$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d39e7f6b-17e9-3aed-958d-5ad7f2fc2ef6.roa File: d39e7f6b-17e9-3aed-958d-5ad7f2fc2ef6.roa (raw, json) Hash identifier: ISFtsKWDWHPAdYJana4Yvso2fXmzR91RhoSqu0EKBZ4= Subject key identifier: 3E:36:21:59:0A:F3:5F:90:6B:96:DB:A0:40:9D:B9:37:28:1F:00:71 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B10445E2341E0D7A638058680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d39e7f6b-17e9-3aed-958d-5ad7f2fc2ef6.roa Signing time: Tue 02 Sep 2025 18:18:23 +0000 ROA not before: Tue 02 Sep 2025 18:18:23 +0000 ROA not after: Mon 01 Dec 2025 19:18:23 +0000 asID: 401152 IP address blocks: 136.0.213.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:10:44:5e:23:41:e0:d7:a6:38:05:86:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 18:18:23 2025 GMT Not After : Dec 1 19:18:23 2025 GMT Subject: CN=7a38e978-2546-4a70-92c8-40b659c65a89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:2b:48:e3:82:9d:ef:c4:2a:99:fa:94:b8:64: f6:36:bd:65:3c:5d:c2:d7:1c:c5:81:41:fe:a4:e1: 18:86:11:71:25:37:08:6c:e5:44:c6:bf:0f:1d:36: 9f:03:92:bf:20:2b:7a:c3:2c:1a:6f:e7:15:a6:6b: 03:08:fb:01:0e:9a:ae:3a:69:aa:98:44:ca:a5:6e: 7f:d3:e7:bc:39:52:cc:ad:c5:4a:56:1a:16:d5:30: 41:17:ad:3f:a7:f2:de:cb:8a:24:b7:af:bf:c1:0d: 77:ba:69:43:a7:10:2d:ff:ec:e5:d0:65:32:04:c2: 9f:5e:f8:69:4e:e2:06:26:70:64:c0:e4:bb:99:ce: 4e:e1:da:f1:b6:a9:d0:09:11:5f:cb:3d:f5:13:7e: 04:6e:ca:da:7b:75:6f:57:cc:88:30:e6:62:28:4f: 7b:d0:6e:a9:70:55:e5:09:ff:ad:b6:26:ea:f5:f0: 9f:15:9c:42:45:0b:34:9f:a7:e6:d6:57:3e:e1:26: 48:82:bf:04:b4:3a:15:0c:85:6c:af:30:f4:a1:e4: 53:7e:4c:d4:6a:9c:5a:67:4c:46:6a:d9:58:3f:cc: 36:bf:dc:c4:76:14:1b:54:f6:ee:2d:53:25:19:ea: a0:63:3e:68:88:ab:77:70:1d:68:92:e1:8a:e6:25: 89:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:36:21:59:0A:F3:5F:90:6B:96:DB:A0:40:9D:B9:37:28:1F:00:71 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d39e7f6b-17e9-3aed-958d-5ad7f2fc2ef6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.213.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:cc:69:ec:98:f9:c1:17:04:48:ee:a7:7e:3e:8c:1e:71:ed: de:c3:41:8d:4b:ec:f6:69:02:51:e4:30:60:eb:84:23:0b:06: f6:3d:97:d5:9f:7e:51:a1:c6:90:cf:e8:86:b2:39:a6:17:1c: b0:73:b3:2d:ca:9e:6e:10:ae:32:5e:bc:a5:e1:af:81:4b:4f: f6:42:e4:35:59:c8:49:5b:f4:9a:69:bf:a9:4a:44:87:88:ea: 4f:79:7e:23:93:eb:05:e3:68:9a:c8:ea:db:6c:ed:f1:51:8f: 01:71:d8:e7:f6:9f:e6:fb:56:dc:72:20:95:a8:73:e0:18:82: 28:fe:a5:2a:e8:d7:43:90:5c:4e:ec:8f:4c:72:be:46:2e:86: 79:f0:d3:61:56:32:1f:8a:06:b1:b2:c5:7d:d5:fe:ff:40:19: 03:c7:64:83:dd:18:e5:34:36:d2:11:78:17:78:71:71:90:c3: 1f:cb:16:c6:94:20:0b:62:74:b0:86:f6:61:89:2f:3a:1a:30: 08:05:bd:bb:59:d1:47:2d:30:81:93:22:80:90:b1:eb:da:93: ba:1c:f9:7e:8f:db:63:65:f1:ea:d8:59:dc:07:71:1e:28:44: 80:03:1b:0b:a9:4e:c8:a9:5f:a5:ae:a2:54:0f:cb:a2:75:1a: 3e:07:4e:71 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsQRF4jQeDXpjgFhoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjE4MTgyM1oXDTI1MTIwMTE5MTgyM1owLzEtMCsGA1UEAxMk N2EzOGU5NzgtMjU0Ni00YTcwLTkyYzgtNDBiNjU5YzY1YTg5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmStI44Kd78QqmfqUuGT2Nr1lPF3C1xzFgUH+ pOEYhhFxJTcIbOVExr8PHTafA5K/ICt6wywab+cVpmsDCPsBDpquOmmqmETKpW5/ 0+e8OVLMrcVKVhoW1TBBF60/p/Ley4okt6+/wQ13umlDpxAt/+zl0GUyBMKfXvhp TuIGJnBkwOS7mc5O4drxtqnQCRFfyz31E34Ebsrae3VvV8yIMOZiKE970G6pcFXl Cf+ttibq9fCfFZxCRQs0n6fm1lc+4SZIgr8EtDoVDIVsrzD0oeRTfkzUapxaZ0xG atlYP8w2v9zEdhQbVPbuLVMlGeqgYz5oiKt3cB1okuGK5iWJMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD42IVkK81+Qa5bboECduTcoHwBxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDM5ZTdmNmItMTdlOS0z YWVkLTk1OGQtNWFkN2YyZmMyZWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHjMaeyY+cEXBEjup34+jB5x7d7DQY1L7PZpAlHkMGDrhCMLBvY9l9Wf flGhxpDP6IayOaYXHLBzsy3Knm4QrjJevKXhr4FLT/ZC5DVZyElb9Jppv6lKRIeI 6k95fiOT6wXjaJrI6tts7fFRjwFx2Of2n+b7VtxyIJWoc+AYgij+pSro10OQXE7s j0xyvkYuhnnw02FWMh+KBrGyxX3V/v9AGQPHZIPdGOU0NtIReBd4cXGQwx/LFsaU IAtidLCG9mGJLzoaMAgFvbtZ0UctMIGTIoCQsevak7oc+X6P22Nl8erYWdwHcR4o RIADGwupTsipX6WuolQPy6J1Gj4HTnE= -----END CERTIFICATE-----Generated at Fri Sep 19 03:05:05 2025 by rpki-client