$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa File: f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa (raw, json) Hash identifier: hl25HkkXPC1CRN099oaDHQRhw6RmtaseqF5UTXp1+wg= Subject key identifier: EA:2E:E8:0B:64:D1:F3:65:E3:58:A1:7B:6C:1A:40:C6:FB:9F:28:82 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584BB45D1A6CAADBAEFF2312F680 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa Signing time: Fri 31 Oct 2025 13:00:39 +0000 ROA not before: Fri 31 Oct 2025 13:00:39 +0000 ROA not after: Thu 29 Jan 2026 14:00:39 +0000 asID: 49770 IP address blocks: 136.0.217.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:b4:5d:1a:6c:aa:db:ae:ff:23:12:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 31 13:00:39 2025 GMT Not After : Jan 29 14:00:39 2026 GMT Subject: CN=62efa66f-c06e-4821-bf15-e4c8242d1048 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:0d:7e:84:49:09:a9:de:5f:b4:d3:24:61:8f: 42:2c:5b:b5:0e:8b:f0:5f:06:ea:7a:08:ad:d4:af: d1:9c:ff:b6:a0:1c:2c:9e:0e:81:fe:33:1c:c5:f1: ed:76:fa:fb:bc:61:f1:9f:7d:3a:81:10:df:83:af: 58:63:94:7b:e3:79:62:e2:c4:bf:00:27:ac:aa:f2: 93:d1:27:aa:0a:a2:04:02:94:77:66:5d:45:12:00: c0:fc:c4:d3:ae:b0:70:77:5a:85:cd:1e:89:89:9c: 62:42:f1:1f:6a:14:74:91:5c:49:08:35:73:8b:58: 46:e9:6d:30:33:c4:9b:c4:2b:cc:fa:69:6f:45:cb: 25:86:a3:a6:33:75:dc:ea:7a:5c:40:c9:60:f4:9b: 73:04:65:1e:f1:dd:c8:20:78:f8:36:66:d6:8f:5b: e6:ec:73:dc:7f:87:34:6c:3e:40:d4:00:d3:5c:4a: 18:21:0f:4e:74:ab:56:4c:4c:5d:1f:a4:ce:57:23: 5c:f3:a1:57:48:ef:22:f7:dd:e2:5d:aa:32:dd:f7: 04:e2:c0:b6:c3:df:0b:d6:8b:93:03:ad:f6:94:e8: af:83:73:c1:7a:96:ee:7a:a8:ec:56:34:e6:2e:ff: 78:97:23:c4:ee:a9:a7:6a:d1:b2:40:4e:c5:cb:f4: ba:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:2E:E8:0B:64:D1:F3:65:E3:58:A1:7B:6C:1A:40:C6:FB:9F:28:82 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f3c74b5e-82a8-336f-baed-b857ac3f79b1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.217.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:00:4f:4c:bc:17:1e:5b:a4:75:6f:64:a5:22:6a:3a:50:4c: a0:71:55:48:ac:0c:e0:8a:c1:9e:72:2c:e8:4b:a6:8c:60:6d: ec:66:3a:fc:ce:93:75:35:4b:8d:57:bc:f5:46:45:f2:57:f7: 2b:a6:ac:cb:57:73:1f:4f:c8:d7:b6:28:70:28:b3:5e:d1:ae: b2:0e:68:03:62:91:b7:c9:9d:db:6a:a3:03:99:9c:3d:cc:b4: 05:6b:a5:80:ca:d4:48:f4:8a:02:de:06:4e:5b:c4:f6:1e:3a: ed:8d:93:80:7d:eb:a8:77:27:c5:fa:2f:49:32:a4:3c:ed:0a: de:22:55:fd:cd:30:84:d6:80:79:a0:ea:33:14:f5:4c:17:1f: b3:2e:a4:8b:76:20:72:bd:9a:7c:ae:7c:5b:9d:22:8f:79:11: 94:94:7a:78:ab:8e:6b:e0:4c:bf:e2:e0:9b:c5:ef:64:ca:39: 6e:eb:a9:0a:9f:38:69:b6:1a:f6:1f:b8:8d:ea:1f:ae:af:48: 8e:7d:61:c9:e7:fa:d7:41:21:d7:ed:10:23:1b:95:30:b4:75: e9:93:5f:70:bc:50:cf:ca:6d:84:8a:cf:40:4b:e8:2f:bb:5e: c2:09:17:15:d5:48:c5:bc:fc:bb:56:c9:f5:95:ab:15:3a:4e: 68:d6:ea:85 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEu0XRpsqtuu/yMS9oAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAzMTEzMDAzOVoXDTI2MDEyOTE0MDAzOVowLzEtMCsGA1UEAxMk NjJlZmE2NmYtYzA2ZS00ODIxLWJmMTUtZTRjODI0MmQxMDQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ1+hEkJqd5ftNMkYY9CLFu1DovwXwbqegit 1K/RnP+2oBwsng6B/jMcxfHtdvr7vGHxn306gRDfg69YY5R743li4sS/ACesqvKT 0SeqCqIEApR3Zl1FEgDA/MTTrrBwd1qFzR6JiZxiQvEfahR0kVxJCDVzi1hG6W0w M8SbxCvM+mlvRcslhqOmM3Xc6npcQMlg9JtzBGUe8d3IIHj4NmbWj1vm7HPcf4c0 bD5A1ADTXEoYIQ9OdKtWTExdH6TOVyNc86FXSO8i993iXaoy3fcE4sC2w98L1ouT A632lOivg3PBepbueqjsVjTmLv94lyPE7qmnatGyQE7Fy/S6XQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOou6Atk0fNl41ihe2waQMb7nyiCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjNjNzRiNWUtODJhOC0z MzZmLWJhZWQtYjg1N2FjM2Y3OWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABoAT0y8Fx5bpHVvZKUiajpQTKBxVUisDOCKwZ5yLOhLpoxgbexmOvzO k3U1S41XvPVGRfJX9yumrMtXcx9PyNe2KHAos17RrrIOaANikbfJndtqowOZnD3M tAVrpYDK1Ej0igLeBk5bxPYeOu2Nk4B966h3J8X6L0kypDztCt4iVf3NMITWgHmg 6jMU9UwXH7MupIt2IHK9mnyufFudIo95EZSUenirjmvgTL/i4JvF72TKOW7rqQqf OGm2GvYfuI3qH66vSI59Ycnn+tdBIdftECMblTC0demTX3C8UM/KbYSKz0BL6C+7 XsIJFxXVSMW8/LtWyfWVqxU6TmjW6oU= -----END CERTIFICATE-----Generated at Wed Nov 5 01:10:29 2025 by rpki-client