$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa File: f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa (raw, json) Hash identifier: cnh1tUcAFZzOEr8jSReQ6zYlqJK08ZXMtM8hpZISmZs= Subject key identifier: D5:16:4D:1C:6F:5E:4F:7E:68:39:1E:AB:D5:69:4E:9C:98:3D:83:B8 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B0FA6C29AA2B5345E8CAE39C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa Signing time: Tue 02 Sep 2025 13:00:42 +0000 ROA not before: Tue 02 Sep 2025 13:00:42 +0000 ROA not after: Mon 01 Dec 2025 14:00:42 +0000 asID: 8881 IP address blocks: 136.0.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:0f:a6:c2:9a:a2:b5:34:5e:8c:ae:39:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 2 13:00:42 2025 GMT Not After : Dec 1 14:00:42 2025 GMT Subject: CN=7802d957-e620-410b-a928-3086eba4a826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:cd:6e:ca:41:10:5f:26:00:ac:2e:53:0d:15: 3a:90:0e:cc:d0:1c:1b:d9:7f:00:66:4d:12:1c:47: 1e:a1:18:d8:b8:e4:31:67:ac:5f:38:c5:c5:68:6a: 76:65:5a:14:1c:a6:b4:2f:a1:9e:e8:84:9a:42:af: 0c:71:b6:c7:42:61:f2:4e:e7:84:6c:6a:d3:f1:46: b4:70:ef:45:66:3f:b7:df:c2:5e:33:c0:2d:7c:08: 18:73:15:e3:a5:f8:2b:b8:ad:29:e5:24:b0:52:4f: 0b:4a:85:ef:6c:07:df:0c:77:9a:1d:f9:23:b5:19: a7:61:9a:fd:3b:2f:97:26:78:d0:39:e6:ea:4d:67: ba:03:fc:0c:e8:06:cc:b9:51:44:ea:47:4e:03:99: 1d:16:ec:e1:d6:96:dd:62:2b:b0:84:7f:b3:fe:ab: d4:7f:79:57:92:36:61:85:b0:f4:5d:e9:94:ed:96: c1:46:51:5b:d4:8a:a4:70:e5:b3:d2:4f:a4:63:39: dc:ac:b3:f6:a0:f2:71:2c:bc:86:f4:e9:b4:81:33: fb:7b:c6:1c:80:e1:82:5d:36:ae:76:23:f5:07:03: c7:c8:49:75:ab:be:c0:74:1e:a7:58:a8:36:7a:d8: 36:47:c8:68:23:f6:76:e9:7d:23:a0:43:63:70:ab: 0b:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:16:4D:1C:6F:5E:4F:7E:68:39:1E:AB:D5:69:4E:9C:98:3D:83:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 21:dd:c3:0c:c6:15:60:94:93:9f:ae:a7:f9:d6:50:4c:e4:39: f8:2e:87:2b:1c:a6:b9:e4:6b:0e:5c:ff:d3:45:8f:52:bc:ca: 01:99:1c:ee:42:08:bc:be:f6:c5:e9:38:b4:73:f2:41:88:22: f8:05:72:60:1d:5c:27:c9:4d:cb:01:a0:78:6c:61:02:11:41: 93:15:9c:bb:44:8d:d1:40:c0:4c:44:67:78:6f:14:11:59:35: 0a:95:f4:db:98:8e:bc:a3:45:80:74:63:14:fb:13:59:26:50: ed:ef:aa:fb:ce:7d:47:53:c7:33:84:f5:0d:1f:7a:d0:b8:2b: 7c:3b:01:65:bb:0c:38:1f:f2:a3:d9:1b:bf:ff:73:ad:de:96: 3d:10:12:ac:05:8f:db:20:cd:80:41:df:1d:8b:0b:62:da:b7: 96:b7:9b:1c:16:3a:f1:03:f4:d6:1e:97:cc:65:fb:81:df:cb: 74:e3:a0:7f:6a:cb:a4:99:c7:d1:fe:83:76:d9:ee:77:00:a0: cc:db:de:a8:91:1f:cd:be:77:e5:73:0d:28:d6:6b:2b:46:39: 85:9c:ce:1c:cd:7d:ef:4d:b7:a0:75:3e:6d:85:33:b2:93:1a: 30:a9:58:5e:df:8e:c4:85:ea:2b:43:db:04:72:f6:fc:9e:f7: ed:5a:3d:bb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsPpsKaorU0XoyuOcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkwMjEzMDA0MloXDTI1MTIwMTE0MDA0MlowLzEtMCsGA1UEAxMk NzgwMmQ5NTctZTYyMC00MTBiLWE5MjgtMzA4NmViYTRhODI2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkM1uykEQXyYArC5TDRU6kA7M0Bwb2X8AZk0S HEceoRjYuOQxZ6xfOMXFaGp2ZVoUHKa0L6Ge6ISaQq8McbbHQmHyTueEbGrT8Ua0 cO9FZj+338JeM8AtfAgYcxXjpfgruK0p5SSwUk8LSoXvbAffDHeaHfkjtRmnYZr9 Oy+XJnjQOebqTWe6A/wM6AbMuVFE6kdOA5kdFuzh1pbdYiuwhH+z/qvUf3lXkjZh hbD0XemU7ZbBRlFb1IqkcOWz0k+kYzncrLP2oPJxLLyG9Om0gTP7e8YcgOGCXTau diP1BwPHyEl1q77AdB6nWKg2etg2R8hoI/Z26X0joENjcKsLZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNUWTRxvXk9+aDkeq9VpTpyYPYO4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjExYzI4ZDUtMGY2YS0z MTE2LWIwYWEtMDk4YWI3ZGM5MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACHdwwzGFWCUk5+up/nWUEzkOfguhyscprnkaw5c/9NFj1K8ygGZHO5C CLy+9sXpOLRz8kGIIvgFcmAdXCfJTcsBoHhsYQIRQZMVnLtEjdFAwExEZ3hvFBFZ NQqV9NuYjryjRYB0YxT7E1kmUO3vqvvOfUdTxzOE9Q0fetC4K3w7AWW7DDgf8qPZ G7//c63elj0QEqwFj9sgzYBB3x2LC2Lat5a3mxwWOvED9NYel8xl+4Hfy3TjoH9q y6SZx9H+g3bZ7ncAoMzb3qiRH82+d+VzDSjWaytGOYWczhzNfe9Nt6B1Pm2FM7KT GjCpWF7fjsSF6itD2wRy9vye9+1aPbs= -----END CERTIFICATE-----Generated at Wed Nov 5 03:45:40 2025 by rpki-client