$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da29250d-f54a-34e6-a46e-b2388238591e.roa File: da29250d-f54a-34e6-a46e-b2388238591e.roa (raw, json) Hash identifier: OdYe0PzIRsHLVF/zaaNFjb7MSzC0X+EKMesb3OouURY= Subject key identifier: 32:DE:FC:B7:02:E7:5B:70:A3:20:10:5B:2A:E1:B1:F8:17:F6:61:D6 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B34B3B50264044F8F90B68490 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da29250d-f54a-34e6-a46e-b2388238591e.roa Signing time: Mon 15 Sep 2025 19:31:49 +0000 ROA not before: Mon 15 Sep 2025 19:31:49 +0000 ROA not after: Sun 14 Dec 2025 20:31:49 +0000 asID: 401152 IP address blocks: 136.0.158.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 20 Sep 2025 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:34:b3:b5:02:64:04:4f:8f:90:b6:84:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 15 19:31:49 2025 GMT Not After : Dec 14 20:31:49 2025 GMT Subject: CN=561da5fe-b69d-45f6-aa67-77bc58966e23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:35:e4:cd:52:82:25:1b:20:a7:33:e6:4f:e1: 31:3c:15:51:da:10:ef:17:7e:59:a5:a0:d2:55:df: 52:12:aa:5c:e6:d9:0e:ad:60:59:c3:22:5b:d1:72: 0d:74:b1:63:cb:69:bd:fb:ab:ad:8b:c4:6b:c2:18: a0:bf:4f:3d:92:36:15:19:35:ce:c1:77:f8:80:00: ac:8d:8f:0d:b6:9e:50:af:f8:94:08:1a:61:96:2f: 03:eb:c6:28:5e:0c:ee:e0:78:3f:fd:be:52:4b:48: 20:bb:e3:5f:72:e0:25:84:40:d2:0c:e0:e0:fa:cf: 72:14:ba:8b:23:06:60:4d:4b:07:54:d2:1e:48:28: 9a:2d:58:39:eb:69:4f:1a:09:7a:ae:8c:8a:0e:38: 06:4d:4d:a8:53:78:0a:68:54:52:53:2d:d7:2f:f7: 03:0b:52:1a:32:40:a6:da:22:38:de:e3:f7:f3:09: 81:13:2a:44:26:6c:5c:fd:25:4f:23:c8:2a:bb:1a: 7f:b6:52:cd:7b:85:f7:2c:ad:a9:d1:a8:4d:48:7c: ee:6f:0d:8b:4a:a8:06:fb:7c:eb:e7:1a:8f:b9:ea: b9:08:e3:9d:19:d1:e8:ce:5d:fe:23:49:c0:10:0a: 6c:b4:f1:ad:8d:b7:f2:7e:8b:1a:90:b4:00:70:19: 20:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:DE:FC:B7:02:E7:5B:70:A3:20:10:5B:2A:E1:B1:F8:17:F6:61:D6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/da29250d-f54a-34e6-a46e-b2388238591e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.158.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:07:49:2e:8d:d8:cd:e9:d5:eb:8c:86:a5:12:a2:de:f8:07: 16:b9:a1:93:66:52:2c:11:ad:cc:c4:dd:fa:14:28:ab:c5:ce: ef:a4:69:31:4b:f3:c7:03:c9:8d:d3:11:07:f7:a3:d9:26:31: 5a:82:0b:d4:3d:e7:77:69:cd:64:a3:db:ed:d3:1e:b6:03:c1: 4d:5e:76:05:26:d6:0c:a0:5c:ca:5f:2d:7e:58:66:26:c3:28: 45:0a:12:3e:e1:24:4d:b3:e3:f2:ab:12:60:7d:87:02:40:18: 0d:bd:03:9c:f0:57:b6:62:75:60:0f:40:ca:b0:0e:ce:f1:eb: 51:9f:ee:be:78:de:8b:e5:05:d0:d0:99:26:11:73:01:b1:ce: 4e:29:56:d0:c1:4e:70:8f:2c:a3:2b:23:18:93:92:0e:85:d5: 86:0f:85:1f:0f:bd:f9:ba:1b:ff:bf:8c:c6:51:fd:c9:a4:b5: 12:2b:aa:dd:fa:94:37:1f:e0:c5:3f:cd:fe:5d:fc:30:05:73: 88:c0:dc:c4:f4:a7:7f:61:89:bc:e7:e3:c1:52:a6:8d:71:18: 26:4a:49:26:75:36:cb:df:e6:af:71:5a:ef:77:c4:cf:2e:43: 37:ec:99:04:0a:b5:64:97:30:d7:5d:40:96:10:1a:b1:54:e8: 41:ec:a3:fd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEs0s7UCZARPj5C2hJAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkxNTE5MzE0OVoXDTI1MTIxNDIwMzE0OVowLzEtMCsGA1UEAxMk NTYxZGE1ZmUtYjY5ZC00NWY2LWFhNjctNzdiYzU4OTY2ZTIzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zXkzVKCJRsgpzPmT+ExPBVR2hDvF35ZpaDS Vd9SEqpc5tkOrWBZwyJb0XINdLFjy2m9+6uti8Rrwhigv089kjYVGTXOwXf4gACs jY8Ntp5Qr/iUCBphli8D68YoXgzu4Hg//b5SS0ggu+NfcuAlhEDSDODg+s9yFLqL IwZgTUsHVNIeSCiaLVg562lPGgl6royKDjgGTU2oU3gKaFRSUy3XL/cDC1IaMkCm 2iI43uP38wmBEypEJmxc/SVPI8gquxp/tlLNe4X3LK2p0ahNSHzubw2LSqgG+3zr 5xqPueq5COOdGdHozl3+I0nAEApstPGtjbfyfosakLQAcBkgrQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDLe/LcC51twoyAQWyrhsfgX9mHWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGEyOTI1MGQtZjU0YS0z NGU2LWE0NmUtYjIzODgyMzg1OTFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACeMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJoHSS6N2M3p1euMhqUSot74Bxa5oZNmUiwRrczE3foUKKvFzu+kaTFL 88cDyY3TEQf3o9kmMVqCC9Q953dpzWSj2+3THrYDwU1edgUm1gygXMpfLX5YZibD KEUKEj7hJE2z4/KrEmB9hwJAGA29A5zwV7ZidWAPQMqwDs7x61Gf7r543ovlBdDQ mSYRcwGxzk4pVtDBTnCPLKMrIxiTkg6F1YYPhR8Pvfm6G/+/jMZR/cmktRIrqt36 lDcf4MU/zf5d/DAFc4jA3MT0p39hibzn48FSpo1xGCZKSSZ1Nsvf5q9xWu93xM8u QzfsmQQKtWSXMNddQJYQGrFU6EHso/0= -----END CERTIFICATE-----Generated at Fri Sep 19 02:54:31 2025 by rpki-client