$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2d8c313-c3d1-3053-bf02-7ee7e703f03a.roa File: f2d8c313-c3d1-3053-bf02-7ee7e703f03a.roa (raw, json) Hash identifier: GKhN64n7c+alIRPLZxBvRo5vlCKjQr70X5bdzrY8hYA= Subject key identifier: 7E:9B:4B:B1:2C:AF:33:97:BD:3C:95:C5:8E:20:8A:CE:39:A3:FF:10 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584B7DECCDBC9D0EBD0C0E572D00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2d8c313-c3d1-3053-bf02-7ee7e703f03a.roa Signing time: Sun 12 Oct 2025 01:00:30 +0000 ROA not before: Sun 12 Oct 2025 01:00:30 +0000 ROA not after: Sat 10 Jan 2026 02:00:30 +0000 asID: 7385 IP address blocks: 136.0.204.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 Oct 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:7d:ec:cd:bc:9d:0e:bd:0c:0e:57:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 12 01:00:30 2025 GMT Not After : Jan 10 02:00:30 2026 GMT Subject: CN=6d66dd54-b6c4-4a03-a453-6862c0962db9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:19:ed:bd:16:47:bb:35:5c:ee:83:e6:94:4c: 1d:12:db:a5:ad:9f:61:e1:f5:7d:91:d0:25:cd:89: ca:1d:c1:ab:11:ca:f9:85:57:d8:92:d5:1b:58:22: 46:46:8b:40:1e:0b:84:7c:42:6f:eb:e5:66:98:2d: aa:a9:38:20:8b:50:fb:d7:3e:8e:e1:88:9c:c4:66: d6:38:3f:f5:6b:40:22:13:24:7c:5c:e1:4c:21:70: 18:3f:a6:fc:f9:13:dc:d1:38:07:c0:b4:10:12:0f: f5:d5:fe:3f:56:73:6b:9b:b3:81:25:c3:1d:4d:68: c8:77:83:ba:04:a7:cf:2b:d6:fe:e3:0e:a0:09:cc: 28:2e:95:d1:97:41:e2:37:3f:d7:fb:2c:34:12:80: 41:d1:53:20:f6:b9:9d:29:5a:f1:bc:1d:79:3e:e2: 82:2e:85:6b:c7:a2:b8:a8:1e:fd:42:28:90:f1:c4: 76:71:20:07:6e:99:2a:cf:c8:89:4d:89:d1:3c:22: f5:18:d1:8c:13:d8:f4:2f:00:9e:d5:78:ed:95:8a: b4:b4:48:3d:31:19:9f:73:7a:08:56:e2:a5:05:47: f1:0f:a1:b1:4f:b4:37:f4:92:a5:da:fe:f1:41:42: e5:e2:5c:60:ea:70:62:da:cc:a0:65:a9:de:3a:aa: 4c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:9B:4B:B1:2C:AF:33:97:BD:3C:95:C5:8E:20:8A:CE:39:A3:FF:10 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f2d8c313-c3d1-3053-bf02-7ee7e703f03a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.204.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 50:b5:f2:9e:b0:11:4b:07:c7:4b:b2:c6:b0:cd:2f:72:56:13: 28:f8:56:d3:b4:e5:c3:60:06:1b:7b:d6:fb:21:ca:f3:a3:d5: 56:92:da:ff:3f:9b:8a:b2:98:59:76:e2:4a:81:ee:06:62:0d: 71:b0:95:48:aa:e4:0e:16:5e:9d:1c:41:0f:f8:8a:36:71:6a: 84:c2:27:51:ea:2b:f5:d8:2b:15:78:2b:a8:24:d1:27:e7:03: d4:28:a6:62:89:a5:4b:59:55:ec:99:f1:bc:0e:b5:3a:9b:6f: b9:7f:90:f8:44:be:dd:0c:b9:b5:b5:86:09:2d:c2:c4:e9:4e: ce:57:2d:de:e0:e4:8e:89:32:05:3f:97:e2:88:a9:d9:a6:e0: e5:4d:97:d4:6f:a7:47:db:27:6e:d5:4d:50:13:3f:08:b4:51: 25:04:15:50:b9:7d:73:f8:ff:ea:29:33:f9:c2:aa:d4:33:89: 65:77:ba:2f:14:20:17:70:5d:5d:41:75:b5:a3:a7:71:17:51: 6d:ec:a6:95:7b:ba:eb:0a:07:d8:f1:dd:8a:e0:9a:d9:76:68: 71:5d:91:5c:8d:2d:1d:6e:88:a6:77:fe:9b:a9:7d:df:7e:93: 83:0b:4b:44:19:f0:f2:f2:80:9c:56:12:d1:4e:6f:5f:7e:8f: fc:4a:9c:07 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt97M28nQ69DA5XLQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI1MTAxMjAxMDAzMFoXDTI2MDExMDAyMDAzMFowLzEtMCsGA1UEAxMk NmQ2NmRkNTQtYjZjNC00YTAzLWE0NTMtNjg2MmMwOTYyZGI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzhntvRZHuzVc7oPmlEwdEtulrZ9h4fV9kdAl zYnKHcGrEcr5hVfYktUbWCJGRotAHguEfEJv6+VmmC2qqTggi1D71z6O4YicxGbW OD/1a0AiEyR8XOFMIXAYP6b8+RPc0TgHwLQQEg/11f4/VnNrm7OBJcMdTWjId4O6 BKfPK9b+4w6gCcwoLpXRl0HiNz/X+yw0EoBB0VMg9rmdKVrxvB15PuKCLoVrx6K4 qB79QiiQ8cR2cSAHbpkqz8iJTYnRPCL1GNGME9j0LwCe1XjtlYq0tEg9MRmfc3oI VuKlBUfxD6GxT7Q39JKl2v7xQULl4lxg6nBi2sygZaneOqpM2QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFH6bS7EsrzOXvTyVxY4gis45o/8QMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjJkOGMzMTMtYzNkMS0z MDUzLWJmMDItN2VlN2U3MDNmMDNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADMMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFC18p6wEUsHx0uyxrDNL3JWEyj4VtO05cNgBht71vshyvOj1VaS2v8/ m4qymFl24kqB7gZiDXGwlUiq5A4WXp0cQQ/4ijZxaoTCJ1HqK/XYKxV4K6gk0Sfn A9QopmKJpUtZVeyZ8bwOtTqbb7l/kPhEvt0MubW1hgktwsTpTs5XLd7g5I6JMgU/ l+KIqdmm4OVNl9Rvp0fbJ27VTVATPwi0USUEFVC5fXP4/+opM/nCqtQziWV3ui8U IBdwXV1BdbWjp3EXUW3sppV7uusKB9jx3Yrgmtl2aHFdkVyNLR1uiKZ3/pupfd9+ k4MLS0QZ8PLygJxWEtFOb19+j/xKnAc= -----END CERTIFICATE-----Generated at Mon Oct 20 02:02:53 2025 by rpki-client