$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b01920e-01a4-3185-92c7-4e968c67915d.roa File: 8b01920e-01a4-3185-92c7-4e968c67915d.roa (raw, json) Hash identifier: 058++bDLzyvRhk34MED3k9EztGhIUB7K8taBVf0AzU4= Subject key identifier: 61:AE:F8:F4:AE:B2:E4:EF:74:08:AD:25:96:CD:5D:2D:33:C2:DB:F7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F9129B35B28DC213067C0BB20 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b01920e-01a4-3185-92c7-4e968c67915d.roa Signing time: Tue 20 Oct 2026 17:31:41 +0000 ROA not before: Tue 20 Oct 2026 17:31:41 +0000 ROA not after: Mon 18 Jan 2027 18:31:41 +0000 asID: 3561 IP address blocks: 136.0.107.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 05 Nov 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:91:29:b3:5b:28:dc:21:30:67:c0:bb:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 20 17:31:41 2026 GMT Not After : Jan 18 18:31:41 2027 GMT Subject: CN=ec70872e-e1b4-4a78-8269-9db4a6849cf5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:c6:65:8d:ab:a7:eb:d2:e0:4e:33:8b:4e:4f: c9:b0:0a:40:d9:e0:69:eb:f5:c1:6b:b4:97:5d:a1: 53:d8:45:27:80:85:cf:27:26:bd:01:1b:2e:2a:e6: dc:a7:9d:58:69:ed:70:49:25:b5:5b:5e:a0:46:45: 3d:47:78:8f:8f:72:f0:f4:3c:9b:fd:92:e1:e7:73: 2b:c1:73:b6:8d:d7:7a:e2:2d:21:db:64:be:49:92: 1c:b5:ef:77:b0:c0:71:02:bf:f8:57:47:29:a0:5c: 80:30:d5:bf:db:3c:f7:c7:b7:33:cd:d7:84:36:74: 5f:b6:ac:4b:49:8b:db:6d:41:f3:8d:92:6f:b0:84: ad:21:ec:b1:7f:87:af:92:a2:5a:14:f7:9b:82:3a: ab:51:2a:09:58:57:3d:c8:99:85:95:7c:76:4f:66: 70:fe:12:79:fc:26:6e:92:98:0b:36:c8:c1:09:9b: fb:b9:43:03:fa:50:73:35:c0:25:cd:d9:87:33:3c: 09:e6:12:a8:18:d7:a2:f1:57:48:25:7e:24:22:75: 2e:97:3e:2b:0b:f7:b6:40:bd:80:ac:f7:d2:14:59: 1b:cc:c7:4e:64:c1:42:ab:47:e6:11:d9:4f:d7:c5: 8c:57:4b:fd:53:32:a2:83:33:f6:30:7d:1d:34:0b: c9:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:AE:F8:F4:AE:B2:E4:EF:74:08:AD:25:96:CD:5D:2D:33:C2:DB:F7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/8b01920e-01a4-3185-92c7-4e968c67915d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.107.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 78:a6:9c:2d:15:0c:75:73:de:f3:ec:79:cd:7b:d1:b2:94:23: ff:9e:c6:81:1d:28:71:ed:51:6b:66:47:43:98:b7:85:fc:b1: 08:79:38:e7:16:a8:dc:b2:7a:43:f0:cf:10:34:16:dd:ae:4c: 79:41:79:55:30:e1:dc:a9:61:38:27:4e:3e:f0:2e:48:50:93: 8d:e5:43:86:51:12:94:a2:da:03:d5:3d:6a:52:93:95:a9:54: 4e:b1:83:b6:40:85:04:2c:14:76:5f:f2:e9:e8:09:66:3a:db: e6:3e:b1:b8:72:87:af:ca:bb:df:e0:17:71:39:37:2e:21:f7: 23:86:74:9a:6a:86:2a:a7:3f:da:a6:51:cf:37:be:6d:5e:89: d1:01:50:2f:89:06:f0:89:ae:cd:55:99:50:55:53:9a:b7:b2: 1b:be:a5:e9:94:fa:d7:d7:d4:90:e1:a7:57:e6:e4:88:ae:21: b3:06:39:ee:0a:dd:86:9e:94:11:98:a8:c8:60:a3:54:05:44: 36:74:c3:ae:bf:36:b5:5e:1d:2b:74:48:44:27:fb:e7:6d:b1: eb:14:c5:84:f0:f6:22:9e:3c:29:8d:02:17:4c:98:f3:64:37: a1:9a:bb:fb:bb:45:52:a5:76:52:08:03:f2:17:87:7d:a6:33: d2:21:01:03 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+RKbNbKNwhMGfAuyAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAyMDE3MzE0MVoXDTI3MDExODE4MzE0MVowLzEtMCsGA1UEAxMk ZWM3MDg3MmUtZTFiNC00YTc4LTgyNjktOWRiNGE2ODQ5Y2Y1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu8Zljaun69LgTjOLTk/JsApA2eBp6/XBa7SX XaFT2EUngIXPJya9ARsuKubcp51Yae1wSSW1W16gRkU9R3iPj3Lw9Dyb/ZLh53Mr wXO2jdd64i0h22S+SZIcte93sMBxAr/4V0cpoFyAMNW/2zz3x7czzdeENnRftqxL SYvbbUHzjZJvsIStIeyxf4evkqJaFPebgjqrUSoJWFc9yJmFlXx2T2Zw/hJ5/CZu kpgLNsjBCZv7uUMD+lBzNcAlzdmHMzwJ5hKoGNei8VdIJX4kInUulz4rC/e2QL2A rPfSFFkbzMdOZMFCq0fmEdlP18WMV0v9UzKigzP2MH0dNAvJDwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGGu+PSusuTvdAitJZbNXS0zwtv3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOGIwMTkyMGUtMDFhNC0z MTg1LTkyYzctNGU5NjhjNjc5MTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABrMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHimnC0VDHVz3vPsec170bKUI/+exoEdKHHtUWtmR0OYt4X8sQh5OOcW qNyyekPwzxA0Ft2uTHlBeVUw4dypYTgnTj7wLkhQk43lQ4ZREpSi2gPVPWpSk5Wp VE6xg7ZAhQQsFHZf8unoCWY62+Y+sbhyh6/Ku9/gF3E5Ny4h9yOGdJpqhiqnP9qm Uc83vm1eidEBUC+JBvCJrs1VmVBVU5q3shu+pemU+tfX1JDhp1fm5IiuIbMGOe4K 3YaelBGYqMhgo1QFRDZ0w66/NrVeHSt0SEQn++dtsesUxYTw9iKePCmNAhdMmPNk N6Gau/u7RVKldlIIA/IXh32mM9IhAQM= -----END CERTIFICATE-----Generated at Wed Nov 4 14:26:13 2026 by rpki-client