$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa File: 20c76ec3-5160-3b90-bb10-6884b085ce8e.roa (raw, json) Hash identifier: J74DbSzY8bEWK4UrzffNw/5tIwfhKrtErBP97qS4hcY= Subject key identifier: 42:2B:3C:2A:5B:9F:A8:32:68:14:31:9F:8B:5F:D5:3C:15:FC:0D:2A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584EFF7780D2FEEA60714E58AFD0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa Signing time: Sat 29 Aug 2026 13:00:12 +0000 ROA not before: Sat 29 Aug 2026 13:00:12 +0000 ROA not after: Fri 27 Nov 2026 14:00:12 +0000 asID: 40676 IP address blocks: 136.0.120.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ff:77:80:d2:fe:ea:60:71:4e:58:af:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Aug 29 13:00:12 2026 GMT Not After : Nov 27 14:00:12 2026 GMT Subject: CN=204ab022-e02b-4fc9-a1ef-1c6954c8b08e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7e:0d:ce:ff:7d:40:ad:b5:6d:5a:69:99:0e: 66:9f:a9:31:e4:8d:7d:91:99:2a:47:26:10:ff:b6: 05:59:01:1c:01:16:4d:0d:5c:3c:53:5c:18:4e:4a: 98:16:fa:0f:81:2d:0e:a8:8f:de:ee:67:b5:e8:9f: 97:3f:16:d8:e1:0c:d5:f3:77:f6:0f:ce:df:44:06: f0:ed:23:67:3e:b8:06:59:0f:87:9b:26:fa:9a:91: 80:c5:0b:96:7f:76:d5:0d:c1:fb:e5:7d:36:dc:27: 18:c5:97:b6:29:8b:d5:9a:9c:12:2a:8c:95:56:a5: 50:21:12:60:20:16:4e:50:aa:2e:35:9b:48:69:9a: 72:48:98:ab:7b:9a:5c:79:67:92:a0:ed:80:d6:1c: b0:ef:c3:89:50:3a:f9:ac:2e:fd:e6:32:c1:52:16: ae:24:3a:36:04:1f:f8:01:87:20:93:1f:06:b2:fc: b2:3f:45:02:e7:71:66:e2:ae:b9:dd:01:ac:bf:51: ff:a0:df:9d:71:1e:f6:41:51:4e:df:59:a7:d7:2f: 63:59:21:88:d7:d6:26:f9:3e:cb:85:e1:38:d7:bc: 91:f1:49:cf:06:d2:ea:b9:90:1e:92:7b:0c:b0:8d: c2:a2:e4:e7:27:3e:9b:5b:b8:0b:f3:22:73:2b:8b: 77:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:2B:3C:2A:5B:9F:A8:32:68:14:31:9F:8B:5F:D5:3C:15:FC:0D:2A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/20c76ec3-5160-3b90-bb10-6884b085ce8e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.120.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:d5:6d:03:20:b0:56:aa:95:7a:4f:92:56:89:bb:3f:22:a5: 78:78:e8:6d:16:35:93:b7:d2:90:d1:4b:8e:06:8a:67:7e:4d: 73:48:2c:6c:ae:99:30:3b:6c:b3:2a:13:31:4d:b0:dc:95:45: d8:43:7e:c8:f3:da:ac:f6:43:50:67:17:01:8d:f2:56:8c:ca: 0a:64:e8:0a:41:3a:31:cd:75:4a:e8:e9:de:47:2d:40:cb:3f: c7:df:65:f9:9e:55:36:6a:90:14:85:b5:1c:99:a2:c0:e8:25: 8c:fc:44:68:e3:16:05:53:64:a5:be:49:6a:e9:43:f0:58:ea: ea:6e:35:e0:36:ee:53:d0:b8:f5:93:9d:f6:94:66:e2:1b:78: e7:98:1d:a6:ac:52:e0:0f:37:02:33:07:4b:11:e9:1a:33:99: fe:60:cc:60:15:39:e7:8e:fb:b4:bf:99:ac:d1:dd:80:e4:ed: b6:71:72:d1:de:79:cf:ef:2c:38:d1:df:7f:67:7a:b4:cd:db: 27:8c:e1:4f:11:6b:1d:0f:58:a9:29:cd:20:e0:10:a4:15:a9: 7e:aa:6b:94:4d:17:89:24:03:c5:b8:11:aa:03:d5:69:ec:0b: 3a:9f:f5:b4:c4:ee:4f:6d:74:b1:a4:fa:1c:02:f9:f0:d6:09: ac:59:28:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7/d4DS/upgcU5Yr9AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDgyOTEzMDAxMloXDTI2MTEyNzE0MDAxMlowLzEtMCsGA1UEAxMk MjA0YWIwMjItZTAyYi00ZmM5LWExZWYtMWM2OTU0YzhiMDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH4Nzv99QK21bVppmQ5mn6kx5I19kZkqRyYQ /7YFWQEcARZNDVw8U1wYTkqYFvoPgS0OqI/e7me16J+XPxbY4QzV83f2D87fRAbw 7SNnPrgGWQ+Hmyb6mpGAxQuWf3bVDcH75X023CcYxZe2KYvVmpwSKoyVVqVQIRJg IBZOUKouNZtIaZpySJire5pceWeSoO2A1hyw78OJUDr5rC795jLBUhauJDo2BB/4 AYcgkx8GsvyyP0UC53Fm4q653QGsv1H/oN+dcR72QVFO31mn1y9jWSGI19Ym+T7L heE417yR8UnPBtLquZAeknsMsI3CouTnJz6bW7gL8yJzK4t3HwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEIrPCpbn6gyaBQxn4tf1TwV/A0qMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjBjNzZlYzMtNTE2MC0z YjkwLWJiMTAtNjg4NGIwODVjZThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFTVbQMgsFaqlXpPklaJuz8ipXh46G0WNZO30pDRS44Gimd+TXNILGyu mTA7bLMqEzFNsNyVRdhDfsjz2qz2Q1BnFwGN8laMygpk6ApBOjHNdUro6d5HLUDL P8ffZfmeVTZqkBSFtRyZosDoJYz8RGjjFgVTZKW+SWrpQ/BY6upuNeA27lPQuPWT nfaUZuIbeOeYHaasUuAPNwIzB0sR6Rozmf5gzGAVOeeO+7S/mazR3YDk7bZxctHe ec/vLDjR339nerTN2yeM4U8Rax0PWKkpzSDgEKQVqX6qa5RNF4kkA8W4EaoD1Wns Czqf9bTE7k9tdLGk+hwC+fDWCaxZKGE= -----END CERTIFICATE-----Generated at Mon Sep 21 04:57:55 2026 by rpki-client