$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45631a55-2a68-311a-a0ba-3cb17e7ea3c1.roa File: 45631a55-2a68-311a-a0ba-3cb17e7ea3c1.roa (raw, json) Hash identifier: jPGX8qekfoCH5FbmocG1Y7dvIw7QEz3bxJpUFGURCvw= Subject key identifier: 3E:1C:09:A7:33:BE:AA:6D:19:7E:FE:EB:B2:4E:D6:F4:65:E8:FB:5D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B52A75C57D3A4E14157EF4080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45631a55-2a68-311a-a0ba-3cb17e7ea3c1.roa Signing time: Fri 26 Sep 2025 13:00:42 +0000 ROA not before: Fri 26 Sep 2025 13:00:42 +0000 ROA not after: Thu 25 Dec 2025 14:00:42 +0000 asID: 209854 IP address blocks: 136.0.210.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:52:a7:5c:57:d3:a4:e1:41:57:ef:40:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 26 13:00:42 2025 GMT Not After : Dec 25 14:00:42 2025 GMT Subject: CN=d786f1aa-6402-4c2d-9689-e733c5c2cae6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:81:5a:bb:56:a3:c4:23:fe:8d:c0:e9:e8: db:73:c5:58:93:8a:3a:7d:7f:6e:d2:38:5e:46:d5: ab:97:59:a8:54:a1:16:8e:59:49:39:ba:3c:af:bb: bb:d7:fe:a3:fc:61:4f:3f:61:50:81:b7:53:6d:bb: b5:25:7a:09:55:60:5e:51:b2:e9:e5:62:cb:13:b9: 27:d5:44:bf:f1:04:58:b2:b9:6b:a6:23:d6:7d:85: 4c:e8:8f:27:36:62:f4:9c:e2:f0:11:18:d0:35:c8: a9:32:15:34:aa:02:4b:87:4f:e7:e2:df:c7:c2:6c: f0:42:16:5a:bb:73:fc:d7:07:85:88:31:15:e0:52: 87:a5:3a:40:f5:2a:c2:d8:13:fa:6d:e2:f3:ab:14: f8:5c:10:9f:f6:85:67:75:10:bf:69:8e:8e:08:82: 2b:16:a9:5b:cd:c6:fc:9a:8f:b2:19:6f:0d:01:ef: 75:bf:eb:5c:55:10:b6:0a:42:79:12:9a:c2:d6:75: a7:bd:15:0c:21:6f:ba:95:0a:19:25:b1:60:b4:6d: 41:2b:1a:d4:1d:f6:dd:76:f2:8c:29:82:3f:35:cd: 66:1b:6f:79:dc:6d:e3:45:fe:88:39:9b:be:8c:7d: 9a:2f:88:ba:64:fc:d5:9e:9e:ec:5a:47:3f:aa:73: 5e:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:1C:09:A7:33:BE:AA:6D:19:7E:FE:EB:B2:4E:D6:F4:65:E8:FB:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/45631a55-2a68-311a-a0ba-3cb17e7ea3c1.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.210.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0f:3b:db:13:cd:fc:c0:c4:65:42:f4:0d:0a:63:da:67:65:e8: c5:a7:ac:00:53:cf:65:e4:3e:dd:a9:f0:2c:32:5a:b8:1a:dc: a5:cd:88:d0:3c:4f:dc:42:ed:eb:81:78:43:2e:fb:83:84:71: da:4a:8d:13:2e:02:58:62:f6:ab:1e:5a:c7:79:21:bc:fa:b5: 65:bb:aa:fa:96:ae:24:f2:66:3e:ab:5c:cf:99:10:24:c5:5c: 31:89:d5:75:a5:b0:35:e1:14:78:3f:c0:8d:fb:f7:61:78:5d: fc:65:76:a4:7e:2a:1f:42:e4:d3:b3:d9:7c:8f:e3:ba:a4:83: b0:e5:d8:2c:b9:62:fd:e1:5c:b7:b5:14:17:3f:b4:e8:04:62: 06:31:3c:44:17:98:3a:a6:96:2e:8c:9f:43:cf:b5:ee:a3:ed: 2e:67:60:6e:e6:81:49:05:09:96:2a:e8:b7:f0:b5:d0:58:ea: 5d:cd:ae:9d:7a:fd:58:2d:21:c9:95:a7:7f:50:d5:c0:52:fe: 60:55:1a:c8:14:43:58:18:cb:47:98:a4:ff:ac:40:18:0b:d7: 6b:d4:d2:34:77:2d:b1:e9:bb:89:c7:b4:fc:03:e4:64:2e:1a: 94:59:b7:c7:88:a2:4e:40:3a:2f:e8:d3:30:67:6c:39:8e:71: 9d:0f:f4:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtSp1xX06ThQVfvQIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MDkyNjEzMDA0MloXDTI1MTIyNTE0MDA0MlowLzEtMCsGA1UEAxMk ZDc4NmYxYWEtNjQwMi00YzJkLTk2ODktZTczM2M1YzJjYWU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNCBWrtWo8Qj/o3A6ejbc8VYk4o6fX9u0jhe RtWrl1moVKEWjllJObo8r7u71/6j/GFPP2FQgbdTbbu1JXoJVWBeUbLp5WLLE7kn 1US/8QRYsrlrpiPWfYVM6I8nNmL0nOLwERjQNcipMhU0qgJLh0/n4t/HwmzwQhZa u3P81weFiDEV4FKHpTpA9SrC2BP6beLzqxT4XBCf9oVndRC/aY6OCIIrFqlbzcb8 mo+yGW8NAe91v+tcVRC2CkJ5EprC1nWnvRUMIW+6lQoZJbFgtG1BKxrUHfbddvKM KYI/Nc1mG2953G3jRf6IOZu+jH2aL4i6ZPzVnp7sWkc/qnNeZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD4cCaczvqptGX7+67JO1vRl6PtdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNDU2MzFhNTUtMmE2OC0z MTFhLWEwYmEtM2NiMTdlN2VhM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADSMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA872xPN/MDEZUL0DQpj2mdl6MWnrABTz2XkPt2p8CwyWrga3KXNiNA8 T9xC7euBeEMu+4OEcdpKjRMuAlhi9qseWsd5Ibz6tWW7qvqWriTyZj6rXM+ZECTF XDGJ1XWlsDXhFHg/wI3792F4XfxldqR+Kh9C5NOz2XyP47qkg7Dl2Cy5Yv3hXLe1 FBc/tOgEYgYxPEQXmDqmli6Mn0PPte6j7S5nYG7mgUkFCZYq6LfwtdBY6l3Nrp16 /VgtIcmVp39Q1cBS/mBVGsgUQ1gYy0eYpP+sQBgL12vU0jR3LbHpu4nHtPwD5GQu GpRZt8eIok5AOi/o0zBnbDmOcZ0P9LM= -----END CERTIFICATE-----Generated at Sun Oct 19 20:48:18 2025 by rpki-client