$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6693786-64a7-3adc-a3a6-e1e95649f237.roa File: d6693786-64a7-3adc-a3a6-e1e95649f237.roa (raw, json) Hash identifier: FQjgT/V7SD+6QzYH95SF7ql+7RPy9rTh74poqHgjWmo= Subject key identifier: 96:E7:13:9A:20:8F:EB:6A:61:FB:1F:87:AA:8B:14:E4:35:74:38:E1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EF01CF6A920FBA56549F249C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6693786-64a7-3adc-a3a6-e1e95649f237.roa Signing time: Mon 24 Aug 2026 01:00:12 +0000 ROA not before: Mon 24 Aug 2026 01:00:12 +0000 ROA not after: Sun 22 Nov 2026 02:00:12 +0000 asID: 3949 IP address blocks: 136.0.69.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f0:1c:f6:a9:20:fb:a5:65:49:f2:49:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 24 01:00:12 2026 GMT Not After : Nov 22 02:00:12 2026 GMT Subject: CN=ecbd3159-7cb8-4383-baeb-5d97757beced Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:33:5e:b1:8e:6f:0e:b3:e1:a3:cc:c7:a9:fd: af:ff:48:10:fe:3b:ba:82:b3:78:4f:b2:f3:5f:fb: 23:45:c0:5f:f9:93:6e:9a:c9:82:76:e0:a2:5e:41: 10:00:73:ce:58:95:17:9c:2f:64:0c:db:c1:61:8b: b5:d7:cc:52:ff:74:90:8b:12:17:48:71:5b:c6:6c: 0d:11:96:68:f5:fb:28:a1:d0:df:18:ba:15:8f:c0: 29:19:6e:d7:bc:e6:29:23:1a:4f:3d:71:c6:f7:24: 79:16:fa:3d:c3:e5:ff:86:aa:42:fa:d1:da:e2:3a: 31:f7:79:05:83:80:69:50:58:86:4f:60:02:c6:5f: f4:38:eb:32:33:0b:e0:e8:da:96:f4:be:07:51:0e: b7:9e:ed:35:c6:5a:2d:c5:e7:38:72:83:a5:e4:b9: ca:2d:b6:92:9f:49:ba:c9:ca:a8:26:f0:2e:b4:84: 4c:5f:9d:e4:15:18:b1:f0:9b:ac:3e:94:cb:c8:0b: 3e:69:d9:96:89:cc:24:f1:8e:0b:63:ae:03:63:bf: 33:37:42:a4:49:c5:64:a1:29:fd:07:30:2c:95:19: 2d:5a:9a:61:84:e1:e1:8f:45:fe:57:37:71:73:22: 06:09:77:69:06:2a:7e:2a:81:06:4d:89:d1:75:7e: 39:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E7:13:9A:20:8F:EB:6A:61:FB:1F:87:AA:8B:14:E4:35:74:38:E1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/d6693786-64a7-3adc-a3a6-e1e95649f237.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.69.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3b:d2:d2:e5:b3:9c:1b:c8:52:a6:81:4a:00:77:51:cc:50:ec: 2f:7a:f8:7b:02:12:7c:13:05:44:76:ab:f1:d8:91:9a:45:89: 64:43:36:25:72:bc:29:45:7d:14:8a:b8:d7:9d:a3:f8:70:69: 54:4e:f9:90:1c:a0:26:6f:b3:2b:95:f9:3c:04:3b:0d:20:35: 45:10:31:d9:d6:ba:94:a7:df:b5:65:d6:87:ff:a3:11:11:f7: 12:e5:88:70:51:70:a8:89:fa:f1:22:51:be:04:4b:4e:66:78: b6:c1:7f:7c:f4:ac:10:2d:a7:4a:37:6e:d9:cf:b5:9a:21:91: bc:ce:a2:c8:fc:06:e0:7c:60:2a:f8:40:32:a3:c1:ec:99:7b: 78:e5:7a:ae:d1:6d:29:16:53:10:0f:b7:4b:f5:10:f3:8e:71: ba:7d:be:f7:6c:cb:d4:63:9b:b9:f3:e1:fe:ff:d8:41:53:fe: 05:b3:40:94:bb:48:18:26:62:91:dd:47:68:b0:e9:81:e6:ab: c2:cb:ca:80:16:b6:f4:5d:52:fe:b7:c7:94:f1:9a:b9:67:c9: f0:c1:cc:14:62:fb:e6:02:9a:9e:0b:75:37:68:a3:dd:ec:75: f4:c6:1f:4c:39:ce:74:bb:e6:87:4a:c6:29:e5:00:5f:03:f5: cc:ac:bf:51 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7wHPapIPulZUnyScAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgyNDAxMDAxMloXDTI2MTEyMjAyMDAxMlowLzEtMCsGA1UEAxMk ZWNiZDMxNTktN2NiOC00MzgzLWJhZWItNWQ5Nzc1N2JlY2VkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDNesY5vDrPho8zHqf2v/0gQ/ju6grN4T7Lz X/sjRcBf+ZNumsmCduCiXkEQAHPOWJUXnC9kDNvBYYu118xS/3SQixIXSHFbxmwN EZZo9fsoodDfGLoVj8ApGW7XvOYpIxpPPXHG9yR5Fvo9w+X/hqpC+tHa4jox93kF g4BpUFiGT2ACxl/0OOsyMwvg6NqW9L4HUQ63nu01xlotxec4coOl5LnKLbaSn0m6 ycqoJvAutIRMX53kFRix8JusPpTLyAs+admWicwk8Y4LY64DY78zN0KkScVkoSn9 BzAslRktWpphhOHhj0X+VzdxcyIGCXdpBip+KoEGTYnRdX458wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJbnE5ogj+tqYfsfh6qLFOQ1dDjhMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZDY2OTM3ODYtNjRhNy0z YWRjLWEzYTYtZTFlOTU2NDlmMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABFMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADvS0uWznBvIUqaBSgB3UcxQ7C96+HsCEnwTBUR2q/HYkZpFiWRDNiVy vClFfRSKuNedo/hwaVRO+ZAcoCZvsyuV+TwEOw0gNUUQMdnWupSn37Vl1of/oxER 9xLliHBRcKiJ+vEiUb4ES05meLbBf3z0rBAtp0o3btnPtZohkbzOosj8BuB8YCr4 QDKjweyZe3jleq7RbSkWUxAPt0v1EPOOcbp9vvdsy9Rjm7nz4f7/2EFT/gWzQJS7 SBgmYpHdR2iw6YHmq8LLyoAWtvRdUv63x5TxmrlnyfDBzBRi++YCmp4LdTdoo93s dfTGH0w5znS75odKxinlAF8D9cysv1E= -----END CERTIFICATE-----Generated at Thu Aug 27 13:17:10 2026 by rpki-client