$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa File: f0d0695f-744b-383e-af40-aaa149e0105b.roa (raw, json) Hash identifier: WCJu0wCmG2eiYP2SRqqLOFiNuqmwJAbi9Zw2OOx3sYI= Subject key identifier: 54:AD:B6:D7:EA:56:E6:BB:93:92:D6:98:D7:82:B2:C8:C6:4A:30:70 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B153C245C64EDC50F012F86C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa Signing time: Thu 04 Sep 2025 13:00:41 +0000 ROA not before: Thu 04 Sep 2025 13:00:41 +0000 ROA not after: Wed 03 Dec 2025 14:00:41 +0000 asID: 149440 IP address blocks: 136.0.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:15:3c:24:5c:64:ed:c5:0f:01:2f:86:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 4 13:00:41 2025 GMT Not After : Dec 3 14:00:41 2025 GMT Subject: CN=5217607e-a77a-4f70-8f59-707ae88de642 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:31:4a:33:6a:73:59:4b:84:a8:49:ed:7c:38: ab:52:f9:56:45:0d:9a:a4:e8:8b:79:13:d6:9e:65: 6d:dc:18:34:c1:30:61:14:96:ee:3a:b7:c0:3f:d7: 17:b6:e5:34:f8:f2:ab:26:a6:7f:04:60:4e:c5:18: 4f:94:31:9d:17:2e:d3:b2:ea:43:3d:42:f8:5d:fc: 24:36:1c:a7:70:a4:ee:16:72:a7:7d:5b:b7:af:54: d8:2a:13:ea:24:a9:c3:3c:02:7a:b4:eb:68:b7:ed: 0b:1a:66:6b:65:45:37:d4:24:f5:2b:3c:b8:8f:f6: e3:7f:b1:ab:60:2a:a4:4c:d0:84:1c:5e:62:ac:29: 23:6c:0d:19:e2:3b:62:4c:d5:91:05:47:98:57:1c: 9b:fd:4e:02:82:4c:4f:f6:5a:b5:18:92:fb:03:51: 52:b7:82:d2:71:cc:c7:34:b2:1b:fa:24:f9:ac:38: 46:04:1c:b0:0f:ab:f0:2b:ae:0b:9b:d9:b8:d4:c2: 0a:a8:95:04:c8:8c:be:15:ff:ab:b3:84:ce:f6:4d: 04:c8:3c:74:4a:e8:f5:9b:e3:3b:5e:ea:c3:20:04: 5a:66:ab:fe:25:06:43:7e:4b:67:66:fb:cf:e5:b3: d9:63:bb:5d:05:80:31:a7:40:ba:d0:15:74:ea:d2: 43:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:AD:B6:D7:EA:56:E6:BB:93:92:D6:98:D7:82:B2:C8:C6:4A:30:70 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f0d0695f-744b-383e-af40-aaa149e0105b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3a:a9:9b:5c:d2:74:fb:c1:fc:78:11:3b:cd:9f:0d:31:3c:e3: ba:17:95:bd:5a:a0:34:25:2a:e5:8a:8b:b8:be:32:00:11:73: cb:88:d4:d0:a0:05:2a:de:2e:66:2f:e8:36:4d:7d:36:df:f6: 3b:5c:00:e8:12:63:d6:c1:17:08:16:f0:5c:20:43:5d:5e:ea: f9:07:fd:2a:45:cf:86:dc:b7:41:99:7c:ff:44:07:21:aa:df: 74:4a:57:db:83:71:b6:89:d5:80:29:bc:02:b1:4c:4e:cb:b9: 56:8b:bc:f8:ad:44:cd:a4:9d:42:cb:db:0b:e9:20:ef:03:82: cb:44:d6:d1:1f:d0:ee:66:25:16:72:ae:eb:df:1c:41:7e:a4: 1f:6e:a1:44:3f:83:c3:75:fa:b4:c2:c0:a4:6e:a3:5a:68:df: b1:2c:95:ed:71:d8:cf:96:8d:34:4c:8f:4e:96:09:93:bb:cd: a6:1d:f9:b2:43:d4:0f:45:40:71:ca:ec:eb:e0:c6:b0:2b:da: be:e2:26:71:3e:c4:11:83:02:5c:97:6a:70:9d:b7:80:9a:95: 2c:d2:1b:2a:f6:49:a1:a9:76:a4:d8:07:49:dd:c9:a3:b4:22: 5b:a5:13:33:05:bf:41:8b:96:27:ce:76:80:88:54:b5:a7:47: a8:e9:4c:5c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsVPCRcZO3FDwEvhsAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwNDEzMDA0MVoXDTI1MTIwMzE0MDA0MVowLzEtMCsGA1UEAxMk NTIxNzYwN2UtYTc3YS00ZjcwLThmNTktNzA3YWU4OGRlNjQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljFKM2pzWUuEqEntfDirUvlWRQ2apOiLeRPW nmVt3Bg0wTBhFJbuOrfAP9cXtuU0+PKrJqZ/BGBOxRhPlDGdFy7TsupDPUL4Xfwk NhyncKTuFnKnfVu3r1TYKhPqJKnDPAJ6tOtot+0LGmZrZUU31CT1Kzy4j/bjf7Gr YCqkTNCEHF5irCkjbA0Z4jtiTNWRBUeYVxyb/U4CgkxP9lq1GJL7A1FSt4LScczH NLIb+iT5rDhGBBywD6vwK64Lm9m41MIKqJUEyIy+Ff+rs4TO9k0EyDx0Suj1m+M7 XurDIARaZqv+JQZDfktnZvvP5bPZY7tdBYAxp0C60BV06tJDLQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFStttfqVua7k5LWmNeCssjGSjBwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjBkMDY5NWYtNzQ0Yi0z ODNlLWFmNDAtYWFhMTQ5ZTAxMDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADqpm1zSdPvB/HgRO82fDTE847oXlb1aoDQlKuWKi7i+MgARc8uI1NCg BSreLmYv6DZNfTbf9jtcAOgSY9bBFwgW8FwgQ11e6vkH/SpFz4bct0GZfP9EByGq 33RKV9uDcbaJ1YApvAKxTE7LuVaLvPitRM2knULL2wvpIO8DgstE1tEf0O5mJRZy ruvfHEF+pB9uoUQ/g8N1+rTCwKRuo1po37Esle1x2M+WjTRMj06WCZO7zaYd+bJD 1A9FQHHK7OvgxrAr2r7iJnE+xBGDAlyXanCdt4CalSzSGyr2SaGpdqTYB0ndyaO0 IlulEzMFv0GLlifOdoCIVLWnR6jpTFw= -----END CERTIFICATE-----Generated at Wed Nov 5 06:55:13 2025 by rpki-client