$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59a6e055-3281-3148-9833-eb732b7024b1.roa File: 59a6e055-3281-3148-9833-eb732b7024b1.roa (raw, json) Hash identifier: EM473BymHuoSAJPdNxw5JKGhzeMc4uzjwrrLEWtHEyc= Subject key identifier: CA:07:07:0E:BC:24:14:E8:C1:9A:9C:23:91:7B:69:72:75:97:87:BD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B970D05955CB5FFA86BFC1F00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59a6e055-3281-3148-9833-eb732b7024b1.roa Signing time: Tue 21 Oct 2025 01:00:31 +0000 ROA not before: Tue 21 Oct 2025 01:00:31 +0000 ROA not after: Mon 19 Jan 2026 02:00:31 +0000 asID: 401152 IP address blocks: 136.0.66.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:97:0d:05:95:5c:b5:ff:a8:6b:fc:1f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 21 01:00:31 2025 GMT Not After : Jan 19 02:00:31 2026 GMT Subject: CN=58d46c01-10b0-4c05-bd4d-15e849bd9407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:ef:f5:94:69:7b:db:db:06:7e:12:79:e4:06: f0:a6:03:4b:55:db:a0:c5:a7:20:32:50:99:81:64: 53:2c:7b:f8:a9:1b:e2:76:f0:5c:ca:88:ea:15:1c: a2:fa:f3:7b:a4:59:3b:92:6b:5b:b7:6b:a4:b7:b1: 8d:70:e6:95:3e:2a:ea:f8:bf:72:21:83:8c:08:c1: 51:12:e7:29:49:47:97:2d:77:b8:ec:e1:33:71:a4: cb:f7:98:74:06:2e:cf:81:aa:c7:5d:48:8b:8b:65: 47:b4:ac:31:98:9c:b3:21:a5:85:92:a6:19:cc:22: 1c:c2:5a:3e:75:cf:35:7f:4a:58:a9:70:ba:ae:6b: 06:af:12:ee:20:5c:a1:8c:bf:0f:3e:81:c2:e4:d4: b7:45:38:13:9c:f9:af:94:f1:76:ef:c4:34:86:d2: 30:eb:d9:9f:10:df:81:43:21:97:06:ec:ef:ac:24: 22:25:fa:86:43:b7:9e:7c:6b:0a:fc:cd:60:a9:19: 2b:74:69:a6:af:c9:c8:84:4c:71:32:a4:05:79:65: 71:55:13:2f:18:fd:1a:1b:27:d6:f4:ba:05:86:4f: 5a:6f:2c:9f:39:cb:8d:7e:c5:db:e8:17:55:94:6e: 92:24:f2:c3:09:54:3c:12:0e:04:a5:b0:08:db:c3: 39:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:07:07:0E:BC:24:14:E8:C1:9A:9C:23:91:7B:69:72:75:97:87:BD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/59a6e055-3281-3148-9833-eb732b7024b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.66.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:3a:cb:53:f7:a4:50:12:64:93:d6:c0:96:f4:65:90:14:ef: f7:1b:8d:df:9e:8a:f3:e1:fd:5f:89:cb:8a:4d:ac:dd:62:51: 88:ee:eb:e7:85:67:c3:ee:1d:bc:bd:27:48:7d:92:0c:a6:1c: ad:cb:93:2c:3b:49:ee:78:61:b9:d3:e3:ed:9b:d1:60:3f:76: f1:6c:9a:a9:6d:f8:a1:2a:b8:ce:86:4f:70:c1:26:db:4f:59: 9d:e2:18:c7:f6:d6:5d:1a:03:27:a2:28:b0:c6:51:68:a0:f0: 62:08:da:45:42:c3:bc:68:ae:c3:cd:9a:bb:ed:d0:db:1f:d8: db:88:27:f2:29:ad:df:e0:b1:2f:a6:ea:4e:32:25:5e:f8:8e: ce:93:3b:aa:3c:be:c3:ae:75:ed:b0:17:f4:05:78:a4:5d:3a: 5f:44:7f:74:ff:ef:3d:e1:23:c6:8a:a0:4d:87:d0:51:43:65: 77:f7:10:95:07:45:c1:05:9d:55:e1:66:49:f6:d3:4e:c0:41: ca:42:4a:d9:4f:52:f2:13:fc:f2:2a:bb:8c:6d:b0:84:7e:a0: a9:a7:71:7a:75:45:30:d9:19:be:9e:c6:38:4b:d1:f5:7b:97: dd:bc:4a:bf:32:06:12:a2:ee:78:26:4c:2f:b7:2f:f2:12:07: 8f:bf:cc:3e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuXDQWVXLX/qGv8HwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAyMTAxMDAzMVoXDTI2MDExOTAyMDAzMVowLzEtMCsGA1UEAxMk NThkNDZjMDEtMTBiMC00YzA1LWJkNGQtMTVlODQ5YmQ5NDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO/1lGl729sGfhJ55AbwpgNLVdugxacgMlCZ gWRTLHv4qRvidvBcyojqFRyi+vN7pFk7kmtbt2ukt7GNcOaVPirq+L9yIYOMCMFR EucpSUeXLXe47OEzcaTL95h0Bi7PgarHXUiLi2VHtKwxmJyzIaWFkqYZzCIcwlo+ dc81f0pYqXC6rmsGrxLuIFyhjL8PPoHC5NS3RTgTnPmvlPF278Q0htIw69mfEN+B QyGXBuzvrCQiJfqGQ7eefGsK/M1gqRkrdGmmr8nIhExxMqQFeWVxVRMvGP0aGyfW 9LoFhk9abyyfOcuNfsXb6BdVlG6SJPLDCVQ8Eg4EpbAI28M5UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMoHBw68JBTowZqcI5F7aXJ1l4e9MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTlhNmUwNTUtMzI4MS0z MTQ4LTk4MzMtZWI3MzJiNzAyNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABCMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFo6y1P3pFASZJPWwJb0ZZAU7/cbjd+eivPh/V+Jy4pNrN1iUYju6+eF Z8PuHby9J0h9kgymHK3Lkyw7Se54YbnT4+2b0WA/dvFsmqlt+KEquM6GT3DBJttP WZ3iGMf21l0aAyeiKLDGUWig8GII2kVCw7xorsPNmrvt0Nsf2NuIJ/Iprd/gsS+m 6k4yJV74js6TO6o8vsOude2wF/QFeKRdOl9Ef3T/7z3hI8aKoE2H0FFDZXf3EJUH RcEFnVXhZkn2007AQcpCStlPUvIT/PIqu4xtsIR+oKmncXp1RTDZGb6exjhL0fV7 l928Sr8yBhKi7ngmTC+3L/ISB4+/zD4= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:05 2025 by rpki-client