$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b423c22b-1548-3092-9ea2-d6974890df0a.roa File: b423c22b-1548-3092-9ea2-d6974890df0a.roa (raw, json) Hash identifier: MY+msFe3fktaxRL9KrxBWJlEqDzpZK73RC9uI+qGZ6M= Subject key identifier: 99:87:A4:83:D6:8B:25:43:AE:DC:73:36:1C:89:52:DC:66:58:F6:41 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B821D8358E03A47D989A32860 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b423c22b-1548-3092-9ea2-d6974890df0a.roa Signing time: Mon 13 Oct 2025 13:00:36 +0000 ROA not before: Mon 13 Oct 2025 13:00:36 +0000 ROA not after: Sun 11 Jan 2026 14:00:36 +0000 asID: 6939 IP address blocks: 136.0.56.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:82:1d:83:58:e0:3a:47:d9:89:a3:28:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 13 13:00:36 2025 GMT Not After : Jan 11 14:00:36 2026 GMT Subject: CN=af3fb312-8b20-4546-b002-38b3201981b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:f7:15:2b:77:be:53:db:5d:05:ad:81:79: 30:ea:fb:07:b4:36:01:ba:58:1f:5f:ac:ca:ec:9a: ae:9f:64:9b:a7:04:db:9a:12:a1:af:5c:52:e2:6f: 6c:ed:58:67:60:ed:e5:f1:47:fe:06:d1:45:9c:80: 7e:0d:a2:fe:a7:ae:f2:a1:ec:31:3a:4b:51:b7:49: 17:43:fc:7b:04:79:00:99:d0:11:79:22:32:bd:c2: d3:d0:2c:93:56:35:77:e5:5f:2a:48:75:f7:aa:8d: 55:68:98:ae:55:77:17:58:16:c8:e8:e3:bc:f2:89: b5:8b:b2:45:e9:16:62:da:57:2b:20:0b:cd:32:79: cb:75:30:76:81:86:c7:ff:1a:a4:85:05:19:73:4d: 32:0d:cc:60:9b:e8:38:ea:44:cb:3b:f7:7d:e8:6a: 33:64:04:bf:be:f6:a3:81:78:5e:7d:ba:15:f0:76: 15:1a:8e:cb:f2:62:05:29:96:0b:d7:73:41:9e:06: 67:e4:b3:3d:7f:70:32:b5:99:53:e9:50:80:d8:dd: 21:9d:a2:ee:59:61:a7:b5:97:da:cc:17:33:99:f5: 61:65:d5:c0:40:93:e3:07:a2:06:20:c1:18:5a:a0: d5:a7:e4:85:48:01:f0:2f:41:45:79:0e:7c:20:a3: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:87:A4:83:D6:8B:25:43:AE:DC:73:36:1C:89:52:DC:66:58:F6:41 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b423c22b-1548-3092-9ea2-d6974890df0a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.56.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 8a:f1:5b:28:6d:13:e5:4b:d2:89:aa:26:b3:10:cc:1d:f7:8e: 17:35:8a:ac:3d:58:24:fb:80:42:d1:93:68:f2:63:d5:1b:d2: d6:4a:35:bd:54:d2:7e:c0:73:06:fb:87:3d:05:b0:86:a6:88: 00:1b:f8:db:c2:8e:ad:cd:f0:17:fd:4f:8f:86:1d:1c:b5:b7: 06:cb:47:12:f7:ab:0c:f4:62:80:b7:81:fd:07:68:56:5b:89: 10:c8:9b:ea:69:f2:b8:4a:c6:d3:d1:f2:68:fd:5f:24:58:d2: e7:44:12:12:b3:9e:1b:e9:4f:6a:e4:aa:09:3c:5d:e9:0e:b1: fe:7d:cb:16:27:ce:19:ec:63:0b:07:9e:05:e5:32:30:4e:55: 5d:a9:d0:55:3d:93:44:f7:9b:ba:a1:12:9a:55:14:e7:df:36: 5c:9d:3b:12:e3:21:c4:8f:bd:23:26:25:fa:78:dc:00:25:61: f8:ec:b1:cd:c7:ae:02:a2:18:39:a9:4e:06:5f:93:b4:11:6e: 43:e1:37:9d:7d:31:48:03:16:1c:ea:3b:df:e9:ca:61:f3:3b: 06:57:a8:22:40:0d:26:58:fb:d8:24:a1:9f:2f:30:dc:74:18: ee:d9:f9:0f:01:0a:50:8a:7c:97:41:c6:88:2f:23:99:b6:bf: 3b:23:5a:ee -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEuCHYNY4DpH2YmjKGAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMzEzMDAzNloXDTI2MDExMTE0MDAzNlowLzEtMCsGA1UEAxMk YWYzZmIzMTItOGIyMC00NTQ2LWIwMDItMzhiMzIwMTk4MWI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHT3FSt3vlPbXQWtgXkw6vsHtDYBulgfX6zK 7Jqun2SbpwTbmhKhr1xS4m9s7VhnYO3l8Uf+BtFFnIB+DaL+p67yoewxOktRt0kX Q/x7BHkAmdAReSIyvcLT0CyTVjV35V8qSHX3qo1VaJiuVXcXWBbI6OO88om1i7JF 6RZi2lcrIAvNMnnLdTB2gYbH/xqkhQUZc00yDcxgm+g46kTLO/d96GozZAS/vvaj gXhefboV8HYVGo7L8mIFKZYL13NBngZn5LM9f3AytZlT6VCA2N0hnaLuWWGntZfa zBczmfVhZdXAQJPjB6IGIMEYWqDVp+SFSAHwL0FFeQ58IKN0iwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJmHpIPWiyVDrtxzNhyJUtxmWPZBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQyM2MyMmItMTU0OC0z MDkyLTllYTItZDY5NzQ4OTBkZjBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIrxWyhtE+VL0omqJrMQzB33jhc1iqw9WCT7gELRk2jyY9Ub0tZKNb1U 0n7Acwb7hz0FsIamiAAb+NvCjq3N8Bf9T4+GHRy1twbLRxL3qwz0YoC3gf0HaFZb iRDIm+pp8rhKxtPR8mj9XyRY0udEEhKznhvpT2rkqgk8XekOsf59yxYnzhnsYwsH ngXlMjBOVV2p0FU9k0T3m7qhEppVFOffNlydOxLjIcSPvSMmJfp43AAlYfjssc3H rgKiGDmpTgZfk7QRbkPhN519MUgDFhzqO9/pymHzOwZXqCJADSZY+9gkoZ8vMNx0 GO7Z+Q8BClCKfJdBxogvI5m2vzsjWu4= -----END CERTIFICATE-----Generated at Mon Oct 20 07:10:37 2025 by rpki-client