$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa File: 4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa (raw, json) Hash identifier: LASxjCz+axxzkaMt/y6veFi0NLNVJRHX/vXHF4kyqgc= Subject key identifier: 3F:25:EC:55:19:89:66:58:AA:18:93:48:36:E4:07:6D:38:8E:E6:47 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B8EACFF32303B57F6918CDD80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa Signing time: Sat 18 Oct 2025 01:00:30 +0000 ROA not before: Sat 18 Oct 2025 01:00:30 +0000 ROA not after: Fri 16 Jan 2026 02:00:30 +0000 asID: 15083 IP address blocks: 136.0.58.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:8e:ac:ff:32:30:3b:57:f6:91:8c:dd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 18 01:00:30 2025 GMT Not After : Jan 16 02:00:30 2026 GMT Subject: CN=030e3ced-b76e-4f75-8af0-942f50fb97d6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a0:b7:4f:5d:bf:a9:ee:53:3a:42:d3:92:15: 70:95:51:2a:67:f8:e8:c2:fb:72:97:24:7e:2f:35: 4e:a7:15:67:50:f7:ec:90:66:e0:52:2b:70:7b:4f: 57:46:a6:e6:14:7b:9d:a2:c6:10:35:d0:de:e9:27: 7b:06:d3:db:ba:99:6b:41:5a:ef:a3:58:ef:87:ef: 43:e7:e2:27:ba:f3:3e:51:be:5d:ca:29:4e:20:bc: 74:d1:a1:13:5c:1c:d3:28:c0:29:61:11:c2:e3:78: cf:76:3c:b3:7c:2b:44:5c:08:9d:9e:31:01:95:1e: f5:6e:bf:4e:4b:98:d8:1f:cd:3f:8a:3e:4f:3a:7f: 43:39:2d:b3:18:55:80:75:1d:96:f3:94:51:c0:80: 61:ce:04:76:e7:79:bc:4c:dc:71:b6:e8:31:48:02: 90:3c:8b:a9:64:bf:ac:d6:5d:5a:e7:da:d7:4a:1c: 7c:88:71:12:6e:dc:e3:6a:63:10:f4:76:e7:5b:c1: 99:82:d5:28:b4:ae:17:6f:ec:f9:39:86:d9:ef:c8: ca:21:c7:85:c2:35:ca:61:f2:01:a4:f9:00:1b:c8: 20:09:dc:52:89:a3:f8:1b:04:31:9a:6b:8d:60:fa: 2c:32:e6:1a:50:33:a6:53:85:3d:3e:e7:90:09:7e: 99:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:25:EC:55:19:89:66:58:AA:18:93:48:36:E4:07:6D:38:8E:E6:47 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4e9f2a17-6b86-3860-a752-f2a5ab4ac7c5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.58.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 64:af:7e:dc:3f:d0:b0:f0:9f:6b:92:60:23:e2:6d:59:9b:54: b3:f5:f5:3b:fa:db:18:ee:85:6d:36:a0:8e:99:6b:8a:62:40: 7b:51:10:1c:ad:b8:79:82:e9:5e:b7:a4:f1:b7:f3:a5:17:0b: a6:4e:4e:7c:f2:8f:7b:ae:e8:85:15:c8:b3:6c:51:e1:e1:d5: fa:04:c6:78:cc:ae:de:c4:cd:ac:15:66:88:ec:1b:4b:d6:64: b4:c1:e0:86:56:36:b7:77:16:90:9b:f1:70:e7:d2:14:39:26: b5:e3:12:21:fa:fe:c1:d9:f7:1d:7e:17:a1:cf:f2:4f:4b:09: 46:1d:6b:0d:f7:d8:b1:48:bd:e2:85:31:73:ee:4d:aa:80:6b: 69:b2:94:7d:b6:08:0a:38:cb:6e:fd:23:bb:82:91:55:24:bf: e6:2d:05:ef:23:0b:fb:ba:2b:9e:57:0f:10:df:e1:a5:29:10: 24:c2:2e:70:21:c5:aa:95:6a:4e:4b:a5:f8:1f:1d:18:7a:83: 25:a2:e0:a2:fe:be:68:e5:3b:61:8b:99:b4:0e:7b:34:45:5a: 5a:92:d2:86:e8:5a:0b:e0:74:73:ee:41:d2:fa:55:c0:7c:ce: c1:ff:bf:df:f6:05:1d:7c:ab:29:b5:4a:9a:ae:f3:f4:d3:e3: 5c:32:6d:f2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuOrP8yMDtX9pGM3YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxODAxMDAzMFoXDTI2MDExNjAyMDAzMFowLzEtMCsGA1UEAxMk MDMwZTNjZWQtYjc2ZS00Zjc1LThhZjAtOTQyZjUwZmI5N2Q2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmaC3T12/qe5TOkLTkhVwlVEqZ/jowvtylyR+ LzVOpxVnUPfskGbgUitwe09XRqbmFHudosYQNdDe6Sd7BtPbuplrQVrvo1jvh+9D 5+InuvM+Ub5dyilOILx00aETXBzTKMApYRHC43jPdjyzfCtEXAidnjEBlR71br9O S5jYH80/ij5POn9DOS2zGFWAdR2W85RRwIBhzgR253m8TNxxtugxSAKQPIupZL+s 1l1a59rXShx8iHESbtzjamMQ9HbnW8GZgtUotK4Xb+z5OYbZ78jKIceFwjXKYfIB pPkAG8ggCdxSiaP4GwQxmmuNYPosMuYaUDOmU4U9PueQCX6ZSwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFD8l7FUZiWZYqhiTSDbkB204juZHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGU5ZjJhMTctNmI4Ni0z ODYwLWE3NTItZjJhNWFiNGFjN2M1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGSvftw/0LDwn2uSYCPibVmbVLP19Tv62xjuhW02oI6Za4piQHtREByt uHmC6V63pPG386UXC6ZOTnzyj3uu6IUVyLNsUeHh1foExnjMrt7EzawVZojsG0vW ZLTB4IZWNrd3FpCb8XDn0hQ5JrXjEiH6/sHZ9x1+F6HP8k9LCUYdaw332LFIveKF MXPuTaqAa2mylH22CAo4y279I7uCkVUkv+YtBe8jC/u6K55XDxDf4aUpECTCLnAh xaqVak5LpfgfHRh6gyWi4KL+vmjlO2GLmbQOezRFWlqS0oboWgvgdHPuQdL6VcB8 zsH/v9/2BR18qym1Spqu8/TT41wybfI= -----END CERTIFICATE-----Generated at Mon Oct 20 02:13:29 2025 by rpki-client