$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa File: 31cbf703-1c8e-324a-8b08-26fde1392750.roa (raw, json) Hash identifier: ykcAs13gtkgNrzqD9h0+gXLotS4xHxNlpgYgYdBQXVc= Subject key identifier: 99:AD:BD:44:35:9E:D8:8F:99:59:F5:70:41:27:2F:23:32:8B:6F:F0 Certificate issuer: /CN=3f36b13d-55d3-434f-95fc-91af494e0add Certificate serial: 010D0C9F4328584B6E91FA48A26DEE0BDDB40600 Authority key identifier: DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa Signing time: Mon 06 Oct 2025 13:00:41 +0000 ROA not before: Mon 06 Oct 2025 13:00:41 +0000 ROA not after: Sun 04 Jan 2026 14:00:41 +0000 asID: 32225 IP address blocks: 136.228.181.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 23 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:6e:91:fa:48:a2:6d:ee:0b:dd:b4:06:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3f36b13d-55d3-434f-95fc-91af494e0add Validity Not Before: Oct 6 13:00:41 2025 GMT Not After : Jan 4 14:00:41 2026 GMT Subject: CN=1bb3aac7-4496-4cea-9dd4-018b536be7c3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:4d:8c:04:28:50:cd:1c:cb:f5:5a:c8:ae:15: d8:b9:d0:97:08:7e:54:3f:bc:76:5e:a3:74:da:01: 37:b6:5b:35:60:2f:97:eb:05:17:b0:84:57:87:51: af:49:ea:ef:0a:ce:7a:17:4f:2b:96:cf:9b:b7:2e: 93:fa:d9:15:95:dd:38:1c:c5:31:0e:b2:e4:5f:8f: 62:0a:d5:69:1e:8b:ec:e0:83:e0:2f:82:dd:74:e2: a7:ae:25:01:96:24:28:5a:bc:55:f0:6a:2f:3e:7c: bd:6f:b1:74:e1:0e:a0:40:0a:f8:5c:06:1b:7f:3f: 30:30:a1:01:df:0c:c6:39:38:00:84:ab:ec:a0:1f: 03:eb:db:fb:79:5e:a2:ff:df:95:d6:38:0e:ca:04: a6:6f:1c:32:c7:f2:92:46:a5:03:b0:4d:6b:a4:31: c1:aa:c9:69:14:e9:b0:90:19:66:33:af:8a:ec:8c: 22:21:16:55:ea:86:de:8d:8a:b1:b5:c1:37:83:3b: 34:a9:22:7b:dc:47:fb:18:35:55:3d:02:b1:28:b9: 89:09:30:fa:8c:48:f8:f5:db:88:a3:6c:16:bd:43: b5:2d:34:e4:29:2d:e2:d6:f4:8f:fd:76:32:a5:e1: 53:74:46:9d:c8:4f:82:f3:e4:b8:7f:ef:2a:2e:20: d4:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:AD:BD:44:35:9E:D8:8F:99:59:F5:70:41:27:2F:23:32:8B:6F:F0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/31cbf703-1c8e-324a-8b08-26fde1392750.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add/3f36b13d-55d3-434f-95fc-91af494e0add.crl X509v3 Authority Key Identifier: keyid:DA:A5:40:61:2C:D5:5E:57:98:AF:02:4A:B8:7D:DA:12:A7:24:4A:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3f36b13d-55d3-434f-95fc-91af494e0add.cer sbgp-ipAddrBlock: critical IPv4: 136.228.181.