$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/899b3125-ee5a-3c4e-abbe-47e77fac20a0.roa File: 899b3125-ee5a-3c4e-abbe-47e77fac20a0.roa (raw, json) Hash identifier: tYT4te47Ks9roi/o3Rf5GigarrZN5uz9hwwSz0wCSJw= Subject key identifier: 61:32:DF:2F:9F:88:E6:25:13:E4:52:04:E8:AF:E6:7F:EB:12:40:9B Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EC63C7530E12923E68C755780 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/899b3125-ee5a-3c4e-abbe-47e77fac20a0.roa Signing time: Sun 09 Aug 2026 01:00:12 +0000 ROA not before: Sun 09 Aug 2026 01:00:12 +0000 ROA not after: Sat 07 Nov 2026 02:00:12 +0000 asID: 11798 IP address blocks: 136.0.71.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c6:3c:75:30:e1:29:23:e6:8c:75:57:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 9 01:00:12 2026 GMT Not After : Nov 7 02:00:12 2026 GMT Subject: CN=2890b421-54b6-4fa4-8685-1d8fbd8b8594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:1c:37:b5:86:9a:64:6e:ec:29:d1:de:5b:2e: db:86:f3:d7:f3:2b:79:be:ef:13:81:e4:d4:0e:44: 4d:7d:c2:46:50:ae:5d:2a:20:93:96:78:3c:d3:30: 50:ef:a6:ba:f4:38:34:35:f9:32:c7:30:c5:79:50: 00:dd:17:14:79:89:5f:5b:2f:23:57:e1:d1:2c:ff: b4:05:66:99:80:52:9e:89:76:41:45:52:fe:41:bb: 9c:3b:e2:0e:c5:a1:a0:0f:eb:7b:a2:2c:d2:64:dc: ac:05:89:c2:98:36:1d:4c:ea:ed:20:c4:20:26:15: e2:e1:d9:2b:af:ec:1b:a0:9e:df:71:70:af:4d:c0: d1:4a:98:e3:e0:e0:4d:a8:d6:7d:68:2c:bb:d5:4e: 6a:9b:8c:9b:87:77:5e:f1:e9:0a:70:d8:16:ca:47: be:cd:5d:df:8f:87:4c:33:4c:ef:63:86:64:42:d4: ce:99:26:ca:d8:96:da:c3:5b:36:c5:93:f1:05:c9: 1b:4c:ff:83:26:e4:b9:af:af:03:42:b7:b3:3c:24: 58:5c:9e:7c:5f:e5:15:9c:f8:15:11:0b:a1:50:d2: 3d:72:eb:66:bd:1a:8c:5c:5a:14:54:c6:7f:78:e8: 5c:47:57:95:59:9d:e1:60:6a:89:7c:53:40:62:f1: ac:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:32:DF:2F:9F:88:E6:25:13:E4:52:04:E8:AF:E6:7F:EB:12:40:9B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/899b3125-ee5a-3c4e-abbe-47e77fac20a0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.71.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:4e:7f:80:d6:d9:57:15:c8:f4:b1:ba:c2:f8:64:db:62:d6: 8b:0e:b9:85:70:09:fa:13:ea:04:21:ec:49:a8:5c:73:e4:9b: 01:b2:55:7b:30:7b:78:81:bb:86:5e:d8:50:63:c6:46:78:61: d2:02:d0:c1:87:b6:a3:1f:56:75:13:e4:d1:01:4e:30:80:df: a4:ef:2b:c9:b8:51:49:f3:26:51:b9:06:dd:8a:94:35:8d:34: 08:69:71:da:88:dd:61:c5:07:92:5d:cf:23:9f:a8:c7:4e:03: 90:bf:8a:2b:ef:70:02:9c:49:08:48:10:d8:d2:30:b8:24:58: 85:a7:be:04:9b:c8:a7:9e:e0:50:67:8d:a7:de:43:bd:69:bf: 0b:e4:19:0a:91:4e:4e:91:81:bb:ce:76:ce:b5:cb:5e:f7:61: 00:7d:70:19:57:48:39:9e:1f:41:52:19:98:af:10:32:f1:6b: aa:b5:e9:21:33:2c:66:b5:05:41:7e:a1:e8:b7:7f:dd:fe:36: 3a:34:9f:6e:70:f4:e0:fb:a0:2e:d6:28:35:db:24:44:01:86: 65:ca:2e:aa:c4:2c:2a:ee:03:12:b5:34:76:b2:78:fb:5c:64: 2e:84:93:1e:fd:51:c1:9e:29:fa:61:ce:e9:37:86:e6:82:c2: 42:f5:7f:eb -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7GPHUw4Skj5ox1V4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgwOTAxMDAxMloXDTI2MTEwNzAyMDAxMlowLzEtMCsGA1UEAxMk Mjg5MGI0MjEtNTRiNi00ZmE0LTg2ODUtMWQ4ZmJkOGI4NTk0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhxw3tYaaZG7sKdHeWy7bhvPX8yt5vu8TgeTU DkRNfcJGUK5dKiCTlng80zBQ76a69Dg0NfkyxzDFeVAA3RcUeYlfWy8jV+HRLP+0 BWaZgFKeiXZBRVL+QbucO+IOxaGgD+t7oizSZNysBYnCmDYdTOrtIMQgJhXi4dkr r+wboJ7fcXCvTcDRSpjj4OBNqNZ9aCy71U5qm4ybh3de8ekKcNgWyke+zV3fj4dM M0zvY4ZkQtTOmSbK2Jbaw1s2xZPxBckbTP+DJuS5r68DQrezPCRYXJ58X+UVnPgV EQuhUNI9cutmvRqMXFoUVMZ/eOhcR1eVWZ3hYGqJfFNAYvGsvwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGEy3y+fiOYlE+RSBOiv5n/rEkCbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODk5YjMxMjUtZWU1YS0z YzRlLWFiYmUtNDdlNzdmYWMyMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABHMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGlOf4DW2VcVyPSxusL4ZNti1osOuYVwCfoT6gQh7EmoXHPkmwGyVXsw e3iBu4Ze2FBjxkZ4YdIC0MGHtqMfVnUT5NEBTjCA36TvK8m4UUnzJlG5Bt2KlDWN NAhpcdqI3WHFB5JdzyOfqMdOA5C/iivvcAKcSQhIENjSMLgkWIWnvgSbyKee4FBn jafeQ71pvwvkGQqRTk6RgbvOds61y173YQB9cBlXSDmeH0FSGZivEDLxa6q16SEz LGa1BUF+oei3f93+Njo0n25w9OD7oC7WKDXbJEQBhmXKLqrELCruAxK1NHayePtc ZC6Ekx79UcGeKfphzuk3huaCwkL1f+s= -----END CERTIFICATE-----Generated at Thu Aug 27 15:16:05 2026 by rpki-client