$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ace9dfa-595f-33fa-8f78-46f365887466.roa File: 2ace9dfa-595f-33fa-8f78-46f365887466.roa (raw, json) Hash identifier: YiznJfVXupSvJIp9j/L/nxPxtjT0u2W2Mp+smI2wsY4= Subject key identifier: 74:89:D9:F4:0B:E6:EA:C9:DB:B9:77:9F:B3:4A:B8:75:A1:49:C5:61 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B6797FA9DEF07F9321AB02680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ace9dfa-595f-33fa-8f78-46f365887466.roa Signing time: Sat 04 Oct 2025 01:00:33 +0000 ROA not before: Sat 04 Oct 2025 01:00:33 +0000 ROA not after: Fri 02 Jan 2026 02:00:33 +0000 asID: 44559 IP address blocks: 136.0.159.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:67:97:fa:9d:ef:07:f9:32:1a:b0:26:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 4 01:00:33 2025 GMT Not After : Jan 2 02:00:33 2026 GMT Subject: CN=816bf485-5888-4c89-9b57-139c03eef68e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:65:9a:53:0b:7e:f8:41:2f:15:19:95:1e:05: f5:f8:ae:9b:79:c7:e8:1b:c8:2c:73:55:5f:83:01: 10:12:cc:e8:94:dc:39:c2:b7:ce:db:f7:68:53:53: 5f:3a:ec:4f:68:8e:ad:ce:ee:64:2b:b3:9c:4d:12: 11:66:2b:77:88:98:de:f5:53:04:47:54:94:49:20: db:3f:35:99:9c:2c:61:ec:0d:0f:a1:8c:8e:64:af: d0:38:01:bb:4f:e1:42:84:67:12:d9:6a:80:ba:4b: 89:58:14:52:42:5a:53:46:b2:7a:fc:b0:a0:cb:fa: cd:a3:26:20:d6:23:c8:f5:36:3e:29:20:df:db:4b: 59:58:99:b7:a8:74:97:a8:55:9f:49:b3:4c:64:69: f9:53:11:6c:27:61:cd:1c:23:53:49:32:95:47:e1: 55:45:cd:7e:c3:2e:6a:23:33:20:84:d5:14:e5:bc: df:76:c5:39:c2:98:cf:b0:25:6f:72:a8:2a:80:94: b4:97:46:6c:8b:97:2a:38:5b:d2:d1:70:40:67:25: bc:8c:80:eb:7c:57:fa:88:34:bf:b9:ee:d8:d9:6f: 70:5f:90:11:2a:b5:15:98:c7:c6:43:c3:d5:5c:94: 8e:34:f0:e1:63:ae:85:2f:97:e9:65:da:38:74:05: 25:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:89:D9:F4:0B:E6:EA:C9:DB:B9:77:9F:B3:4A:B8:75:A1:49:C5:61 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2ace9dfa-595f-33fa-8f78-46f365887466.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.159.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:a8:1f:25:84:f4:65:55:61:d7:b1:72:2e:2f:5a:06:d0:c1: 15:2c:a9:1a:06:99:65:61:1c:f0:19:3f:ef:ab:dd:b7:56:e8: cd:66:34:18:ee:f6:be:f2:08:80:50:cd:d3:fa:29:65:8b:d5: 9b:67:f7:43:1a:4d:94:a5:5e:ed:e1:a8:bd:d9:ff:31:ad:5a: ff:1f:05:77:56:c0:df:9f:39:93:5b:df:21:f8:0d:35:4a:b5: 97:a0:5f:71:65:6e:ea:d1:c1:43:de:6e:e0:ff:46:73:a9:4e: 39:ad:ba:20:df:d7:00:5f:4e:b3:40:4d:7e:b7:e7:95:61:87: 32:55:82:a3:9c:e5:a7:81:05:84:cc:bd:3c:5c:b0:50:7b:43: 12:8e:ce:c7:15:2d:ff:0f:b6:92:05:ec:b3:ad:97:d0:1f:45: 72:53:36:62:45:f3:95:bc:fb:6e:d2:7b:4a:47:60:12:c1:26: a8:c0:27:2b:54:22:93:c1:1e:47:92:6b:ad:b0:6a:38:4b:66: 20:45:46:37:e4:9a:85:b0:79:e5:c8:74:09:5d:39:64:c6:56: 6a:9a:47:f8:cc:77:8f:3c:d7:81:4d:37:38:96:85:f6:bc:41: e7:7b:31:f7:6d:21:bf:8e:a5:5f:4e:c7:d5:ba:bb:43:b7:3d: 70:e5:ef:0e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtnl/qd7wf5MhqwJoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwNDAxMDAzM1oXDTI2MDEwMjAyMDAzM1owLzEtMCsGA1UEAxMk ODE2YmY0ODUtNTg4OC00Yzg5LTliNTctMTM5YzAzZWVmNjhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2WWaUwt++EEvFRmVHgX1+K6becfoG8gsc1Vf gwEQEszolNw5wrfO2/doU1NfOuxPaI6tzu5kK7OcTRIRZit3iJje9VMER1SUSSDb PzWZnCxh7A0PoYyOZK/QOAG7T+FChGcS2WqAukuJWBRSQlpTRrJ6/LCgy/rNoyYg 1iPI9TY+KSDf20tZWJm3qHSXqFWfSbNMZGn5UxFsJ2HNHCNTSTKVR+FVRc1+wy5q IzMghNUU5bzfdsU5wpjPsCVvcqgqgJS0l0Zsi5cqOFvS0XBAZyW8jIDrfFf6iDS/ ue7Y2W9wX5ARKrUVmMfGQ8PVXJSONPDhY66FL5fpZdo4dAUl+wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHSJ2fQL5urJ27l3n7NKuHWhScVhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmFjZTlkZmEtNTk1Zi0z M2ZhLThmNzgtNDZmMzY1ODg3NDY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACioHyWE9GVVYdexci4vWgbQwRUsqRoGmWVhHPAZP++r3bdW6M1mNBju 9r7yCIBQzdP6KWWL1Ztn90MaTZSlXu3hqL3Z/zGtWv8fBXdWwN+fOZNb3yH4DTVK tZegX3FlburRwUPebuD/RnOpTjmtuiDf1wBfTrNATX6355VhhzJVgqOc5aeBBYTM vTxcsFB7QxKOzscVLf8PtpIF7LOtl9AfRXJTNmJF85W8+27Se0pHYBLBJqjAJytU IpPBHkeSa62wajhLZiBFRjfkmoWweeXIdAldOWTGVmqaR/jMd48814FNNziWhfa8 Qed7MfdtIb+OpV9Ox9W6u0O3PXDl7w4= -----END CERTIFICATE-----Generated at Tue Nov 4 20:49:04 2025 by rpki-client