$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d68bd9-5e6b-35df-a993-38499c785b84.roa File: 39d68bd9-5e6b-35df-a993-38499c785b84.roa (raw, json) Hash identifier: 8tDfL/U7TA8AkZ490EA0VNpbKSpWRXxTWXvl2vkMbUc= Subject key identifier: 1C:71:0A:65:B2:B9:28:4C:4F:20:4E:46:CD:F8:23:79:C1:65:75:42 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E4DC5D85C159218C23A3B5140 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d68bd9-5e6b-35df-a993-38499c785b84.roa Signing time: Fri 26 Jun 2026 21:24:23 +0000 ROA not before: Fri 26 Jun 2026 21:24:23 +0000 ROA not after: Thu 24 Sep 2026 21:24:23 +0000 asID: 3949 IP address blocks: 136.0.49.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:4d:c5:d8:5c:15:92:18:c2:3a:3b:51:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 26 21:24:23 2026 GMT Not After : Sep 24 21:24:23 2026 GMT Subject: CN=2a0cb0f0-cf8a-4721-8ff6-aecbfe53e5e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:0b:b6:c1:c6:18:c8:9c:04:4e:1e:b7:77:cc: 63:09:49:fd:b6:ca:d0:5c:c4:4d:b5:16:6d:7c:49: 0f:3a:91:e8:b8:eb:b7:42:4c:6f:dd:36:c2:6c:57: f5:f0:27:3e:85:56:cd:12:3c:f4:33:b4:d2:2f:8f: e7:8b:9d:6b:73:93:65:fb:67:ce:2f:be:83:1f:98: 58:4e:9d:cd:dd:3d:68:c5:93:df:72:21:00:ad:c2: 1d:3a:21:ea:de:14:63:58:4d:d8:73:f3:30:27:ac: 77:49:d8:8c:ae:93:dc:61:20:a1:6f:5d:70:96:75: 61:26:69:82:92:63:9f:2d:6a:b7:0e:b6:0e:cc:7e: 41:5a:55:44:59:27:9c:6d:40:d1:5b:b7:2a:79:45: 75:38:ae:8b:56:62:a9:22:fe:0b:2c:55:ae:dd:77: 04:74:06:fc:28:92:df:5b:e9:4c:db:42:ec:59:7c: c2:f9:7a:13:98:7b:0e:29:ed:1f:b3:2e:1e:f2:88: 73:e0:6f:e5:90:60:7d:00:d5:0f:ba:f4:f5:99:1f: 9a:61:c3:53:a4:65:cd:9e:c8:56:43:24:c1:59:4a: 2a:9f:65:bc:8c:9a:dc:39:e5:88:b5:ce:53:94:b8: 23:12:c3:f1:1d:27:c7:e8:c0:e7:8d:8a:d6:1e:52: 78:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:71:0A:65:B2:B9:28:4C:4F:20:4E:46:CD:F8:23:79:C1:65:75:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/39d68bd9-5e6b-35df-a993-38499c785b84.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.49.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 68:72:d1:78:6b:13:0e:39:59:6b:e6:43:1e:59:50:ea:9d:7a: 0f:e4:e9:69:cc:21:f2:43:8e:a4:2a:32:f7:60:c2:1c:01:f2: 32:5f:f6:51:ce:05:54:fc:41:16:b1:ae:b0:59:7a:7f:62:ba: eb:b9:be:c1:4c:a9:48:58:9c:df:8e:78:c5:de:48:88:a7:85: 26:cc:8b:7a:46:f0:8d:c5:27:69:fe:35:a4:fc:8b:01:94:e8: e2:1f:d2:29:7b:7e:3b:50:28:68:ee:41:d2:d5:06:00:07:1a: b3:a7:92:6d:a6:3d:fb:07:2c:59:72:1f:d2:bb:1f:c9:86:e3: 56:f2:93:98:65:35:4c:56:99:80:7e:45:47:08:98:b1:9a:fa: 8e:6a:01:a2:52:a0:99:f9:d7:d1:e3:87:1c:a6:13:03:bd:9a: 91:a2:df:07:2a:c9:75:e7:db:9e:ec:cd:c2:6e:5f:ad:2a:3d: f2:00:46:d1:98:dc:71:fc:46:1b:52:5a:e0:f1:59:b3:7f:fb: 12:5f:e4:91:b6:2b:74:4b:93:e5:c6:92:10:b3:49:55:9c:d9: 11:cc:91:2a:74:e9:ca:94:5b:cc:f4:df:8f:0a:6a:02:8e:65: bb:e6:94:12:46:b0:df:ec:ee:f5:10:be:c2:92:86:59:82:eb: 95:a4:57:73 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5NxdhcFZIYwjo7UUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYyNjIxMjQyM1oXDTI2MDkyNDIxMjQyM1owLzEtMCsGA1UEAxMk MmEwY2IwZjAtY2Y4YS00NzIxLThmZjYtYWVjYmZlNTNlNWUzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Au2wcYYyJwETh63d8xjCUn9tsrQXMRNtRZt fEkPOpHouOu3Qkxv3TbCbFf18Cc+hVbNEjz0M7TSL4/ni51rc5Nl+2fOL76DH5hY Tp3N3T1oxZPfciEArcIdOiHq3hRjWE3Yc/MwJ6x3SdiMrpPcYSChb11wlnVhJmmC kmOfLWq3DrYOzH5BWlVEWSecbUDRW7cqeUV1OK6LVmKpIv4LLFWu3XcEdAb8KJLf W+lM20LsWXzC+XoTmHsOKe0fsy4e8ohz4G/lkGB9ANUPuvT1mR+aYcNTpGXNnshW QyTBWUoqn2W8jJrcOeWItc5TlLgjEsPxHSfH6MDnjYrWHlJ4oQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBxxCmWyuShMTyBORs34I3nBZXVCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMzlkNjhiZDktNWU2Yi0z NWRmLWE5OTMtMzg0OTljNzg1Yjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAxMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGhy0XhrEw45WWvmQx5ZUOqdeg/k6WnMIfJDjqQqMvdgwhwB8jJf9lHO BVT8QRaxrrBZen9iuuu5vsFMqUhYnN+OeMXeSIinhSbMi3pG8I3FJ2n+NaT8iwGU 6OIf0il7fjtQKGjuQdLVBgAHGrOnkm2mPfsHLFlyH9K7H8mG41byk5hlNUxWmYB+ RUcImLGa+o5qAaJSoJn519HjhxymEwO9mpGi3wcqyXXn257szcJuX60qPfIARtGY 3HH8RhtSWuDxWbN/+xJf5JG2K3RLk+XGkhCzSVWc2RHMkSp06cqUW8z0348KagKO ZbvmlBJGsN/s7vUQvsKShlmC65WkV3M= -----END CERTIFICATE-----Generated at Mon Jul 13 10:33:10 2026 by rpki-client