$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa File: ddb8352c-dd41-3b64-94b7-dc20399581b8.roa (raw, json) Hash identifier: +uUDAfnirwAZbAV9BJop14KXLnTgn77gwZQsJrhP1Gg= Subject key identifier: 99:93:5F:DE:BF:95:D7:F2:FC:DD:C6:CC:4E:4D:7E:2D:7D:84:9B:25 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB727B80A12481AE6DF043580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa Signing time: Sat 01 Nov 2025 13:00:37 +0000 ROA not before: Sat 01 Nov 2025 13:00:37 +0000 ROA not after: Fri 30 Jan 2026 14:00:37 +0000 asID: 214238 IP address blocks: 136.0.102.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b7:27:b8:0a:12:48:1a:e6:df:04:35:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Nov 1 13:00:37 2025 GMT Not After : Jan 30 14:00:37 2026 GMT Subject: CN=72d9f56b-a36e-4719-9366-f6dffa874374 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:56:02:97:ac:c5:f7:17:db:35:92:d2:9e:ea: 20:88:ac:95:34:db:10:c7:7c:8d:16:26:bb:4e:0a: fa:d0:8d:c4:84:51:f0:90:34:87:ad:2e:f6:23:40: 41:30:3a:a8:f8:2b:36:b0:7b:e0:86:c2:2b:45:33: 21:91:10:f7:c5:48:de:3c:4a:d5:f3:eb:dd:b7:e6: 55:73:e3:e9:ac:96:f6:a1:15:6c:0f:d3:10:b0:4d: 36:04:f4:26:35:9f:8d:be:13:65:f7:a0:97:71:59: c4:d7:1f:bd:54:1f:39:a4:92:e7:66:b1:0f:da:48: d8:1f:6f:b7:06:07:a8:71:98:5f:49:75:c4:6d:8f: 48:81:92:3b:37:90:55:12:b6:e2:77:dc:e8:ca:37: 6b:67:95:bb:f8:4d:9e:62:d9:c3:cd:46:32:a5:4a: 11:e2:36:13:a9:07:1a:a8:da:b7:09:80:54:a9:3d: 35:74:a4:f7:cb:a1:16:6f:bf:4d:81:1e:b5:20:22: 84:c4:d6:30:57:57:c3:31:8e:39:35:5c:fb:d3:44: c2:d8:fd:4a:b1:a8:69:49:2e:17:9e:12:82:ce:25: 92:b8:1f:c2:45:ff:e6:1f:e8:30:67:4f:b3:39:66: 4c:08:24:46:de:50:aa:e5:02:15:05:ed:c1:06:9a: 2d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:93:5F:DE:BF:95:D7:F2:FC:DD:C6:CC:4E:4D:7E:2D:7D:84:9B:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ddb8352c-dd41-3b64-94b7-dc20399581b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.102.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 60:d9:a9:0d:23:d6:af:ad:32:fd:ee:98:ff:77:d3:a6:94:50: b3:7c:2c:2a:82:44:75:39:94:cd:e1:ef:a1:4f:ad:fc:78:9d: ef:17:ac:45:aa:08:d7:b6:03:c0:ed:9e:99:0b:9e:49:90:41: b2:5a:42:aa:57:a2:c7:3a:4b:ca:f8:be:ad:58:91:b3:26:1e: 03:d3:61:0d:a3:50:79:76:a1:e5:f1:9e:d0:86:55:48:50:f2: 6d:d3:fa:e7:ef:3d:6a:67:d0:0a:2a:a9:ef:51:62:2b:6c:04: be:85:3f:02:8d:5c:f3:5d:68:d1:af:03:1f:66:9b:41:81:f0: 0b:e1:47:cb:1e:21:09:54:e3:94:37:07:a6:e4:0f:47:5b:b6: 5c:87:d2:74:f8:05:77:ab:e2:58:84:a3:f7:3a:3c:5c:d6:a2: 67:c0:60:75:bd:0e:87:22:b1:25:4f:19:2a:e7:43:09:ca:e9: 61:3e:48:fc:3a:ab:e4:da:63:22:ec:95:d3:3c:61:3c:a1:ec: 37:93:dc:62:37:ed:fc:62:0d:8a:f3:c9:85:ac:41:67:6f:a8: af:73:31:21:d4:37:ce:65:bd:6b:24:86:e6:70:6c:65:d7:d7: 81:10:e9:e4:43:63:83:23:e1:73:90:32:bd:1d:0a:a1:0c:a8: d2:9b:70:1c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu3J7gKEkga5t8ENYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTEwMTEzMDAzN1oXDTI2MDEzMDE0MDAzN1owLzEtMCsGA1UEAxMk NzJkOWY1NmItYTM2ZS00NzE5LTkzNjYtZjZkZmZhODc0Mzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1YCl6zF9xfbNZLSnuogiKyVNNsQx3yNFia7 Tgr60I3EhFHwkDSHrS72I0BBMDqo+Cs2sHvghsIrRTMhkRD3xUjePErV8+vdt+ZV c+PprJb2oRVsD9MQsE02BPQmNZ+NvhNl96CXcVnE1x+9VB85pJLnZrEP2kjYH2+3 BgeocZhfSXXEbY9IgZI7N5BVErbid9zoyjdrZ5W7+E2eYtnDzUYypUoR4jYTqQca qNq3CYBUqT01dKT3y6EWb79NgR61ICKExNYwV1fDMY45NVz700TC2P1KsahpSS4X nhKCziWSuB/CRf/mH+gwZ0+zOWZMCCRG3lCq5QIVBe3BBpotzwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmTX96/ldfy/N3GzE5Nfi19hJslMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGRiODM1MmMtZGQ0MS0z YjY0LTk0YjctZGMyMDM5OTU4MWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABmMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGDZqQ0j1q+tMv3umP9306aUULN8LCqCRHU5lM3h76FPrfx4ne8XrEWq CNe2A8DtnpkLnkmQQbJaQqpXosc6S8r4vq1YkbMmHgPTYQ2jUHl2oeXxntCGVUhQ 8m3T+ufvPWpn0Aoqqe9RYitsBL6FPwKNXPNdaNGvAx9mm0GB8AvhR8seIQlU45Q3 B6bkD0dbtlyH0nT4BXer4liEo/c6PFzWomfAYHW9DocisSVPGSrnQwnK6WE+SPw6 q+TaYyLsldM8YTyh7DeT3GI37fxiDYrzyYWsQWdvqK9zMSHUN85lvWskhuZwbGXX 14EQ6eRDY4Mj4XOQMr0dCqEMqNKbcBw= -----END CERTIFICATE-----Generated at Tue Nov 4 23:35:28 2025 by rpki-client