$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa File: 3115dfd7-974d-3faa-a564-738077a10f40.roa (raw, json) Hash identifier: PaCnlKLSAoD1Tvg1XUiVQ2mg72ihkHHjLkuMO+QP0GA= Subject key identifier: BC:24:77:5C:93:B1:96:59:C1:09:80:09:FC:86:D7:D8:4D:54:35:0A Certificate issuer: /CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Certificate serial: 010D0C9F4328584BA0D265C6027C5D909C978940 Authority key identifier: D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa Signing time: Fri 24 Oct 2025 13:00:38 +0000 ROA not before: Fri 24 Oct 2025 13:00:38 +0000 ROA not after: Thu 22 Jan 2026 14:00:38 +0000 asID: 16509 IP address blocks: 136.175.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:a0:d2:65:c6:02:7c:5d:90:9c:97:89:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c1fd14f-b5c3-441f-b09c-daae2ec42472 Validity Not Before: Oct 24 13:00:38 2025 GMT Not After : Jan 22 14:00:38 2026 GMT Subject: CN=0316e5f7-db27-489c-9ddf-113a0d009cc7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:b6:7d:5d:e1:44:42:68:50:4f:a8:1e:1c:93: fe:fa:66:5b:29:17:ca:98:1e:c0:58:6a:70:c3:d8: e1:67:03:77:39:59:8a:a1:94:99:7f:4b:54:5e:e8: cc:bf:f2:7d:95:64:76:d8:66:9f:35:57:f0:e9:5c: 24:42:1d:19:c6:eb:be:7b:25:e5:ea:6d:75:ec:29: 65:4e:a4:a9:4a:d3:5f:2a:86:d8:56:44:e3:35:78: ca:b7:31:99:30:fc:d0:6b:21:6f:04:bc:28:70:48: 3b:3b:5c:1f:b5:83:05:16:ed:f7:23:ac:a9:c1:98: c2:fa:e4:cd:6e:96:a1:e7:23:0b:6d:e6:24:83:cc: f4:35:a5:3d:c1:65:88:85:d5:34:fa:bf:65:95:f8: 55:12:f7:10:46:a8:db:ac:a4:bf:1f:70:9c:34:c2: 85:5f:4f:ee:81:df:22:29:8e:55:13:11:61:80:02: ef:79:7d:5f:06:75:7e:13:30:15:bd:65:ba:ac:6c: 7c:e7:46:11:3d:1f:ed:a7:e2:1e:6a:30:ca:ca:32: 83:4b:fc:c4:2d:b7:fc:e1:b0:af:50:0a:5a:a4:f4: fe:a0:bf:f4:3a:3e:0f:05:31:ef:83:0a:df:de:54: 0b:5c:02:e8:51:83:87:af:6c:ff:e7:ee:da:fb:38: 73:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:24:77:5C:93:B1:96:59:C1:09:80:09:FC:86:D7:D8:4D:54:35:0A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/3115dfd7-974d-3faa-a564-738077a10f40.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472/8c1fd14f-b5c3-441f-b09c-daae2ec42472.crl X509v3 Authority Key Identifier: keyid:D0:32:A7:BF:80:A5:6A:85:3A:38:F5:82:6B:F7:2D:DA:BD:7F:7D:65 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8c1fd14f-b5c3-441f-b09c-daae2ec42472.cer sbgp-ipAddrBlock: critical IPv4: 136.175.