$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abd32735-4b0a-377f-8b66-33ca7a54738a.roa File: abd32735-4b0a-377f-8b66-33ca7a54738a.roa (raw, json) Hash identifier: 8R/O1Z0QFGN/cpwCVy6SUW1eVzL8UNPHPIlCUtgHTzU= Subject key identifier: 9D:6D:11:09:EF:45:76:C7:4F:BC:A4:A6:44:E3:F8:6B:D3:92:0E:02 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B9A8C8DDB27A567DF980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abd32735-4b0a-377f-8b66-33ca7a54738a.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 136.0.196.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b9:a8:c8:dd:b2:7a:56:7d:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=bfbc9fb4-b46e-4a76-b45e-8c34ae98918d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:77:ee:97:c1:87:d6:0b:2a:50:27:46:35:c6: c4:3d:a0:22:b4:0c:31:9e:88:cd:cc:46:ed:d6:d9: 18:2b:04:c5:e8:fb:fc:52:48:63:d8:dd:85:7c:23: da:87:cb:9b:49:3a:cd:d8:3b:0f:38:d3:29:c9:00: ab:01:1f:41:78:c9:e1:4c:2b:3c:04:0b:f6:aa:d5: 34:fb:91:75:9f:14:bb:1a:75:6a:c9:11:5b:f0:27: ea:51:fd:2c:be:4b:ba:eb:f1:ba:2f:ed:eb:0e:1c: 67:8d:53:40:6d:02:af:2e:75:bd:4c:2d:8b:6f:a8: 7f:dc:e7:d2:16:8b:5b:b5:8d:b6:3e:78:0c:3d:dc: cf:c9:91:8a:53:be:eb:44:63:57:90:2a:7b:a9:7b: 40:a9:89:77:d5:c2:5e:86:04:ff:70:77:84:c2:c0: 50:44:9a:b6:2a:78:1d:55:65:19:0f:78:a7:ce:80: 57:90:89:06:e2:f1:42:e4:6d:65:0e:78:af:8f:11: 47:4b:b7:de:ce:9d:79:4b:ab:d7:f1:80:34:3d:86: 76:b1:da:5f:81:1a:7a:a3:98:9a:73:bb:1d:da:ec: bb:63:1f:d4:6a:ec:f7:2e:a8:70:f5:51:65:c4:c7: f2:ef:1f:20:2e:03:ae:be:b7:4d:65:9e:62:15:eb: 96:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:6D:11:09:EF:45:76:C7:4F:BC:A4:A6:44:E3:F8:6B:D3:92:0E:02 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/abd32735-4b0a-377f-8b66-33ca7a54738a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.196.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9a:bd:e1:13:1d:f1:cb:ea:be:6f:0f:f4:f4:d2:56:c1:82:c3: 46:8d:69:0d:52:13:6b:08:4f:5f:f5:f0:0a:73:0d:62:80:31: f4:e5:7d:37:7c:4d:83:63:6c:4c:94:26:6e:fb:84:2a:8e:ad: 97:8b:59:d0:1c:7e:8d:23:39:48:88:00:fb:2b:7f:59:9a:60: 53:03:59:be:12:09:b3:b4:6e:aa:7d:26:9b:88:55:d9:4a:d2: 6a:df:ec:9a:4e:10:00:71:e1:1b:4c:45:80:4f:6f:f2:d7:ae: d6:c8:00:e1:23:df:1e:a2:7f:67:90:02:7f:52:f2:3a:5c:d4: 11:49:5d:3e:9b:c1:4f:3c:e0:b0:26:b2:d2:5f:a4:ae:16:48: 07:01:d2:62:5f:86:a0:54:6a:c0:d6:50:82:a8:fe:b8:9b:0e: f2:13:3c:c0:76:1b:b4:8e:97:7c:17:c5:92:0a:41:71:ac:18: 99:50:8b:8f:68:c0:c4:6e:d9:44:fd:1f:46:f5:17:08:bf:40: dc:3d:3a:d2:a5:d4:35:56:c3:83:82:1b:fb:4d:ee:c4:9f:41: 02:70:bc:01:ce:ef:0e:e3:1d:e0:94:0d:d3:85:ce:77:97:17: 9b:bf:7a:75:0d:4d:1f:35:36:40:88:2b:15:14:4f:18:42:12: 96:cd:ed:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7moyN2yelZ9+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk YmZiYzlmYjQtYjQ2ZS00YTc2LWI0NWUtOGMzNGFlOTg5MThkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnful8GH1gsqUCdGNcbEPaAitAwxnojNzEbt 1tkYKwTF6Pv8Ukhj2N2FfCPah8ubSTrN2DsPONMpyQCrAR9BeMnhTCs8BAv2qtU0 +5F1nxS7GnVqyRFb8CfqUf0svku66/G6L+3rDhxnjVNAbQKvLnW9TC2Lb6h/3OfS FotbtY22PngMPdzPyZGKU77rRGNXkCp7qXtAqYl31cJehgT/cHeEwsBQRJq2Kngd VWUZD3inzoBXkIkG4vFC5G1lDnivjxFHS7fezp15S6vX8YA0PYZ2sdpfgRp6o5ia c7sd2uy7Yx/Uauz3Lqhw9VFlxMfy7x8gLgOuvrdNZZ5iFeuWSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ1tEQnvRXbHT7ykpkTj+GvTkg4CMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWJkMzI3MzUtNGIwYS0z NzdmLThiNjYtMzNjYTdhNTQ3MzhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADEMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJq94RMd8cvqvm8P9PTSVsGCw0aNaQ1SE2sIT1/18ApzDWKAMfTlfTd8 TYNjbEyUJm77hCqOrZeLWdAcfo0jOUiIAPsrf1maYFMDWb4SCbO0bqp9JpuIVdlK 0mrf7JpOEABx4RtMRYBPb/LXrtbIAOEj3x6if2eQAn9S8jpc1BFJXT6bwU884LAm stJfpK4WSAcB0mJfhqBUasDWUIKo/ribDvITPMB2G7SOl3wXxZIKQXGsGJlQi49o wMRu2UT9H0b1Fwi/QNw9OtKl1DVWw4OCG/tN7sSfQQJwvAHO7w7jHeCUDdOFzneX F5u/enUNTR81NkCIKxUUTxhCEpbN7d0= -----END CERTIFICATE-----Generated at Tue Nov 4 22:05:33 2025 by rpki-client