$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d60f8869-2502-3b69-9c2d-2b4c1ccdbdc3.roa File: d60f8869-2502-3b69-9c2d-2b4c1ccdbdc3.roa (raw, json) Hash identifier: ZLQ+5+7i7FHXjD/50dz+5PIHgJsQD/DMYGUGLsEJyRM= Subject key identifier: 58:CD:D3:82:77:69:CE:86:CA:D7:3F:25:95:BD:89:86:8E:36:55:51 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E564F7F5248797E8319C27980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d60f8869-2502-3b69-9c2d-2b4c1ccdbdc3.roa Signing time: Mon 29 Jun 2026 22:48:12 +0000 ROA not before: Mon 29 Jun 2026 22:48:12 +0000 ROA not after: Sun 27 Sep 2026 22:48:12 +0000 asID: 812 IP address blocks: 136.0.209.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 14 Jul 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:56:4f:7f:52:48:79:7e:83:19:c2:79:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 29 22:48:12 2026 GMT Not After : Sep 27 22:48:12 2026 GMT Subject: CN=4afc8a5c-0b38-4bfa-b149-dc9931318bbe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:b5:5c:cc:95:dc:d8:6b:4e:4c:21:b6:bb:0e: 12:bd:28:bf:20:ee:88:dc:d4:a2:c8:0e:a3:ef:10: c5:9c:60:42:8d:8d:7d:60:7d:df:48:00:99:7d:f6: 79:ef:95:75:b3:c7:47:a2:b1:b5:d7:46:79:dc:66: 6d:fa:14:0a:7f:51:5e:a0:fa:7e:41:8a:2c:3b:f6: e7:46:34:14:a8:e4:3f:9b:ab:03:f0:6d:a8:ad:15: c5:7a:40:2f:2c:c6:aa:54:85:0e:22:a1:62:1b:24: 11:5b:7a:1d:e4:aa:58:2c:64:dd:80:85:90:1d:01: d3:65:fa:97:9c:09:7b:9c:5a:53:05:9c:f3:ae:0b: e7:41:48:e0:56:4e:3b:1e:ec:32:26:7e:59:82:0f: 64:73:91:fc:73:20:34:3b:f2:96:29:ac:a8:35:ee: 2d:96:bf:17:37:bc:d3:15:0f:bd:14:0f:c3:58:82: fe:ae:8b:fd:0c:ed:26:df:c6:07:ce:53:e6:9f:d4: 61:18:38:b1:a0:02:79:a0:31:15:16:e6:79:17:ea: 0b:20:36:1d:2e:85:b9:e8:20:b0:53:5e:c9:e2:02: c0:7d:76:21:53:56:2a:66:bb:e4:b9:c2:9f:3a:81: 72:c6:7d:48:83:de:d1:20:17:72:df:bc:9c:53:bd: 3a:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:CD:D3:82:77:69:CE:86:CA:D7:3F:25:95:BD:89:86:8E:36:55:51 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d60f8869-2502-3b69-9c2d-2b4c1ccdbdc3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.209.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 67:da:d2:fc:fa:03:db:66:b5:42:ae:8d:1c:d8:99:95:8d:73: b6:a2:cc:3b:04:ee:52:90:7f:cc:40:f9:d4:a6:ee:db:dc:17: ec:ee:47:b5:27:6e:24:79:5c:13:67:b8:fc:d5:1a:78:fd:c4: 8a:e1:ca:3a:a9:e8:eb:82:ab:da:12:38:4e:20:fd:38:3c:5f: f8:a3:b9:41:ce:28:27:0c:81:80:c3:00:cb:75:bf:0e:a3:ea: 21:b6:53:58:07:45:f9:4e:af:46:97:fc:c2:fa:d5:57:47:20: 6d:21:13:c4:15:28:49:25:0c:51:87:0d:1f:28:3c:e4:e0:16: 86:b5:a6:7b:a5:6a:f6:43:9b:06:10:d0:9f:fe:7d:cb:25:a2: 03:e5:c9:51:f2:62:51:75:24:ea:79:90:87:6c:db:ad:03:7a: a1:d6:3b:72:29:a3:8f:c9:4c:7f:18:c2:d9:76:80:f3:e1:c8: 79:ed:5e:e3:29:a1:08:38:6f:7e:b4:36:c7:42:51:19:3c:6b: fe:73:4e:27:0f:ac:e1:71:b7:15:b4:1f:41:66:ce:5a:d7:0b: 74:1c:07:d3:46:d9:d7:77:5c:b7:ef:a0:bc:8a:33:b4:0a:92: 9d:cb:1e:b8:6c:57:89:7b:12:e7:5e:a4:ab:c4:84:22:9b:3a: 7a:a4:9a:2d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5WT39SSHl+gxnCeYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYyOTIyNDgxMloXDTI2MDkyNzIyNDgxMlowLzEtMCsGA1UEAxMk NGFmYzhhNWMtMGIzOC00YmZhLWIxNDktZGM5OTMxMzE4YmJlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy7VczJXc2GtOTCG2uw4SvSi/IO6I3NSiyA6j 7xDFnGBCjY19YH3fSACZffZ575V1s8dHorG110Z53GZt+hQKf1FeoPp+QYosO/bn RjQUqOQ/m6sD8G2orRXFekAvLMaqVIUOIqFiGyQRW3od5KpYLGTdgIWQHQHTZfqX nAl7nFpTBZzzrgvnQUjgVk47HuwyJn5Zgg9kc5H8cyA0O/KWKayoNe4tlr8XN7zT FQ+9FA/DWIL+rov9DO0m38YHzlPmn9RhGDixoAJ5oDEVFuZ5F+oLIDYdLoW56CCw U17J4gLAfXYhU1YqZrvkucKfOoFyxn1Ig97RIBdy37ycU7069QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFjN04J3ac6Gytc/JZW9iYaONlVRMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDYwZjg4NjktMjUwMi0z YjY5LTljMmQtMmI0YzFjY2RiZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADRMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGfa0vz6A9tmtUKujRzYmZWNc7aizDsE7lKQf8xA+dSm7tvcF+zuR7Un biR5XBNnuPzVGnj9xIrhyjqp6OuCq9oSOE4g/Tg8X/ijuUHOKCcMgYDDAMt1vw6j 6iG2U1gHRflOr0aX/ML61VdHIG0hE8QVKEklDFGHDR8oPOTgFoa1pnulavZDmwYQ 0J/+fcslogPlyVHyYlF1JOp5kIds260DeqHWO3Ipo4/JTH8Ywtl2gPPhyHntXuMp oQg4b360NsdCURk8a/5zTicPrOFxtxW0H0FmzlrXC3QcB9NG2dd3XLfvoLyKM7QK kp3LHrhsV4l7EudepKvEhCKbOnqkmi0= -----END CERTIFICATE-----Generated at Mon Jul 13 10:33:15 2026 by rpki-client