$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa File: 52c21e94-873d-37f3-9993-0053617532ab.roa (raw, json) Hash identifier: qENV0Zo86nrBpC6ZS9zLD7FTfXmEDDzcC3/0NSjRFYM= Subject key identifier: F0:70:5D:13:FA:57:72:6F:4E:95:1B:6E:A4:85:7F:5D:B9:D7:18:67 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E428FC3572820B48C5700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10557 IP address blocks: 136.0.125.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:42:8f:c3:57:28:20:b4:8c:57:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=95975c7a-72cb-4173-a04d-54a8fe9e14e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:66:01:2a:a3:b0:51:09:09:1e:b7:3e:45:fa: 50:e2:34:28:b5:38:98:da:a2:7c:65:02:c3:df:fe: 9b:85:9c:2c:1d:0a:9c:31:66:79:33:1f:0a:10:5e: 60:eb:9a:cc:07:bd:2d:dd:58:97:cc:e9:6a:f4:55: 23:5f:3c:03:5d:67:46:1d:d8:8a:7a:ee:86:0f:ee: 16:b7:01:3f:1a:c5:96:1c:51:e7:d5:7a:85:85:3f: 07:03:d1:5e:25:23:d9:19:bd:b6:7a:b0:00:0d:d1: 30:29:87:d2:54:02:96:4a:0a:8a:ad:5f:b7:1b:b8: dc:22:cf:3c:73:25:e9:ca:1a:94:70:46:4b:6d:78: 2f:f5:9b:c8:06:96:ce:c1:b1:e0:81:03:e2:fa:03: 5e:bd:5a:4d:76:a0:f2:89:9d:a5:8b:0a:55:d2:98: 16:18:9f:d8:e5:b1:f8:b7:f5:fd:18:9b:8c:60:d7: b0:2f:6e:ed:c9:ff:7d:ae:17:2c:7e:dc:b1:bc:b7: 95:df:b3:05:51:8f:8f:a0:ae:95:11:42:7d:39:1d: 06:78:38:ec:37:3d:ec:72:65:59:e2:46:8f:47:1c: 4b:3b:d0:4a:42:ec:90:97:a3:56:e1:09:a6:9c:27: 37:80:26:1a:94:5f:9c:f1:1e:57:f5:54:84:37:ed: 0c:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:70:5D:13:FA:57:72:6F:4E:95:1B:6E:A4:85:7F:5D:B9:D7:18:67 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/52c21e94-873d-37f3-9993-0053617532ab.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.125.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:5e:e3:12:5d:0d:2e:46:60:d5:da:5c:6b:57:06:c0:cb:28: 89:8f:c8:22:4f:7a:cd:16:9b:5d:ac:2d:35:fa:53:d2:d7:e4: 38:f1:ac:0b:01:2d:12:9d:1f:3e:ab:ca:ad:e0:cb:77:f9:e0: 0d:68:be:08:b4:7e:fa:89:43:b2:22:7e:58:34:df:03:ca:94: 09:a4:18:f5:e4:cf:af:02:19:0c:56:e3:95:8b:61:ba:8b:56: 4d:5b:a4:bd:32:ec:83:09:1b:5b:6b:ca:bd:9a:3d:ae:4d:57: 7c:65:3a:1d:ad:98:bb:ce:1d:d4:f3:4e:8e:05:5f:60:27:17: ca:c0:a8:26:79:d0:d7:5f:a4:4b:83:23:27:8b:44:bb:e7:3b: b1:2d:50:bd:31:35:89:41:cc:0d:98:62:c6:96:ed:02:a5:5d: 9b:6d:74:e3:a6:34:46:28:6c:db:5b:3f:97:18:f9:1e:dc:06: ef:7f:6c:3f:af:29:40:4b:5e:7c:22:52:49:c9:95:37:a4:f0: fc:7b:73:96:6c:fc:cf:24:14:67:1f:1e:7f:1e:c3:63:8b:bc: 5a:ce:5e:fa:56:55:3f:ea:d5:41:55:25:dc:ef:a1:20:ba:a9: ea:13:32:15:01:70:22:40:2a:c8:9d:24:21:cf:9a:8c:2d:79: 13:3c:8c:87 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfkKPw1coILSMVwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTU5NzVjN2EtNzJjYi00MTczLWEwNGQtNTRhOGZlOWUxNGU5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjGYBKqOwUQkJHrc+RfpQ4jQotTiY2qJ8ZQLD 3/6bhZwsHQqcMWZ5Mx8KEF5g65rMB70t3ViXzOlq9FUjXzwDXWdGHdiKeu6GD+4W twE/GsWWHFHn1XqFhT8HA9FeJSPZGb22erAADdEwKYfSVAKWSgqKrV+3G7jcIs88 cyXpyhqUcEZLbXgv9ZvIBpbOwbHggQPi+gNevVpNdqDyiZ2liwpV0pgWGJ/Y5bH4 t/X9GJuMYNewL27tyf99rhcsftyxvLeV37MFUY+PoK6VEUJ9OR0GeDjsNz3scmVZ 4kaPRxxLO9BKQuyQl6NW4QmmnCc3gCYalF+c8R5X9VSEN+0MywIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPBwXRP6V3JvTpUbbqSFf1251xhnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNTJjMjFlOTQtODczZC0z N2YzLTk5OTMtMDA1MzYxNzUzMmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB9MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAARe4xJdDS5GYNXaXGtXBsDLKImPyCJPes0Wm12sLTX6U9LX5DjxrAsB LRKdHz6ryq3gy3f54A1ovgi0fvqJQ7Iiflg03wPKlAmkGPXkz68CGQxW45WLYbqL Vk1bpL0y7IMJG1tryr2aPa5NV3xlOh2tmLvOHdTzTo4FX2AnF8rAqCZ50NdfpEuD IyeLRLvnO7EtUL0xNYlBzA2YYsaW7QKlXZttdOOmNEYobNtbP5cY+R7cBu9/bD+v KUBLXnwiUknJlTek8Px7c5Zs/M8kFGcfHn8ew2OLvFrOXvpWVT/q1UFVJdzvoSC6 qeoTMhUBcCJAKsidJCHPmowteRM8jIc= -----END CERTIFICATE-----Generated at Fri Sep 25 20:55:42 2026 by rpki-client