$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57e8cec5-6d20-3b67-978a-bab4a1ef9b36.roa File: 57e8cec5-6d20-3b67-978a-bab4a1ef9b36.roa (raw, json) Hash identifier: FnUTotEd5NvrWw5jQb/ojfJrT3J/EiLIBiRcEvVZpEU= Subject key identifier: 64:58:A3:87:23:70:18:08:D6:93:92:C9:2E:14:90:B1:87:79:85:5F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B98724A8366C627C82C2DB200 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57e8cec5-6d20-3b67-978a-bab4a1ef9b36.roa Signing time: Tue 21 Oct 2025 13:00:39 +0000 ROA not before: Tue 21 Oct 2025 13:00:39 +0000 ROA not after: Mon 19 Jan 2026 14:00:39 +0000 asID: 7385 IP address blocks: 136.0.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:98:72:4a:83:66:c6:27:c8:2c:2d:b2:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 13:00:39 2025 GMT Not After : Jan 19 14:00:39 2026 GMT Subject: CN=384ea164-9a5f-4bb9-b870-ec1e8e8d6421 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:bf:62:86:e9:83:fa:1f:f3:fd:31:c0:47:39: 31:1f:49:96:56:98:0a:be:1c:22:6f:91:6c:98:8c: 54:c2:db:2d:1b:61:7d:42:7b:02:aa:d0:a6:ec:1e: fb:81:75:33:89:aa:7f:89:fb:75:f3:6c:63:dc:f7: ce:bb:69:98:70:e4:6c:06:92:09:1d:04:c7:c3:9a: b2:d5:be:b3:70:64:54:d8:3a:99:96:0c:61:2a:2b: b1:c3:19:c7:24:6b:d0:98:eb:0f:66:56:6b:c3:58: 5e:df:ff:fb:d0:98:ed:04:3b:72:91:c9:42:03:30: 94:54:49:8c:f4:06:99:38:1d:9c:3c:b7:d8:3e:42: 11:48:3c:00:75:53:85:97:90:5a:50:fe:fb:9c:53: 12:d8:b0:b5:01:3a:31:3b:60:5d:83:17:64:ad:35: 05:a1:e7:8a:48:b5:91:76:4d:19:74:7e:ca:3d:58: bd:84:2b:b9:37:1f:35:11:a7:f7:17:f7:79:51:c8: 0d:fc:60:1d:2c:c9:06:5a:43:5e:1f:46:07:be:01: 15:42:5e:cc:6f:f4:7f:a7:c6:8c:d8:77:14:cf:81: c3:81:98:b9:5b:0b:ae:fa:9c:e0:af:8a:d5:9e:bb: 27:de:6a:11:62:36:d2:51:0c:db:89:b3:70:28:7a: fa:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:58:A3:87:23:70:18:08:D6:93:92:C9:2E:14:90:B1:87:79:85:5F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/57e8cec5-6d20-3b67-978a-bab4a1ef9b36.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:96:42:69:f6:b6:56:7c:ca:1e:26:95:f9:4d:0f:3c:aa:2a: a6:d9:d1:e9:d5:bb:fb:bf:2d:77:73:69:f7:d8:c7:af:06:72: 89:a7:1e:ee:4c:7b:31:14:e7:78:3b:22:c8:f2:ae:95:5e:f9: 31:85:7d:20:4e:ee:69:45:2e:08:c1:7a:42:03:0f:af:80:6a: 87:96:e7:ac:9a:18:fd:d0:b9:03:7e:1b:84:c9:d6:57:f9:b0: 42:2d:66:1f:ae:a3:49:a4:a8:ad:2d:12:a5:8c:23:d7:ee:dd: 47:d5:6a:31:91:ab:0d:1a:b8:bd:d6:e6:e4:0e:37:3c:bd:c1: 2f:c1:77:ed:13:2f:2e:0f:a9:e1:75:a2:ea:c6:d0:c1:4d:0a: 7b:b7:b6:94:ce:94:4e:91:76:e6:d4:bf:3c:62:97:5c:50:f4: ba:b1:1c:41:b0:74:de:f0:7c:0c:f8:1e:dd:a0:5d:f6:ff:15: 24:76:c4:8f:76:d1:70:9f:72:8b:4a:9b:8c:10:c5:75:cd:20: 7a:8a:09:c4:37:2e:f2:53:03:89:66:f3:44:84:2d:0f:9e:a8: 7d:38:70:21:7a:0f:00:4a:1e:f3:63:29:09:47:e2:5c:9e:fb: 65:69:ba:70:68:27:d6:f5:ab:7c:77:6d:d3:14:62:b3:64:98: c2:f6:b0:1b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuYckqDZsYnyCwtsgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTEzMDAzOVoXDTI2MDExOTE0MDAzOVowLzEtMCsGA1UEAxMk Mzg0ZWExNjQtOWE1Zi00YmI5LWI4NzAtZWMxZThlOGQ2NDIxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy79ihumD+h/z/THARzkxH0mWVpgKvhwib5Fs mIxUwtstG2F9QnsCqtCm7B77gXUziap/ift182xj3PfOu2mYcORsBpIJHQTHw5qy 1b6zcGRU2DqZlgxhKiuxwxnHJGvQmOsPZlZrw1he3//70JjtBDtykclCAzCUVEmM 9AaZOB2cPLfYPkIRSDwAdVOFl5BaUP77nFMS2LC1AToxO2BdgxdkrTUFoeeKSLWR dk0ZdH7KPVi9hCu5Nx81Eaf3F/d5UcgN/GAdLMkGWkNeH0YHvgEVQl7Mb/R/p8aM 2HcUz4HDgZi5Wwuu+pzgr4rVnrsn3moRYjbSUQzbibNwKHr68QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGRYo4cjcBgI1pOSyS4UkLGHeYVfMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTdlOGNlYzUtNmQyMC0z YjY3LTk3OGEtYmFiNGExZWY5YjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIWWQmn2tlZ8yh4mlflNDzyqKqbZ0enVu/u/LXdzaffYx68GcomnHu5M ezEU53g7IsjyrpVe+TGFfSBO7mlFLgjBekIDD6+AaoeW56yaGP3QuQN+G4TJ1lf5 sEItZh+uo0mkqK0tEqWMI9fu3UfVajGRqw0auL3W5uQONzy9wS/Bd+0TLy4PqeF1 ourG0MFNCnu3tpTOlE6RdubUvzxil1xQ9LqxHEGwdN7wfAz4Ht2gXfb/FSR2xI92 0XCfcotKm4wQxXXNIHqKCcQ3LvJTA4lm80SELQ+eqH04cCF6DwBKHvNjKQlH4lye +2VpunBoJ9b1q3x3bdMUYrNkmML2sBs= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:14 2025 by rpki-client