$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa File: 20c76ec3-5160-3b90-bb10-6884b085ce8e.roa (raw, json) Hash identifier: 0x3sQGUo55k5oSpC99/VQINWmcUHsg/I1YHY1nMfebg= Subject key identifier: E9:61:3B:48:74:97:8B:CB:1C:AA:E2:26:ED:92:A5:17:3C:0B:78:82 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BBB759C536BB7569A70B05500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa Signing time: Mon 03 Nov 2025 02:00:31 +0000 ROA not before: Mon 03 Nov 2025 02:00:31 +0000 ROA not after: Sun 01 Feb 2026 02:00:31 +0000 asID: 40676 IP address blocks: 136.0.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:bb:75:9c:53:6b:b7:56:9a:70:b0:55:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 3 02:00:31 2025 GMT Not After : Feb 1 02:00:31 2026 GMT Subject: CN=a87fcfbc-117c-4744-af3d-e9ec7212931b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:c6:ef:3b:d7:93:6b:72:7c:41:ee:c4:73:55: e5:23:ea:e4:f2:ef:bf:7e:3e:78:43:55:c5:76:18: 46:7f:a5:5b:0f:da:45:1a:26:12:dd:98:56:be:d1: c7:c8:51:e6:2e:d8:0b:91:b3:d4:dd:e7:05:04:dd: a1:b4:fe:a2:72:ba:bc:07:25:8a:5a:c3:e7:ef:b4: 96:49:94:1f:b7:6f:c5:a7:6b:1c:1c:df:5c:ce:06: 9e:93:7b:66:3f:04:03:39:95:b1:b0:13:58:b0:32: 27:68:f4:80:66:d6:f5:03:48:c4:5c:1b:4b:61:31: fb:b2:6f:e1:8e:17:b9:54:44:da:d3:8a:c0:8a:2a: 06:c4:bc:fd:de:14:ca:2e:b0:81:b6:5a:8c:58:b1: aa:2b:50:7c:cb:d0:80:ee:ae:76:7b:e9:b4:61:bb: e4:7c:99:0e:9b:13:e7:3e:81:6a:29:80:75:3c:b1: 9b:a3:9e:e3:8b:d8:16:b0:4f:62:c9:4e:8c:df:01: 30:17:fd:c2:23:e5:a9:ee:69:60:94:b8:2e:51:dc: a2:88:c5:62:f3:76:63:b4:c5:48:98:a1:73:a1:cf: 77:39:4a:46:70:bf:11:17:f7:9c:6b:53:f0:84:5f: 65:65:d3:89:23:a3:66:09:17:4f:bf:a7:d3:2f:34: a9:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:61:3B:48:74:97:8B:CB:1C:AA:E2:26:ED:92:A5:17:3C:0B:78:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 26:43:66:0c:28:54:09:62:8e:a6:da:58:f4:cf:84:36:b0:9d: 76:8d:95:02:53:bb:9a:51:29:84:28:03:53:58:56:e8:01:0f: 7a:56:10:df:40:a7:2b:d7:e7:75:9b:1e:7d:3a:eb:d8:92:09: 04:dc:42:7d:22:0c:ef:6c:17:01:d8:0b:65:46:34:48:91:73: 8e:75:da:d9:8f:fd:a9:fe:7c:f9:36:30:fd:70:82:fc:f3:8e: 84:8d:17:53:30:36:58:e8:3b:16:9e:fd:c2:ae:10:08:dc:b2: 51:b5:d1:4f:ca:8d:5b:1a:66:1e:9c:f2:0b:0c:4c:e5:5e:2a: 52:2d:ad:81:05:11:4e:64:76:c8:c4:bf:f6:f5:95:07:f8:b7: 92:cc:43:16:b5:30:e5:d0:62:19:2c:38:fb:ef:f8:3e:bd:92: 79:ce:b4:76:24:2f:9f:8f:9d:84:f7:52:a7:68:e5:21:da:3d: c9:f1:8d:f2:93:58:ce:20:76:69:c3:e4:de:9e:a5:78:0a:ce: 61:94:eb:47:9a:7d:2c:d6:d4:77:64:94:4d:76:dc:33:46:18: 90:27:79:71:ba:2f:4d:57:a4:46:88:69:8e:f3:c5:6c:8f:af: a1:49:df:b6:1b:17:7e:b7:d4:bf:bd:49:7a:60:37:90:09:81: fa:45:0b:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu7dZxTa7dWmnCwVQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMzAyMDAzMVoXDTI2MDIwMTAyMDAzMVowLzEtMCsGA1UEAxMk YTg3ZmNmYmMtMTE3Yy00NzQ0LWFmM2QtZTllYzcyMTI5MzFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMbvO9eTa3J8Qe7Ec1XlI+rk8u+/fj54Q1XF dhhGf6VbD9pFGiYS3ZhWvtHHyFHmLtgLkbPU3ecFBN2htP6icrq8ByWKWsPn77SW SZQft2/Fp2scHN9czgaek3tmPwQDOZWxsBNYsDInaPSAZtb1A0jEXBtLYTH7sm/h jhe5VETa04rAiioGxLz93hTKLrCBtlqMWLGqK1B8y9CA7q52e+m0YbvkfJkOmxPn PoFqKYB1PLGbo57ji9gWsE9iyU6M3wEwF/3CI+Wp7mlglLguUdyiiMVi83ZjtMVI mKFzoc93OUpGcL8RF/eca1PwhF9lZdOJI6NmCRdPv6fTLzSpVwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOlhO0h0l4vLHKriJu2SpRc8C3iCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjBjNzZlYzMtNTE2MC0z YjkwLWJiMTAtNjg4NGIwODVjZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACZDZgwoVAlijqbaWPTPhDawnXaNlQJTu5pRKYQoA1NYVugBD3pWEN9A pyvX53WbHn0669iSCQTcQn0iDO9sFwHYC2VGNEiRc4512tmP/an+fPk2MP1wgvzz joSNF1MwNljoOxae/cKuEAjcslG10U/KjVsaZh6c8gsMTOVeKlItrYEFEU5kdsjE v/b1lQf4t5LMQxa1MOXQYhksOPvv+D69knnOtHYkL5+PnYT3Uqdo5SHaPcnxjfKT WM4gdmnD5N6epXgKzmGU60eafSzW1HdklE123DNGGJAneXG6L01XpEaIaY7zxWyP r6FJ37YbF3631L+9SXpgN5AJgfpFC8o= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:27 2025 by rpki-client