$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fc5b82c-67e6-3c25-9ec1-b0b44ad31595.roa File: 4fc5b82c-67e6-3c25-9ec1-b0b44ad31595.roa (raw, json) Hash identifier: p/Xj7YXezx6sDmfojLkii4XhmaT5o90ypDHtaGUqr78= Subject key identifier: 58:F6:BB:16:3B:CF:BB:F0:DD:81:76:F3:8F:E9:67:E6:95:E5:9E:FB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B98724ABC53FF295769E0F700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fc5b82c-67e6-3c25-9ec1-b0b44ad31595.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 136.0.143.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:bc:53:ff:29:57:69:e0:f7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=6f03b041-8c28-4447-afc1-56390c9edc6f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:8e:30:40:0f:62:ac:00:37:cd:c0:d0:f3:b3: 41:44:d5:4a:8e:3a:ad:5d:46:64:6b:75:f8:0f:c0: 4b:b0:a3:17:4d:0a:4a:9b:d0:7a:74:2e:7a:18:24: f6:00:f6:1a:84:62:83:40:ef:bd:55:cf:85:c5:85: 5c:26:3f:43:04:ed:5e:f2:b6:7a:7e:15:a9:70:36: 4a:8a:c2:c4:3c:ba:ee:5f:60:68:2c:f0:4e:c7:45: f9:ea:c6:d6:2e:8d:7a:1b:6a:0d:2d:d8:d4:56:49: 74:e5:7e:a7:e4:2d:81:6f:c0:2e:5c:e2:04:8a:db: 90:6c:95:ef:1b:4e:24:86:a5:b8:3d:c1:fc:87:de: 3a:a7:7f:b6:07:c7:ee:ed:8f:42:ac:39:f0:9e:5f: 78:37:4e:58:4e:e3:e3:49:95:59:c1:f8:d2:dc:a2: 4a:66:ce:ed:44:94:46:7f:c9:44:01:d6:b0:ac:c4: 74:08:ee:ef:48:b0:61:3b:72:9a:fb:b2:82:cb:46: 74:8e:b5:1e:24:1b:66:49:5e:ed:67:bb:0a:42:fe: 94:79:d6:d5:f1:76:15:96:ec:36:03:ab:61:33:76: 50:ae:73:e6:d3:57:7d:a4:b8:cc:2b:df:f4:9d:fd: b1:13:30:e8:f5:b2:aa:18:9d:e3:d4:e1:c1:3e:71: 9e:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:F6:BB:16:3B:CF:BB:F0:DD:81:76:F3:8F:E9:67:E6:95:E5:9E:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fc5b82c-67e6-3c25-9ec1-b0b44ad31595.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.143.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4d:61:db:94:66:5d:26:c9:e5:e0:55:52:2f:d4:48:ab:c7:d1: 86:f3:92:61:4f:eb:14:5d:25:0b:1a:6d:51:4b:e6:3a:89:da: 0f:eb:27:b7:a8:29:74:4b:1b:79:69:ea:ef:81:11:01:7a:cc: 8e:42:ac:58:cb:04:71:29:1d:b6:92:56:1d:48:46:49:1e:9d: 64:97:08:40:59:d7:ab:0b:20:10:11:e4:9f:76:eb:09:30:5b: 99:4e:9a:fa:ce:08:fb:6e:94:c5:5f:cc:70:0f:71:29:81:e7: de:98:15:36:a1:2e:d1:01:3c:16:f9:15:b6:3c:27:4b:12:3f: e5:29:e6:1c:b8:98:d3:8d:f5:4e:ff:46:00:fe:6b:f3:36:7c: 68:7c:97:a8:92:87:e9:12:0a:50:1e:d5:f0:e6:58:8f:bc:e7: ac:cc:27:3d:30:8d:aa:0b:ce:c5:b4:66:bf:64:8d:77:67:b3: 77:19:6c:d0:da:12:75:66:11:75:ca:e6:27:a9:2c:58:a2:eb: 0a:ff:b5:2f:fb:42:6b:2b:e3:cf:85:9c:ee:90:5d:1f:3d:d2: fe:d8:d8:df:f6:d5:96:cf:91:8f:8b:df:3f:3c:77:96:07:41: 61:ea:3c:6c:12:80:aa:97:8c:23:8e:91:34:ef:f9:68:f5:24: 48:c5:ef:6f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckq8U/8pV2ng9wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk NmYwM2IwNDEtOGMyOC00NDQ3LWFmYzEtNTYzOTBjOWVkYzZmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqo4wQA9irAA3zcDQ87NBRNVKjjqtXUZka3X4 D8BLsKMXTQpKm9B6dC56GCT2APYahGKDQO+9Vc+FxYVcJj9DBO1e8rZ6fhWpcDZK isLEPLruX2BoLPBOx0X56sbWLo16G2oNLdjUVkl05X6n5C2Bb8AuXOIEituQbJXv G04khqW4PcH8h946p3+2B8fu7Y9CrDnwnl94N05YTuPjSZVZwfjS3KJKZs7tRJRG f8lEAdawrMR0CO7vSLBhO3Ka+7KCy0Z0jrUeJBtmSV7tZ7sKQv6UedbV8XYVluw2 A6thM3ZQrnPm01d9pLjMK9/0nf2xEzDo9bKqGJ3j1OHBPnGePQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFj2uxY7z7vw3YF284/pZ+aV5Z77MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGZjNWI4MmMtNjdlNi0z YzI1LTllYzEtYjBiNDRhZDMxNTk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE1h25RmXSbJ5eBVUi/USKvH0YbzkmFP6xRdJQsabVFL5jqJ2g/rJ7eo KXRLG3lp6u+BEQF6zI5CrFjLBHEpHbaSVh1IRkkenWSXCEBZ16sLIBAR5J926wkw W5lOmvrOCPtulMVfzHAPcSmB596YFTahLtEBPBb5FbY8J0sSP+Up5hy4mNON9U7/ RgD+a/M2fGh8l6iSh+kSClAe1fDmWI+856zMJz0wjaoLzsW0Zr9kjXdns3cZbNDa EnVmEXXK5iepLFii6wr/tS/7Qmsr48+FnO6QXR890v7Y2N/21ZbPkY+L3z88d5YH QWHqPGwSgKqXjCOOkTTv+Wj1JEjF728= -----END CERTIFICATE-----Generated at Wed Nov 5 08:59:58 2025 by rpki-client