$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa File: f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa (raw, json) Hash identifier: NZjYeRO9j9IliU64v1eHZBn6rUOXoBiMWW7qor39USY= Subject key identifier: 1D:13:D8:F9:AB:8F:44:7E:13:55:94:22:35:29:E5:6E:03:7C:91:13 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584DF4DB80B7ED3167E6C382F840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa Signing time: Tue 26 May 2026 01:00:24 +0000 ROA not before: Tue 26 May 2026 01:00:24 +0000 ROA not after: Mon 24 Aug 2026 01:00:24 +0000 asID: 209854 IP address blocks: 136.0.203.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 29 May 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:f4:db:80:b7:ed:31:67:e6:c3:82:f8:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: May 26 01:00:24 2026 GMT Not After : Aug 24 01:00:24 2026 GMT Subject: CN=5f1c1e8e-cbc6-4c9c-a074-2e1c133c52b2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:81:42:af:c3:d4:2b:ae:ca:5c:a6:3c:3e:61:e5: 06:a6:82:54:79:29:8b:cb:17:b0:16:29:85:bb:04: 9b:bd:05:da:c0:55:52:be:37:10:8e:cb:93:dc:9f: ed:2b:62:41:f0:94:fc:88:2a:19:49:88:70:a6:13: 6c:94:4b:94:66:c8:33:6a:13:9d:1b:68:83:df:b2: 7a:6a:66:f9:df:d8:88:1f:a0:4f:bb:48:62:97:07: 6b:c7:4a:93:b7:ed:4a:ba:22:6e:78:35:b9:9c:59: 3f:66:05:3f:84:59:2d:ae:b6:81:56:b6:c7:64:1c: 2c:93:4d:82:88:03:b2:78:2a:6c:a6:ca:43:37:30: 71:cc:32:d8:9a:bb:29:68:83:83:70:cc:d1:8c:8e: 7b:ce:10:45:eb:87:9b:5a:70:5e:22:78:ba:3c:07: b6:a9:2b:62:1e:f2:e7:6b:a9:8b:8c:a7:c7:2d:66: 28:f5:c8:76:ad:7d:de:42:3c:d9:cd:25:88:22:55: 6f:ba:8c:3a:1b:7e:c7:cd:36:cd:b6:5c:20:2f:2d: c5:25:4b:b6:b7:44:6b:6c:fb:fc:a1:ea:24:97:ce: 75:90:0f:82:15:c0:8e:53:77:30:a6:06:a9:20:97: 4c:2a:02:b3:28:4b:e5:ac:f7:9b:84:3a:a4:6b:95: 0a:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:13:D8:F9:AB:8F:44:7E:13:55:94:22:35:29:E5:6E:03:7C:91:13 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f21f1e85-7363-3c3a-bb70-b5ba124cb95b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.203.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 83:e7:dd:d9:0b:3c:99:9b:61:6c:8a:a2:d2:3c:94:59:f1:a1: 39:4a:a9:b3:fb:08:14:8e:8b:35:ec:fb:e3:32:e5:22:d7:59: 4a:52:2e:c0:3e:7f:98:eb:e8:96:73:d2:19:53:db:54:3a:d9: d5:57:6a:50:8e:bb:49:60:69:07:d7:a0:9a:ed:24:4b:9b:2b: be:d8:d4:62:af:0b:62:3d:76:c7:6a:33:af:22:78:3a:72:04: b4:de:fb:f9:ab:39:ca:bb:74:57:09:96:bd:b8:55:3f:69:44: b5:d9:d1:5f:11:e3:fb:89:a2:3c:11:40:05:e2:cc:20:e4:9c: 75:0e:a2:bc:d6:73:33:3f:e2:5e:ea:c2:ed:c9:ac:3a:4a:f4: 6a:6c:bf:d7:f2:62:b5:88:8e:56:29:5b:0e:16:57:74:f1:37: bb:73:e0:a2:33:85:f4:18:60:91:fe:27:f9:6a:3e:dd:91:78: 89:82:03:ea:82:f3:37:30:a9:1b:a6:e6:e0:4b:45:38:3b:d7: d3:40:83:3d:32:bf:b4:de:41:d0:1f:1c:a2:0b:fe:90:97:39: d6:b6:a4:60:55:93:84:58:d7:89:da:63:2a:93:81:ca:4f:8f: 32:71:1e:51:74:e0:d9:94:7c:49:11:d2:58:2f:73:41:03:41: c7:b8:3c:db -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3024C37TFn5sOC+EAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk NWYxYzFlOGUtY2JjNi00YzljLWEwNzQtMmUxYzEzM2M1MmIyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgUKvw9Qrrspcpjw+YeUGpoJUeSmLyxewFimF uwSbvQXawFVSvjcQjsuT3J/tK2JB8JT8iCoZSYhwphNslEuUZsgzahOdG2iD37J6 amb539iIH6BPu0hilwdrx0qTt+1KuiJueDW5nFk/ZgU/hFktrraBVrbHZBwsk02C iAOyeCpspspDNzBxzDLYmrspaIODcMzRjI57zhBF64ebWnBeIni6PAe2qStiHvLn a6mLjKfHLWYo9ch2rX3eQjzZzSWIIlVvuow6G37HzTbNtlwgLy3FJUu2t0RrbPv8 oeokl851kA+CFcCOU3cwpgapIJdMKgKzKEvlrPebhDqka5UKQwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFB0T2Pmrj0R+E1WUIjUp5W4DfJETMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjIxZjFlODUtNzM2My0z YzNhLWJiNzAtYjViYTEyNGNiOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADLMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIPn3dkLPJmbYWyKotI8lFnxoTlKqbP7CBSOizXs++My5SLXWUpSLsA+ f5jr6JZz0hlT21Q62dVXalCOu0lgaQfXoJrtJEubK77Y1GKvC2I9dsdqM68ieDpy BLTe+/mrOcq7dFcJlr24VT9pRLXZ0V8R4/uJojwRQAXizCDknHUOorzWczM/4l7q wu3JrDpK9Gpsv9fyYrWIjlYpWw4WV3TxN7tz4KIzhfQYYJH+J/lqPt2ReImCA+qC 8zcwqRum5uBLRTg719NAgz0yv7TeQdAfHKIL/pCXOda2pGBVk4RY14naYyqTgcpP jzJxHlF04NmUfEkR0lgvc0EDQce4PNs= -----END CERTIFICATE-----Generated at Thu May 28 17:14:26 2026 by rpki-client