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:62:20:46:61:2f:e0:a5:ff:13:47:2a:1a:fe:b5:4a:a2:26: 15:16:36:03:94:8a:89:65:98:74:0f:a9:d0:da:f6:d7:a9:65: 67:1d:22:9e:7c:a9:d3:d2:3b:22:e9:a0:8f:e3:39:04:a7:65: 31:15:9e:72:da:82:2d:24:1a:e4:3a:94:98:66:35:bb:fd:fa: d5:91:98:5b:69:80:97:eb:5d:ff:fd:f8:c7:f7:f0:e7:fa:6f: d8:e6:cd:70:0a:e9:a2:6f:c9:2d:8e:78:6a:12:e0:a8:d8:db: ca:2b:e1:e1:7f:6a:76:42:96:52:52:7b:2e:cd:e9:06:55:0b: af:6a:6c:9b:76:71:7a:7a:30:9e:93:1d:bc:1c:d9:17:86:37: 2e:8e:2c:67:61:2b:96:a8:23:ca:1d:29:05:99:e7:71:75:12: 88:99:c3:0d:49:8e:cd:9c:7a:57:5d:2b:a2:a5:c2:d1:cd:6c: 9a:d2:10:bc:04:30:a6:13:5f:8c:a3:01:51:41:e3:a7:85:69: a1:4d:8d:81:eb:a9:fd:35:dd:34:44:ae:72:46:40:13:fa:e1: d8:8b:ec:58:1f:cc:18:da:76:9b:ab:74:fd:f1:78:6a:14:40: b9:78:50:93:f7:6c:37:17:f5:ad:95:58:01:22:a5:ee:a9:28: ad:44:b7:f3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEug0mXGAnxdkJyXiUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGMxZmQxNGYtYjVjMy00NDFmLWIwOWMtZGFhZTJlYzQy NDcyMB4XDTI1MTAyNDEzMDAzOFoXDTI2MDEyMjE0MDAzOFowLzEtMCsGA1UEAxMk MDMxNmU1ZjctZGIyNy00ODljLTlkZGYtMTEzYTBkMDA5Y2M3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7Z9XeFEQmhQT6geHJP++mZbKRfKmB7AWGpw w9jhZwN3OVmKoZSZf0tUXujMv/J9lWR22GafNVfw6VwkQh0Zxuu+eyXl6m117Cll TqSpStNfKobYVkTjNXjKtzGZMPzQayFvBLwocEg7O1wftYMFFu33I6ypwZjC+uTN bpah5yMLbeYkg8z0NaU9wWWIhdU0+r9llfhVEvcQRqjbrKS/H3CcNMKFX0/ugd8i KY5VExFhgALveX1fBnV+EzAVvWW6rGx850YRPR/tp+IeajDKyjKDS/zELbf84bCv UApapPT+oL/0Oj4PBTHvgwrf3lQLXALoUYOHr2z/5+7a+zhz4wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLwkd1yTsZZZwQmACfyG19hNVDUKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YzFm ZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFlMmVjNDI0NzIvMzExNWRmZDctOTc0ZC0z ZmFhLWE1NjQtNzM4MDc3YTEwZjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGMxZmQxNGYtYjVjMy00NDFmLWIw OWMtZGFhZTJlYzQyNDcyLzhjMWZkMTRmLWI1YzMtNDQxZi1iMDljLWRhYWUyZWM0 MjQ3Mi5jcmwwHwYDVR0jBBgwFoAU0DKnv4ClaoU6OPWCa/ct2r1/fWUwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YzFmZDE0Zi1iNWMzLTQ0MWYtYjA5Yy1kYWFl MmVjNDI0NzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK/zMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADxiIEZhL+Cl/xNHKhr+tUqiJhUWNgOUiollmHQPqdDa9tepZWcdIp58 qdPSOyLpoI/jOQSnZTEVnnLagi0kGuQ6lJhmNbv9+tWRmFtpgJfrXf/9+Mf38Of6 b9jmzXAK6aJvyS2OeGoS4KjY28or4eF/anZCllJSey7N6QZVC69qbJt2cXp6MJ6T Hbwc2ReGNy6OLGdhK5aoI8odKQWZ53F1EoiZww1Jjs2celddK6KlwtHNbJrSELwE MKYTX4yjAVFB46eFaaFNjYHrqf013TRErnJGQBP64diL7FgfzBjadpurdP3xeGoU QLl4UJP3bDcX9a2VWAEipe6pKK1Et/M= -----END CERTIFICATE-----Generated at Wed Nov 5 05:41:45 2025 by rpki-client