$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa File: 9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa (raw, json) Hash identifier: GWmftMXmnxcLT2m8BrLQzVa7O3eh+3E9zQFEgPvc5yE= Subject key identifier: 27:96:6B:61:21:8C:76:45:FA:E8:3B:04:0A:1D:C1:68:77:21:04:DB Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E3324B380C8759CA108C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 136.0.220.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:33:24:b3:80:c8:75:9c:a1:08:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=66548bb3-1b25-483d-a3fc-cc15a2444a18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:8d:0c:4e:1b:f6:7d:46:e5:1b:93:6d:ca:d9: 61:b2:9a:75:d2:df:ff:9d:7d:2a:84:9e:d1:6d:92: c7:6d:59:51:3f:51:f5:c9:1d:0c:bb:61:62:38:6e: af:94:d2:67:65:72:8e:a7:0f:b8:f5:73:b9:4e:27: 43:28:56:1e:af:a3:d9:33:15:b0:2f:da:8b:e5:0b: 25:77:55:e0:84:55:42:d7:52:00:1e:06:a4:18:89: b7:6e:67:f2:cc:b0:85:02:65:f5:e3:2d:78:b2:23: 08:a8:c8:b3:7e:4a:7c:41:cc:f1:d0:f1:6a:f3:5f: 56:34:85:91:3e:e7:57:62:7e:6d:bf:e9:bf:4e:36: ac:a1:3e:a1:9e:a8:27:d7:d4:3b:69:41:04:9a:a4: 53:f9:37:20:ee:bb:ba:92:16:34:82:69:02:5d:c1: fe:3b:1a:d5:d4:cb:85:8c:83:aa:f7:50:3b:8d:a5: 62:e1:23:eb:76:8b:dd:e5:ca:46:29:c3:ca:f2:8c: a3:d4:f8:a9:77:b6:90:83:ca:c3:c6:fd:5b:39:a7: 6b:b5:ca:29:74:72:5a:2d:f9:bf:e7:98:3a:03:80: ca:45:1e:6b:6d:db:27:23:2c:62:90:07:b8:23:71: d0:29:83:f6:8f:27:a5:70:0c:c6:16:8c:16:67:03: 76:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:96:6B:61:21:8C:76:45:FA:E8:3B:04:0A:1D:C1:68:77:21:04:DB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/9b6a2297-0dd3-32ab-b6dd-a9b4a359073d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.220.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption a5:3d:d4:25:79:72:08:9c:f2:78:0b:e1:60:ca:6a:60:c2:01: 48:b6:9a:18:ac:4c:02:6b:6d:69:8e:e3:3d:89:3d:d9:d2:83: d3:e1:8b:46:13:bc:62:2a:e3:4b:ea:39:7c:2d:96:9f:36:14: e3:be:1f:d1:e3:48:47:30:fc:8c:b3:06:84:85:d8:e8:68:c7: 10:bb:36:6f:fb:d0:91:3d:d9:89:d8:0f:5b:35:c7:b7:70:c7: 8c:d5:61:b9:eb:f5:d3:c5:27:18:18:1b:fc:10:c6:81:ee:65: a8:3f:a9:f7:4c:63:50:3b:a5:3b:88:b3:75:00:fd:f7:0d:68: e4:68:b0:8c:25:72:08:2f:33:da:bd:0f:78:ed:64:0f:6e:ae: b4:da:30:68:74:08:9f:f2:9b:43:50:0a:79:0a:95:97:3a:df: dc:75:77:6c:3b:02:43:b1:10:14:5b:f9:39:40:1e:9f:29:ee: 76:22:45:aa:80:2e:d9:ef:8f:de:d8:cf:30:de:95:e9:7d:dd: 14:e5:a1:37:de:67:cb:40:cd:55:0a:18:8c:a6:32:23:2d:fd: 4f:ac:d6:df:1f:de:88:b1:8b:9a:0e:aa:e9:3e:1b:fe:80:3b: 8b:1b:40:e3:4f:2f:fb:a4:30:39:28:d9:03:47:25:87:6f:4a: 2d:c3:16:df -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfjMks4DIdZyhCMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk NjY1NDhiYjMtMWIyNS00ODNkLWEzZmMtY2MxNWEyNDQ0YTE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyo0MThv2fUblG5Ntytlhspp10t//nX0qhJ7R bZLHbVlRP1H1yR0Mu2FiOG6vlNJnZXKOpw+49XO5TidDKFYer6PZMxWwL9qL5Qsl d1XghFVC11IAHgakGIm3bmfyzLCFAmX14y14siMIqMizfkp8Qczx0PFq819WNIWR PudXYn5tv+m/TjasoT6hnqgn19Q7aUEEmqRT+Tcg7ru6khY0gmkCXcH+OxrV1MuF jIOq91A7jaVi4SPrdovd5cpGKcPK8oyj1Pipd7aQg8rDxv1bOadrtcopdHJaLfm/ 55g6A4DKRR5rbdsnIyxikAe4I3HQKYP2jyelcAzGFowWZwN2sQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCeWa2EhjHZF+ug7BAodwWh3IQTbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvOWI2YTIyOTctMGRkMy0z MmFiLWI2ZGQtYTliNGEzNTkwNzNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAKU91CV5cgic8ngL4WDKamDCAUi2mhisTAJrbWmO4z2JPdnSg9Phi0YT vGIq40vqOXwtlp82FOO+H9HjSEcw/IyzBoSF2OhoxxC7Nm/70JE92YnYD1s1x7dw x4zVYbnr9dPFJxgYG/wQxoHuZag/qfdMY1A7pTuIs3UA/fcNaORosIwlcggvM9q9 D3jtZA9urrTaMGh0CJ/ym0NQCnkKlZc639x1d2w7AkOxEBRb+TlAHp8p7nYiRaqA Ltnvj97YzzDelel93RTloTfeZ8tAzVUKGIymMiMt/U+s1t8f3oixi5oOquk+G/6A O4sbQONPL/ukMDko2QNHJYdvSi3DFt8= -----END CERTIFICATE-----Generated at Tue Oct 13 08:02:48 2026 by rpki-client