$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ac4d402-5006-3246-8aa1-1705800b01b2.roa File: 3ac4d402-5006-3246-8aa1-1705800b01b2.roa (raw, json) Hash identifier: s3JwpJSOihHmZqcgIJTuazUGHbU2673PTKS4qGPCoRg= Subject key identifier: AC:AC:C3:79:5C:B1:58:93:9B:EA:BA:C9:93:73:81:74:39:14:F1:C7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F5A32D8916702089B864C55C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ac4d402-5006-3246-8aa1-1705800b01b2.roa Signing time: Thu 01 Oct 2026 01:00:12 +0000 ROA not before: Thu 01 Oct 2026 01:00:12 +0000 ROA not after: Wed 30 Dec 2026 02:00:12 +0000 asID: 401152 IP address blocks: 136.0.163.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 09 Oct 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:5a:32:d8:91:67:02:08:9b:86:4c:55:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 1 01:00:12 2026 GMT Not After : Dec 30 02:00:12 2026 GMT Subject: CN=c225498e-f213-4927-bb4c-28f0db8bc93f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:06:50:5a:1b:b4:f3:44:d3:1b:eb:c6:ff:d7: b1:48:89:33:5d:ed:2c:c3:83:6a:49:ff:3c:63:e8: f1:87:31:f4:be:32:03:e8:4c:b4:bd:9b:07:ff:4f: 6f:f4:77:f5:0c:ef:44:ff:48:16:be:59:0d:d4:d4: 13:e7:f2:e8:43:50:6c:34:d9:e0:63:5a:f4:06:09: 73:aa:ce:9c:b1:5d:00:16:47:d5:67:ea:3f:23:f3: 0f:b9:e9:83:76:4c:4f:32:53:3b:9b:4e:5e:c3:54: 2c:1a:fc:41:d0:bd:b7:a9:e8:e0:75:cd:a1:07:49: 3e:24:1f:05:60:91:76:1a:d9:e6:1d:f9:b3:58:48: a5:bf:9b:79:75:f9:52:35:2f:01:0d:cd:c8:1a:c6: 4b:0b:b3:11:04:e9:01:43:2e:e8:9a:8f:ee:75:75: 8c:80:12:61:fc:74:ad:0c:6b:49:f4:43:aa:98:59: ea:98:60:46:3c:48:9b:fa:10:af:13:73:b1:42:87: 04:89:95:68:b1:aa:52:c2:56:a9:f9:5e:a1:97:95: d8:27:2d:c7:c6:93:f2:ef:1a:97:82:d3:26:65:88: 0f:57:70:0d:7a:e5:34:20:f0:e8:b4:99:31:48:7d: 87:40:2d:42:2a:bb:4a:0f:ed:e1:cd:77:79:31:f2: bd:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:AC:C3:79:5C:B1:58:93:9B:EA:BA:C9:93:73:81:74:39:14:F1:C7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3ac4d402-5006-3246-8aa1-1705800b01b2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.163.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:09:c3:f7:61:eb:f9:ad:52:28:ee:ac:32:61:f3:60:3d:b1: 68:a1:68:7f:db:7d:7f:52:20:2e:6a:50:46:e2:b3:7c:81:64: 89:de:52:a4:06:17:91:c6:62:c5:44:74:1e:55:e5:4b:24:e7: 8f:45:65:2c:b0:13:99:1e:4b:cb:8c:08:d9:0f:1a:4d:0f:7e: ac:fd:f3:ca:ed:ec:2d:b9:7a:4f:55:f4:c0:1c:02:aa:ed:49: 11:97:9e:f9:a7:f2:ef:de:f6:30:27:95:4b:55:e8:94:01:11: b8:3b:71:4c:09:b2:25:b1:37:8d:07:cf:8b:82:de:14:e8:cd: 78:c7:95:47:3d:ad:df:d5:8a:c8:80:c6:36:d2:8d:12:8c:fe: 00:4c:21:1c:a5:2b:13:80:7e:17:87:a0:4d:60:ec:7b:1a:1c: b0:a4:b2:5b:74:1e:ad:d1:e5:f3:c9:6d:e2:70:79:5b:c3:01: be:10:7b:6d:64:ef:a5:95:e0:96:56:e1:0b:ea:6d:01:ca:5b: b8:32:75:a7:4d:65:e3:dc:53:1c:bd:1a:1b:51:6f:94:5e:8a: ac:ab:cc:f9:64:af:9e:63:fb:e0:1a:87:8f:86:2d:9e:29:94: 38:d5:08:2e:89:26:96:ac:ae:ce:53:b1:14:a2:aa:ad:62:fb: 52:69:eb:c6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9aMtiRZwIIm4ZMVcAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAwMTAxMDAxMloXDTI2MTIzMDAyMDAxMlowLzEtMCsGA1UEAxMk YzIyNTQ5OGUtZjIxMy00OTI3LWJiNGMtMjhmMGRiOGJjOTNmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQZQWhu080TTG+vG/9exSIkzXe0sw4NqSf88 Y+jxhzH0vjID6Ey0vZsH/09v9Hf1DO9E/0gWvlkN1NQT5/LoQ1BsNNngY1r0Bglz qs6csV0AFkfVZ+o/I/MPuemDdkxPMlM7m05ew1QsGvxB0L23qejgdc2hB0k+JB8F YJF2GtnmHfmzWEilv5t5dflSNS8BDc3IGsZLC7MRBOkBQy7omo/udXWMgBJh/HSt DGtJ9EOqmFnqmGBGPEib+hCvE3OxQocEiZVosapSwlap+V6hl5XYJy3HxpPy7xqX gtMmZYgPV3ANeuU0IPDotJkxSH2HQC1CKrtKD+3hzXd5MfK9mQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKysw3lcsViTm+q6yZNzgXQ5FPHHMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2FjNGQ0MDItNTAwNi0z MjQ2LThhYTEtMTcwNTgwMGIwMWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACjMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACgJw/dh6/mtUijurDJh82A9sWihaH/bfX9SIC5qUEbis3yBZIneUqQG F5HGYsVEdB5V5Usk549FZSywE5keS8uMCNkPGk0Pfqz988rt7C25ek9V9MAcAqrt SRGXnvmn8u/e9jAnlUtV6JQBEbg7cUwJsiWxN40Hz4uC3hTozXjHlUc9rd/VisiA xjbSjRKM/gBMIRylKxOAfheHoE1g7HsaHLCkslt0Hq3R5fPJbeJweVvDAb4Qe21k 76WV4JZW4QvqbQHKW7gydadNZePcUxy9GhtRb5ReiqyrzPlkr55j++Aah4+GLZ4p lDjVCC6JJpasrs5TsRSiqq1i+1Jp68Y= -----END CERTIFICATE-----Generated at Thu Oct 8 15:56:33 2026 by rpki-client