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 05:f3:35:0d:b6:ac:02:4c:ad:6b:f3:cb:21:d9:63:7d:7f:a7: e6:d4:ec:25:c5:19:0f:cc:f7:9f:39:40:ea:09:96:b6:73:10: 20:19:3f:40:a5:17:72:25:8d:e8:ce:e2:72:1d:ea:f5:a2:9d: b6:98:32:36:d0:3f:c4:91:80:f4:18:54:32:1e:23:cc:f6:bd: ad:03:b9:c3:eb:b6:14:a1:57:7b:29:69:ac:b6:5c:6c:f1:93: 29:cf:9d:fe:a5:40:4e:ad:07:41:51:ab:eb:df:52:5a:6e:ed: 30:d3:02:49:1d:7a:3c:47:56:6d:75:bc:a3:ab:7c:3b:c9:f2: 5a:c8:fd:c9:ad:61:04:ca:6d:9f:b2:a2:3f:d8:39:88:a5:cc: e7:25:2a:71:14:8f:94:79:26:59:5b:63:79:9b:dd:98:c7:ac: 60:a4:58:14:ba:88:a9:10:57:4d:34:a3:f6:d6:6f:66:82:52: 54:ec:94:c7:dc:2a:59:5e:1f:6a:b1:93:0c:29:7c:2e:f8:69: 2a:e4:43:63:3e:c2:c4:f6:69:9d:90:fe:b5:75:ee:cb:28:1b: b9:f5:e5:1b:fa:28:c0:02:4e:27:96:0e:16:9c:66:c7:b0:af: f3:6d:2a:1e:24:45:86:e1:07:0c:1f:a1:7d:51:e0:51:f3:72: 7f:99:30:e7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtukfpIom3uC920BgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2YzNmIxM2QtNTVkMy00MzRmLTk1ZmMtOTFhZjQ5NGUw YWRkMB4XDTI1MTAwNjEzMDA0MVoXDTI2MDEwNDE0MDA0MVowLzEtMCsGA1UEAxMk MWJiM2FhYzctNDQ5Ni00Y2VhLTlkZDQtMDE4YjUzNmJlN2MzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyE2MBChQzRzL9VrIrhXYudCXCH5UP7x2XqN0 2gE3tls1YC+X6wUXsIRXh1GvServCs56F08rls+bty6T+tkVld04HMUxDrLkX49i CtVpHovs4IPgL4LddOKnriUBliQoWrxV8GovPny9b7F04Q6gQAr4XAYbfz8wMKEB 3wzGOTgAhKvsoB8D69v7eV6i/9+V1jgOygSmbxwyx/KSRqUDsE1rpDHBqslpFOmw kBlmM6+K7IwiIRZV6obejYqxtcE3gzs0qSJ73Ef7GDVVPQKxKLmJCTD6jEj49duI o2wWvUO1LTTkKS3i1vSP/XYypeFTdEadyE+C8+S4f+8qLiDU9wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmtvUQ1ntiPmVn1cEEnLyMyi2/wMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZjM2 YjEzZC01NWQzLTQzNGYtOTVmYy05MWFmNDk0ZTBhZGQvMzFjYmY3MDMtMWM4ZS0z MjRhLThiMDgtMjZmZGUxMzkyNzUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2YzNmIxM2QtNTVkMy00MzRmLTk1 ZmMtOTFhZjQ5NGUwYWRkLzNmMzZiMTNkLTU1ZDMtNDM0Zi05NWZjLTkxYWY0OTRl MGFkZC5jcmwwHwYDVR0jBBgwFoAU2qVAYSzVXleYrwJKuH3aEqckStowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZjM2YjEzZC01NWQzLTQzNGYtOTVmYy05MWFm NDk0ZTBhZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiOS1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAXzNQ22rAJMrWvzyyHZY31/p+bU7CXFGQ/M9585QOoJlrZzECAZP0Cl F3IljejO4nId6vWinbaYMjbQP8SRgPQYVDIeI8z2va0DucPrthShV3spaay2XGzx kynPnf6lQE6tB0FRq+vfUlpu7TDTAkkdejxHVm11vKOrfDvJ8lrI/cmtYQTKbZ+y oj/YOYilzOclKnEUj5R5JllbY3mb3ZjHrGCkWBS6iKkQV000o/bWb2aCUlTslMfc KlleH2qxkwwpfC74aSrkQ2M+wsT2aZ2Q/rV17ssoG7n15Rv6KMACTieWDhacZsew r/NtKh4kRYbhBwwfoX1R4FHzcn+ZMOc= -----END CERTIFICATE-----Generated at Tue Oct 21 14:54:35 2025 by rpki-client