$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bc6c250-0ca4-3c7a-9fdb-e696ef452e65.roa File: 1bc6c250-0ca4-3c7a-9fdb-e696ef452e65.roa (raw, json) Hash identifier: welhO73KJZLdaNT68SEjOgdpvhKtEviad0R/knPzbM0= Subject key identifier: 01:CB:C4:3C:08:21:01:65:A8:D8:2E:BC:33:27:99:0F:A7:7C:17:8C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B2658C5329C9597D73731CA00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bc6c250-0ca4-3c7a-9fdb-e696ef452e65.roa Signing time: Wed 10 Sep 2025 16:07:17 +0000 ROA not before: Wed 10 Sep 2025 16:07:17 +0000 ROA not after: Tue 09 Dec 2025 17:07:17 +0000 asID: 22773 IP address blocks: 136.0.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 04 Nov 2025 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:26:58:c5:32:9c:95:97:d7:37:31:ca:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 10 16:07:17 2025 GMT Not After : Dec 9 17:07:17 2025 GMT Subject: CN=c8be3612-837c-4bac-bbd7-a5cd6ce773b3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c9:08:dd:d6:cd:43:7d:fd:19:9a:17:f9:c4: 29:6f:5f:27:12:a7:b7:5f:6e:08:15:2e:8b:49:d3: 36:ad:b6:a0:fc:bb:34:dd:3c:e0:f3:70:47:05:57: fe:b5:ad:01:1b:7f:b0:d3:4d:78:f1:af:2d:ed:8f: 09:f5:ff:fe:54:65:11:26:98:45:cd:c4:a8:a6:f1: 15:57:ae:9b:a4:26:7a:7e:37:54:6e:3a:43:7f:7b: 12:83:cb:48:a5:af:65:bc:22:b8:e9:3f:20:42:65: 35:ff:04:a6:83:00:f2:7d:24:85:e1:0e:a5:6e:4b: 80:10:6e:12:db:d6:c6:51:93:29:b8:16:c9:95:60: a5:ba:2f:fe:54:48:6a:07:31:86:a0:1a:51:81:70: b6:95:a7:b4:d9:73:ec:d4:ba:c6:1c:75:f6:53:1b: c0:52:2f:63:c1:03:81:36:18:2f:b8:32:9b:c1:ca: cf:8c:bb:56:be:0e:c9:a3:08:a9:6f:1d:f3:3f:4d: e8:a3:b1:08:23:f1:38:31:7d:fc:2d:fa:f3:a8:9b: a8:99:73:7b:38:6d:65:23:e4:07:c5:88:31:15:91: f8:e6:22:82:7f:d5:15:6e:f5:7e:6e:cf:74:3e:f6: 0a:18:67:49:38:13:f6:14:c6:8c:b8:9f:fd:13:6d: 69:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:CB:C4:3C:08:21:01:65:A8:D8:2E:BC:33:27:99:0F:A7:7C:17:8C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/1bc6c250-0ca4-3c7a-9fdb-e696ef452e65.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0c:ab:d7:f4:07:bb:92:c9:38:dd:ad:9a:1c:23:61:ea:e5:b4: 72:5c:02:4b:55:75:d4:c4:88:f2:a0:5e:f1:a1:65:95:3f:87: e6:eb:29:9b:96:b4:09:74:07:3a:a0:75:39:6f:b6:d2:b8:9f: 21:5c:03:4f:e9:5c:46:93:5e:7c:cf:3b:48:03:7d:0e:93:d6: 60:49:2f:a7:9a:30:7e:87:b5:08:0b:06:3e:35:33:43:1e:84: d8:84:9f:d3:e4:31:a4:71:0e:68:80:a4:d4:57:ce:de:e3:12: 9a:7a:78:93:0d:5b:a8:44:28:4c:0c:7f:ab:07:a8:ec:c1:7f: 45:21:5d:44:47:8f:2d:82:e5:73:cf:93:2a:83:9b:74:7c:44: 95:ee:14:54:1d:e1:e9:c1:52:0f:bd:41:ef:eb:1a:a1:f3:59: aa:bf:f6:2f:c6:30:2f:bd:d4:fc:c0:8c:3b:e4:4c:08:ef:80: 27:dc:af:f8:94:9e:a2:ba:4d:01:de:ac:87:81:d1:a5:3c:59: 71:9e:8d:53:85:8d:12:5a:86:70:33:e6:8b:f6:ca:9a:cc:18: d7:f1:22:03:4e:7e:0d:ce:c0:d8:05:04:55:5e:04:c0:0f:f5: 28:19:63:81:e5:1c:e4:4f:c2:00:86:80:2b:47:cc:04:bf:0d: 0b:6f:42:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsmWMUynJWX1zcxygAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxMDE2MDcxN1oXDTI1MTIwOTE3MDcxN1owLzEtMCsGA1UEAxMk YzhiZTM2MTItODM3Yy00YmFjLWJiZDctYTVjZDZjZTc3M2IzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiskI3dbNQ339GZoX+cQpb18nEqe3X24IFS6L SdM2rbag/Ls03Tzg83BHBVf+ta0BG3+w00148a8t7Y8J9f/+VGURJphFzcSopvEV V66bpCZ6fjdUbjpDf3sSg8tIpa9lvCK46T8gQmU1/wSmgwDyfSSF4Q6lbkuAEG4S 29bGUZMpuBbJlWClui/+VEhqBzGGoBpRgXC2lae02XPs1LrGHHX2UxvAUi9jwQOB NhgvuDKbwcrPjLtWvg7Jowipbx3zP03oo7EII/E4MX38LfrzqJuomXN7OG1lI+QH xYgxFZH45iKCf9UVbvV+bs90PvYKGGdJOBP2FMaMuJ/9E21pAwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAHLxDwIIQFlqNguvDMnmQ+nfBeMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMWJjNmMyNTAtMGNhNC0z YzdhLTlmZGItZTY5NmVmNDUyZTY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAyr1/QHu5LJON2tmhwjYerltHJcAktVddTEiPKgXvGhZZU/h+brKZuW tAl0BzqgdTlvttK4nyFcA0/pXEaTXnzPO0gDfQ6T1mBJL6eaMH6HtQgLBj41M0Me hNiEn9PkMaRxDmiApNRXzt7jEpp6eJMNW6hEKEwMf6sHqOzBf0UhXURHjy2C5XPP kyqDm3R8RJXuFFQd4enBUg+9Qe/rGqHzWaq/9i/GMC+91PzAjDvkTAjvgCfcr/iU nqK6TQHerIeB0aU8WXGejVOFjRJahnAz5ov2yprMGNfxIgNOfg3OwNgFBFVeBMAP 9SgZY4HlHORPwgCGgCtHzAS/DQtvQuA= -----END CERTIFICATE-----Generated at Mon Nov 3 17:13:25 2025 by rpki-client