$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4924da7-2aff-3315-9010-8900f52e0b7a.roa File: b4924da7-2aff-3315-9010-8900f52e0b7a.roa (raw, json) Hash identifier: cdFoBobVx7aJsiLJ9PGfzK1BdMBykaAzAsvuZQ5If9g= Subject key identifier: 9F:AF:9B:12:B1:CC:85:35:7F:D0:C8:D4:F9:16:C1:72:45:73:9F:92 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E7A64DB13B9DB14B6C1B54D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4924da7-2aff-3315-9010-8900f52e0b7a.roa Signing time: Sun 12 Jul 2026 21:00:13 +0000 ROA not before: Sun 12 Jul 2026 21:00:13 +0000 ROA not after: Sat 10 Oct 2026 21:00:13 +0000 asID: 206150 IP address blocks: 136.0.72.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:7a:64:db:13:b9:db:14:b6:c1:b5:4d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jul 12 21:00:13 2026 GMT Not After : Oct 10 21:00:13 2026 GMT Subject: CN=b6ff02a7-8483-4a8e-9ba7-cd7689a9a100 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:be:e1:07:09:c2:9b:8a:8e:be:6d:58:1e: 3d:09:2e:8f:c5:cc:c5:6e:df:cb:0b:ef:b3:45:dd: a0:ff:50:d6:72:0c:35:40:d9:ff:36:7c:41:81:c2: e6:6e:f7:ea:75:de:da:af:31:1f:34:e2:a7:37:a9: 04:cd:f9:1e:22:2d:0f:f9:be:68:f1:3e:4a:d1:01: e7:e5:31:41:3b:95:9d:70:bb:38:2f:91:5f:00:68: 50:a2:eb:64:a9:cd:ce:3d:8c:c2:c5:ce:d2:8b:2a: 01:96:9b:77:a2:22:91:91:64:a7:23:8f:31:55:38: 92:eb:35:e9:f1:cf:60:ed:a6:3d:96:b7:44:5d:29: 84:70:9a:35:39:a5:0c:a9:03:51:ed:29:03:ab:b9: 0b:4c:3e:91:1b:81:1f:08:c9:34:a5:38:c7:55:59: 9c:95:33:f5:3e:48:9a:28:7f:08:ac:ab:82:0f:90: ef:8a:ce:53:66:d5:c0:b7:10:9a:25:c1:02:79:ef: 1b:aa:d7:43:cf:b7:2e:85:16:54:4f:8a:d7:b7:3e: 42:c8:48:93:af:7e:ee:d1:6e:37:76:9f:cf:7a:05: 3d:12:c4:53:4b:b8:d5:fa:00:82:c2:69:93:ba:8a: 5f:f2:5a:5e:35:3f:ad:62:d7:0d:2f:47:76:2d:84: 21:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:AF:9B:12:B1:CC:85:35:7F:D0:C8:D4:F9:16:C1:72:45:73:9F:92 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b4924da7-2aff-3315-9010-8900f52e0b7a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.72.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:be:8b:80:26:43:27:48:cf:93:07:e6:73:ca:0d:20:6e:db: a9:da:0a:47:81:31:1d:78:eb:04:4c:77:67:92:0d:3c:27:e9: 06:05:3a:b7:69:35:0d:ef:b9:e5:74:dd:df:d6:25:69:ca:02: 22:25:bf:03:d7:e7:d6:9d:bb:af:b5:97:8b:1a:90:89:fe:ae: b4:6d:4b:38:22:7d:ea:9c:e3:dd:70:73:ac:0f:3e:22:77:76: f8:c2:a7:1c:7e:c7:43:cc:99:14:e9:8d:a9:bf:77:a8:27:60: f6:c1:df:b8:e6:39:2c:dd:32:10:32:ee:55:a1:34:82:9b:0b: bf:25:ba:24:7c:5e:03:a6:26:18:53:b7:df:e3:a4:1c:5e:c8: 0d:25:c4:59:19:48:fc:5d:fb:58:e2:02:9e:6a:8c:a1:63:26: d4:11:ba:9e:fa:f0:44:c8:fc:81:64:2c:ee:52:38:b5:c9:46: 8d:9b:eb:53:25:6e:c0:9d:d9:c0:5e:bc:90:b8:5e:b7:0e:dd: fa:5d:5d:7e:d7:ea:b3:24:db:56:43:7d:f9:3a:c3:f0:b7:60: 95:ee:6c:04:bd:92:b9:f4:95:be:bb:d4:cc:03:0c:ed:2b:8d: 42:6e:bc:66:e5:da:d9:d8:a5:cf:3a:50:63:54:71:04:d5:36: 6a:79:32:af -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE56ZNsTudsUtsG1TYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDcxMjIxMDAxM1oXDTI2MTAxMDIxMDAxM1owLzEtMCsGA1UEAxMk YjZmZjAyYTctODQ4My00YThlLTliYTctY2Q3Njg5YTlhMTAwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0q+4QcJwpuKjr5tWB49CS6PxczFbt/LC++z Rd2g/1DWcgw1QNn/NnxBgcLmbvfqdd7arzEfNOKnN6kEzfkeIi0P+b5o8T5K0QHn 5TFBO5WdcLs4L5FfAGhQoutkqc3OPYzCxc7SiyoBlpt3oiKRkWSnI48xVTiS6zXp 8c9g7aY9lrdEXSmEcJo1OaUMqQNR7SkDq7kLTD6RG4EfCMk0pTjHVVmclTP1Pkia KH8IrKuCD5Dvis5TZtXAtxCaJcECee8bqtdDz7cuhRZUT4rXtz5CyEiTr37u0W43 dp/PegU9EsRTS7jV+gCCwmmTuopf8lpeNT+tYtcNL0d2LYQhwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJ+vmxKxzIU1f9DI1PkWwXJFc5+SMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjQ5MjRkYTctMmFmZi0z MzE1LTkwMTAtODkwMGY1MmUwYjdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAm+i4AmQydIz5MH5nPKDSBu26naCkeBMR146wRMd2eSDTwn6QYFOrdp NQ3vueV03d/WJWnKAiIlvwPX59adu6+1l4sakIn+rrRtSzgifeqc491wc6wPPiJ3 dvjCpxx+x0PMmRTpjam/d6gnYPbB37jmOSzdMhAy7lWhNIKbC78luiR8XgOmJhhT t9/jpBxeyA0lxFkZSPxd+1jiAp5qjKFjJtQRup768ETI/IFkLO5SOLXJRo2b61Ml bsCd2cBevJC4XrcO3fpdXX7X6rMk21ZDffk6w/C3YJXubAS9krn0lb671MwDDO0r jUJuvGbl2tnYpc86UGNUcQTVNmp5Mq8= -----END CERTIFICATE-----Generated at Mon Jul 13 11:40:56 2026 by rpki-client