$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35ec803c-c49a-392a-a558-7cd2ceaf6ba1.roa File: 35ec803c-c49a-392a-a558-7cd2ceaf6ba1.roa (raw, json) Hash identifier: /CHi7OfsyRsxgWC3TpdxbGmIBtWnDTmVJlklroy1Hdk= Subject key identifier: 13:BD:8E:D7:25:19:8C:51:CB:A2:25:AD:A9:CC:31:E3:9D:B1:70:FF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BA7CD19590E48EDAF44FB8480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35ec803c-c49a-392a-a558-7cd2ceaf6ba1.roa Signing time: Mon 27 Oct 2025 01:00:31 +0000 ROA not before: Mon 27 Oct 2025 01:00:31 +0000 ROA not after: Sun 25 Jan 2026 02:00:31 +0000 asID: 15083 IP address blocks: 136.0.128.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a7:cd:19:59:0e:48:ed:af:44:fb:84:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 27 01:00:31 2025 GMT Not After : Jan 25 02:00:31 2026 GMT Subject: CN=bd1c17d1-b38a-428f-aaef-541277600fb9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:c0:de:59:f1:4b:82:99:c3:9b:ea:47:84:90: 59:32:d1:fc:38:ba:16:64:fc:25:95:ba:ac:a1:83: 77:d4:89:9b:44:b3:64:fb:57:10:a5:3a:89:c5:d6: b8:24:01:45:dc:6e:c9:5b:cf:23:98:ee:42:68:68: c4:d0:f0:b5:aa:35:7b:f9:81:23:81:13:dc:1a:0f: 3a:69:49:02:cc:18:68:c7:0a:51:e1:45:3e:2e:4a: 53:a9:e3:ae:fe:99:78:d4:0b:7c:03:f4:c8:94:dd: 04:a0:a7:89:07:96:f4:94:52:30:26:86:45:58:e2: a8:98:bf:71:db:c0:6d:e2:e1:3a:02:58:c9:e1:39: dd:3a:df:fb:b7:60:43:64:bf:62:2d:32:d8:54:af: 11:c4:19:51:00:b3:d3:ba:f0:b0:76:5d:a9:78:46: 32:04:ed:81:c0:b4:56:de:ea:b7:b4:db:64:04:71: 5f:d3:ea:55:4e:5b:7f:ef:72:77:3e:87:91:63:be: df:12:6e:9e:e4:cb:f8:51:21:37:88:35:0a:2f:1c: b9:9f:bb:3a:d5:40:1a:49:75:26:2e:01:4b:44:68: d3:ca:e9:64:52:f7:25:af:31:11:2e:b0:3e:d6:5e: e7:ea:66:57:25:f6:28:70:da:65:1e:c7:56:73:e3: 96:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:BD:8E:D7:25:19:8C:51:CB:A2:25:AD:A9:CC:31:E3:9D:B1:70:FF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/35ec803c-c49a-392a-a558-7cd2ceaf6ba1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.128.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 40:2d:9b:ff:11:62:e6:75:12:e2:58:cb:03:bb:95:41:bd:f6: c7:68:08:18:7b:f7:4a:e1:bb:95:83:54:b0:f6:b7:58:39:4b: 19:fc:7e:8f:8e:ad:28:c0:65:ee:f0:22:aa:49:9e:e3:34:b7: 23:7a:4b:10:fd:73:ca:ea:88:15:eb:88:bd:ae:58:92:f3:c2: da:e8:2d:3c:69:a1:4e:e9:30:41:73:d1:7d:dc:37:55:33:6f: 3e:73:41:37:aa:c7:26:73:4c:a4:df:7d:ca:fc:a4:4c:da:18: 7a:d8:25:d5:ca:8c:ae:86:b6:f0:34:ad:5c:36:49:ff:d5:8d: a3:1f:16:fb:60:79:35:a8:10:50:bc:fe:1a:ea:25:66:6e:68: 5b:8b:0c:f2:a6:9a:47:34:29:24:12:ac:dc:01:c1:7e:f9:93: 42:77:ab:26:62:7d:94:e7:c2:43:35:b8:a4:6b:f2:e4:3e:57: be:23:bc:c3:60:82:d1:f2:0d:de:76:d4:49:7a:22:84:29:1c: 65:5b:c8:c3:da:03:f8:51:6c:4d:4a:70:3a:bd:07:4d:79:ff: cd:e8:12:9f:d0:96:cf:a1:bf:b2:3c:78:e6:b1:b0:54:25:24: 4e:50:cb:c6:81:df:e2:1b:fe:a8:fc:0c:72:b7:10:13:0d:e7: 62:71:22:39 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEunzRlZDkjtr0T7hIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyNzAxMDAzMVoXDTI2MDEyNTAyMDAzMVowLzEtMCsGA1UEAxMk YmQxYzE3ZDEtYjM4YS00MjhmLWFhZWYtNTQxMjc3NjAwZmI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4cDeWfFLgpnDm+pHhJBZMtH8OLoWZPwllbqs oYN31ImbRLNk+1cQpTqJxda4JAFF3G7JW88jmO5CaGjE0PC1qjV7+YEjgRPcGg86 aUkCzBhoxwpR4UU+LkpTqeOu/pl41At8A/TIlN0EoKeJB5b0lFIwJoZFWOKomL9x 28Bt4uE6AljJ4TndOt/7t2BDZL9iLTLYVK8RxBlRALPTuvCwdl2peEYyBO2BwLRW 3uq3tNtkBHFf0+pVTlt/73J3PoeRY77fEm6e5Mv4USE3iDUKLxy5n7s61UAaSXUm LgFLRGjTyulkUvclrzERLrA+1l7n6mZXJfYocNplHsdWc+OWGwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBO9jtclGYxRy6IlranMMeOdsXD/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzVlYzgwM2MtYzQ5YS0z OTJhLWE1NTgtN2NkMmNlYWY2YmExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiACAMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEAtm/8RYuZ1EuJYywO7lUG99sdoCBh790rhu5WDVLD2t1g5Sxn8fo+O rSjAZe7wIqpJnuM0tyN6SxD9c8rqiBXriL2uWJLzwtroLTxpoU7pMEFz0X3cN1Uz bz5zQTeqxyZzTKTffcr8pEzaGHrYJdXKjK6GtvA0rVw2Sf/VjaMfFvtgeTWoEFC8 /hrqJWZuaFuLDPKmmkc0KSQSrNwBwX75k0J3qyZifZTnwkM1uKRr8uQ+V74jvMNg gtHyDd521El6IoQpHGVbyMPaA/hRbE1KcDq9B015/83oEp/Qls+hv7I8eOaxsFQl JE5Qy8aB3+Ib/qj8DHK3EBMN52JxIjk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:11:25 2025 by rpki-client