN1owLzEtMCsGA1UEAxMk MWQ3YTQ0NWEtNWFjZS00NDBmLTkwNzUtYzE2ZGU0NTgyOWYwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq/kOZC/Utegk2Dm4J9ow2diX98KU4Wirx4E6 OTlZbEgYE9gbFZ/buuAuEMSvvjDC6ddMMoq999NTE12IPjqdDkulbEvi4lN8pj+P hRWzAEIieyY10KhDhZeHpb+RzM70fBtSEn1UKQBINT2NzdbupSNv2qNfTi1UcXPJ JqW86Fd8T0sZje67fcLND0pIMkdH0KPw/j120B7XGrQWaZsl+9bJlXCkfKwJZ/pt 0Vuz7LnWzCISb37J1x7nPwIleqwBYAEHUpnSEtLgcFjmWkyaKHZH/kZKiyDqkYvG I9BkXLl5pg4OjPaPQriD8vDqejTN45s9YnylS4ptdd2VpuRm+QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBnZ2gux6BLQ5VwUX+ghyItTbDWFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZmEzMTI1MzEtMjZkOS0z N2RhLWFlNTYtZmE4OTBkODRmMTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiABSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJHbkGS2MmXMny3ZZtIAfFo7x1Qu5UTyWs10z2qulitU13jd0rlUB1Ni muVSPhOQGUM6832Val9Lent+SceFm/DXkLdH+RIGxXa/XSIW0IZSDaU1eVokQlXH cQtMJY2INmbjGEnx65nBt0nSKkZiLHv5RRru0Q2KtulpDHIQAIVu8UT0P2sxlUVg L0yN8lPg0zNlFRWJXZJU5h0e3ktCEIoRAsyNi9kiKpAsMCRjuuw/NYzNjDZ5I/Ty CQh9JWLzSjA3UvYSPrBXDIkgKal7lLKKgQT4efxLJPttpewp1oc03d66i4IG9tl9 eNImJVMmeX3EkZYInIJb7rvNNQdO1ko= -----END CERTIFICATE-----Generated at Sat Oct 11 08:49:59 2025 by rpki-client