$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fdaaff9-8278-3fd3-82d8-ace84b2c7319.roa File: 4fdaaff9-8278-3fd3-82d8-ace84b2c7319.roa (raw, json) Hash identifier: PgsDtyBzoIBgK1U6g8fU6CXwBoN/IOqcWRJUCPOz7RI= Subject key identifier: CB:C7:5A:DB:A3:1B:55:09:1A:94:DE:E5:C8:23:85:05:B8:AB:D9:48 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584CAE5EAF5978F8056938A18BF8 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fdaaff9-8278-3fd3-82d8-ace84b2c7319.roa Signing time: Thu 29 Jan 2026 02:00:32 +0000 ROA not before: Thu 29 Jan 2026 02:00:32 +0000 ROA not after: Wed 29 Apr 2026 01:00:32 +0000 asID: 27411 IP address blocks: 136.0.117.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Feb 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4c:ae:5e:af:59:78:f8:05:69:38:a1:8b:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jan 29 02:00:32 2026 GMT Not After : Apr 29 01:00:32 2026 GMT Subject: CN=b0f5eee2-a61f-4c94-a4b4-8e0c40c19b91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:ff:c7:57:bd:cb:f1:e5:fb:9a:87:6f:af:50: f6:a7:50:70:ed:9b:7e:16:e0:d0:dc:9b:e2:aa:b5: 84:5f:9c:9f:df:c9:72:84:c6:d0:17:91:2d:6d:5a: e0:ec:a1:11:65:8d:2f:7d:33:6d:f1:eb:17:4c:92: 95:17:27:4d:12:a4:86:54:2e:c7:d9:d0:01:79:15: de:2e:95:a6:0f:70:b6:31:e6:3a:5a:71:58:2f:f1: ed:5f:d5:4b:03:87:4d:ed:e6:79:d6:86:3d:17:3f: d2:a9:77:94:45:dd:42:8c:2b:25:03:35:e9:29:5b: 99:18:e0:8c:87:ff:66:16:2a:76:a9:a1:45:d5:25: da:57:8e:f2:52:ca:cf:d0:75:1d:27:e1:db:e3:96: 9d:df:a1:16:70:17:c9:16:a6:0b:8d:06:81:28:8c: 95:31:fa:16:e8:be:70:63:6f:b9:5d:ab:97:2d:9b: e5:cd:51:e1:10:e4:e3:1c:ef:80:01:e8:f6:68:24: 07:74:53:df:a4:00:67:58:77:2f:98:9e:1f:48:2c: b3:68:6d:4e:03:91:16:a3:b8:c3:b3:88:d4:63:76: 59:35:07:68:05:6c:94:31:74:bc:02:4b:04:df:9b: ce:2b:99:7c:22:db:4b:a1:b9:f5:a5:4e:73:31:da: b7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:C7:5A:DB:A3:1B:55:09:1A:94:DE:E5:C8:23:85:05:B8:AB:D9:48 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fdaaff9-8278-3fd3-82d8-ace84b2c7319.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.117.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 76:cd:c7:60:66:c6:e8:02:27:07:97:d1:d2:c0:84:46:2a:ee: af:e2:52:67:8d:bd:65:af:dc:5d:a4:b7:90:48:9e:ed:e9:cb: 9c:5b:2a:99:a9:e6:4f:4d:16:4e:e4:44:5b:c5:44:d1:b6:e4: 1e:ca:68:26:af:46:e6:33:09:58:27:b0:c9:19:fe:ec:f2:10: 7b:44:3b:26:67:e1:67:46:b5:e1:52:6d:c5:0a:d2:97:86:d6: 19:63:fa:d7:e9:14:ba:88:db:30:db:ed:f7:cf:9c:69:2e:34: d0:44:1a:01:49:cc:ca:fb:7e:35:25:ac:03:9e:67:14:73:26: 41:a9:eb:f8:26:b4:61:03:08:d3:1c:6b:2a:0e:74:9a:e3:64: 66:4b:d7:54:37:4a:7c:7c:21:af:f6:2a:0e:50:85:5b:da:aa: 64:16:9b:b5:1c:2d:e9:de:41:69:17:65:45:bd:30:6f:22:37: 2d:94:12:82:b3:d8:67:6c:bf:88:da:c2:ee:25:dc:cb:61:a4: 3a:b1:ab:c9:d5:cc:96:d7:36:b4:75:39:20:99:b8:ac:31:4b: 6b:d1:cf:7b:63:09:ff:d5:df:28:aa:61:cd:1a:17:54:2e:b0: a1:3a:c4:fb:c6:e0:d2:fa:1f:40:c0:c6:ae:fe:9d:5b:0a:bb: 9e:56:0d:23 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXq9ZePgFaTihi/gwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk YjBmNWVlZTItYTYxZi00Yzk0LWE0YjQtOGUwYzQwYzE5YjkxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP/HV73L8eX7modvr1D2p1Bw7Zt+FuDQ3Jvi qrWEX5yf38lyhMbQF5EtbVrg7KERZY0vfTNt8esXTJKVFydNEqSGVC7H2dABeRXe LpWmD3C2MeY6WnFYL/HtX9VLA4dN7eZ51oY9Fz/SqXeURd1CjCslAzXpKVuZGOCM h/9mFip2qaFF1SXaV47yUsrP0HUdJ+Hb45ad36EWcBfJFqYLjQaBKIyVMfoW6L5w Y2+5XauXLZvlzVHhEOTjHO+AAej2aCQHdFPfpABnWHcvmJ4fSCyzaG1OA5EWo7jD s4jUY3ZZNQdoBWyUMXS8AksE35vOK5l8IttLobn1pU5zMdq36QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFMvHWtujG1UJGpTe5cgjhQW4q9lIMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGZkYWFmZjktODI3OC0z ZmQzLTgyZDgtYWNlODRiMmM3MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB1MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHbNx2BmxugCJweX0dLAhEYq7q/iUmeNvWWv3F2kt5BInu3py5xbKpmp 5k9NFk7kRFvFRNG25B7KaCavRuYzCVgnsMkZ/uzyEHtEOyZn4WdGteFSbcUK0peG 1hlj+tfpFLqI2zDb7ffPnGkuNNBEGgFJzMr7fjUlrAOeZxRzJkGp6/gmtGEDCNMc ayoOdJrjZGZL11Q3Snx8Ia/2Kg5QhVvaqmQWm7UcLeneQWkXZUW9MG8iNy2UEoKz 2Gdsv4jawu4l3MthpDqxq8nVzJbXNrR1OSCZuKwxS2vRz3tjCf/V3yiqYc0aF1Qu sKE6xPvG4NL6H0DAxq7+nVsKu55WDSM= -----END CERTIFICATE-----Generated at Thu Feb 26 09:28:16 2026 by rpki-client