$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa File: d952b645-35ef-3f72-a694-b7b692438686.roa (raw, json) Hash identifier: NZFy7rtOHOywHqvSdkAoPQT8L3rUZCqhcJIJudClcAQ= Subject key identifier: 52:7A:12:AA:0D:7F:D5:1E:B1:76:E3:8C:89:16:23:25:DD:C7:A6:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B758CAA9DB700E27CD3F5D600 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa Signing time: Thu 09 Oct 2025 01:00:28 +0000 ROA not before: Thu 09 Oct 2025 01:00:28 +0000 ROA not after: Wed 07 Jan 2026 02:00:28 +0000 asID: 7018 IP address blocks: 136.0.135.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:75:8c:aa:9d:b7:00:e2:7c:d3:f5:d6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 9 01:00:28 2025 GMT Not After : Jan 7 02:00:28 2026 GMT Subject: CN=192adebf-34ba-4df4-8018-b162fff8c58c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:2a:90:4e:a7:28:c0:a3:a0:c6:db:e3:53:c7: 4c:44:87:fc:bb:fe:3e:dc:75:f5:70:b8:0a:4b:3c: f3:f7:4d:db:bb:0b:d8:8d:5f:38:c9:2c:b3:18:cc: a9:25:f1:b2:35:6a:4e:19:40:5b:45:c3:37:f6:65: 9a:7c:e3:d6:37:8f:68:db:92:20:b3:b7:a1:c3:39: 44:70:ca:98:47:09:ad:21:3b:68:b0:7b:99:84:6f: d3:c0:1d:db:b3:fa:34:05:9c:29:f0:4e:a9:b4:66: 6b:a9:ec:b2:51:29:d9:17:ff:8a:34:5d:9d:90:64: 8f:ec:2a:a6:f6:ef:d7:3e:2d:b8:aa:38:b2:4b:41: 88:c2:77:e3:72:17:f6:e7:80:8e:dc:31:14:1f:c8: ea:d0:f4:7e:2b:43:84:5a:90:0a:a1:ae:b2:78:56: 0f:f0:a0:91:57:a6:91:13:6a:4a:96:79:ae:44:c4: 9c:5d:d9:d0:67:47:7d:ed:2d:c8:7e:ef:12:8e:69: e8:80:5e:f6:e1:5c:79:05:9e:65:7c:8d:c6:fc:0c: 49:59:d8:12:ba:bc:9f:68:60:6a:6a:d6:f2:9b:33: 18:59:7c:a4:90:5e:7b:4c:77:53:71:29:33:c2:06: 22:82:25:4f:17:41:8e:09:59:7f:76:62:75:5f:68: 6f:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:7A:12:AA:0D:7F:D5:1E:B1:76:E3:8C:89:16:23:25:DD:C7:A6:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d952b645-35ef-3f72-a694-b7b692438686.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.135.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8b:0c:17:94:a1:fa:e7:4b:63:4e:80:17:a8:ea:fc:e0:4b:3a: 9b:ef:83:79:53:7f:9d:f7:94:92:d6:f5:b6:1d:26:73:55:73: 67:db:c5:ec:3e:2e:1d:01:66:0b:fd:94:2a:78:99:36:3f:ae: df:76:31:26:da:f5:78:96:86:59:46:47:b9:67:be:fe:82:42: 09:33:10:f1:87:02:1c:9a:81:ec:3f:32:43:59:63:1b:9b:9f: 9e:42:4f:a4:19:d6:3d:d4:a8:4b:73:8b:d5:1f:16:cc:47:35: ea:88:78:eb:95:f0:18:cd:38:33:3e:85:59:59:90:cf:e8:40: 42:03:33:f4:6b:7a:5c:8d:d7:2d:4e:67:8b:78:31:dc:c9:13: cd:4d:d6:b2:5c:9d:01:5a:a5:14:6f:5b:f7:0b:9a:28:5c:a7: cb:bc:20:ff:3e:5d:da:1a:45:3d:d7:64:82:b5:63:4d:c3:1a: 85:79:e7:c3:f5:ad:eb:f5:d8:94:d8:7e:9e:6d:58:37:cd:7e: 99:24:2e:d7:61:b7:76:81:23:6b:de:0a:48:92:01:56:c7:ad: 82:ff:1e:e2:21:16:33:40:82:6c:c9:06:b7:f8:b4:0b:24:4e: bb:9f:78:07:c6:45:93:81:36:5c:63:bb:88:7f:45:e2:97:9e: dd:ce:48:f9 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt1jKqdtwDifNP11gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAwOTAxMDAyOFoXDTI2MDEwNzAyMDAyOFowLzEtMCsGA1UEAxMk MTkyYWRlYmYtMzRiYS00ZGY0LTgwMTgtYjE2MmZmZjhjNThjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiqQTqcowKOgxtvjU8dMRIf8u/4+3HX1cLgK Szzz903buwvYjV84ySyzGMypJfGyNWpOGUBbRcM39mWafOPWN49o25Igs7ehwzlE cMqYRwmtITtosHuZhG/TwB3bs/o0BZwp8E6ptGZrqeyyUSnZF/+KNF2dkGSP7Cqm 9u/XPi24qjiyS0GIwnfjchf254CO3DEUH8jq0PR+K0OEWpAKoa6yeFYP8KCRV6aR E2pKlnmuRMScXdnQZ0d97S3Ifu8SjmnogF724Vx5BZ5lfI3G/AxJWdgSuryfaGBq atbymzMYWXykkF57THdTcSkzwgYigiVPF0GOCVl/dmJ1X2hvLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFJ6EqoNf9UesXbjjIkWIyXdx6bzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDk1MmI2NDUtMzVlZi0z ZjcyLWE2OTQtYjdiNjkyNDM4Njg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIsMF5Sh+udLY06AF6jq/OBLOpvvg3lTf533lJLW9bYdJnNVc2fbxew+ Lh0BZgv9lCp4mTY/rt92MSba9XiWhllGR7lnvv6CQgkzEPGHAhyagew/MkNZYxub n55CT6QZ1j3UqEtzi9UfFsxHNeqIeOuV8BjNODM+hVlZkM/oQEIDM/RrelyN1y1O Z4t4MdzJE81N1rJcnQFapRRvW/cLmihcp8u8IP8+XdoaRT3XZIK1Y03DGoV558P1 rev12JTYfp5tWDfNfpkkLtdht3aBI2veCkiSAVbHrYL/HuIhFjNAgmzJBrf4tAsk TrufeAfGRZOBNlxju4h/ReKXnt3OSPk= -----END CERTIFICATE-----Generated at Wed Nov 5 01:35:31 2025 by rpki-client