$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fae8335-2521-362b-aaf3-0bda61e3cc77.roa File: 4fae8335-2521-362b-aaf3-0bda61e3cc77.roa (raw, json) Hash identifier: cPmY7ZI5vcBeJNpssJYGNWcoI4CvS8tyXmco/l9df0E= Subject key identifier: B0:0A:69:07:E7:92:8B:DA:D7:D2:27:57:01:D3:A8:73:8B:B9:2B:DE Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F498765C75401A06357C5E000 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fae8335-2521-362b-aaf3-0bda61e3cc77.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 22773 IP address blocks: 136.0.138.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 02 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:87:65:c7:54:01:a0:63:57:c5:e0:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=34e2cf78-3f6d-4d04-b969-026f989d7b06 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:b7:e5:57:72:0f:b0:8f:f3:8f:0d:16:57:d3: 7c:33:21:01:5e:da:fc:24:0d:94:01:28:40:41:c3: c8:51:e5:b5:3f:3f:4d:9f:ae:1e:c4:b0:74:18:0b: 2a:a0:94:df:5c:e4:9d:a3:80:94:e2:cb:ae:92:13: 39:80:c5:64:5b:fb:7f:d5:4d:ab:e3:f2:9d:e9:80: fa:81:f4:e9:5c:d2:43:2d:96:da:d7:72:9e:a7:54: bc:29:27:c5:6d:33:cb:b9:d5:aa:ef:fd:3e:18:9f: da:28:d1:47:b0:01:c5:13:1d:66:78:93:a4:10:f8: 5a:f0:fa:9f:bc:85:70:89:f5:20:a2:79:ee:6c:c2: a1:d1:25:65:cf:aa:08:51:ae:e1:8b:ae:ac:86:4b: b6:84:ac:e6:5f:13:a1:e6:fe:f9:ec:72:e5:68:76: 2d:d7:99:a3:dc:b8:88:ba:64:7d:9a:8f:ce:c1:20: 32:f5:91:b2:da:aa:67:33:3f:8a:a0:4c:a1:4d:78: bb:a8:f6:26:57:06:e9:30:cf:c5:86:58:b7:5d:01: 77:ba:63:24:dd:90:e1:ee:dc:64:a8:60:f5:b5:35: e6:51:f0:fc:be:99:2b:b0:c1:5a:27:87:5c:84:ad: b7:d7:4a:8e:a3:db:49:c8:3a:90:8c:ad:db:c4:23: 2f:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:0A:69:07:E7:92:8B:DA:D7:D2:27:57:01:D3:A8:73:8B:B9:2B:DE Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4fae8335-2521-362b-aaf3-0bda61e3cc77.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.138.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 51:49:0a:70:de:59:a3:d5:dd:e4:ae:a5:41:57:83:44:ed:d5: a3:0d:be:a4:6a:0a:29:33:10:40:08:97:30:8c:b4:e9:6b:18: 73:90:a9:ac:73:17:f0:9a:7a:d6:82:1e:27:fe:be:17:a6:e9: f9:50:5e:89:c7:27:e4:06:c7:48:8d:68:72:d4:5f:09:b6:7e: 04:39:c9:44:53:cb:db:76:82:06:a0:fe:1e:30:e1:5e:ae:41: 9a:6c:da:9d:ff:9e:1d:41:0d:02:80:02:9b:b1:21:9a:7c:76: c6:88:43:cd:9d:36:03:d9:e1:3e:a3:dd:ee:17:ed:48:96:8d: f8:66:85:82:7e:2b:33:b0:1a:64:7b:3b:a1:32:f9:cf:37:3c: ac:8b:14:0c:b6:f9:54:02:c2:ff:7e:c5:4e:4c:ce:1f:8b:5d: ac:ae:da:de:56:e1:17:62:7f:57:76:7f:e4:c8:2d:4b:03:47: dc:73:e5:93:c6:71:67:38:0a:93:24:c8:f8:ec:6d:53:6d:e4: 59:b0:a4:56:81:4b:a4:e8:e8:c2:15:c3:36:ad:9d:e6:92:cd: 23:07:d9:7b:8c:3f:e6:33:2d:f1:35:cd:ba:eb:b1:d3:39:a4: da:cc:c6:04:3f:ed:74:15:1a:4a:bf:be:7b:6d:bf:0d:12:8e: 79:dd:12:ae -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jh2XHVAGgY1fF4AAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MzRlMmNmNzgtM2Y2ZC00ZDA0LWI5NjktMDI2Zjk4OWQ3YjA2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrflV3IPsI/zjw0WV9N8MyEBXtr8JA2UAShA QcPIUeW1Pz9Nn64exLB0GAsqoJTfXOSdo4CU4suukhM5gMVkW/t/1U2r4/Kd6YD6 gfTpXNJDLZba13Kep1S8KSfFbTPLudWq7/0+GJ/aKNFHsAHFEx1meJOkEPha8Pqf vIVwifUgonnubMKh0SVlz6oIUa7hi66shku2hKzmXxOh5v757HLlaHYt15mj3LiI umR9mo/OwSAy9ZGy2qpnMz+KoEyhTXi7qPYmVwbpMM/Fhli3XQF3umMk3ZDh7txk qGD1tTXmUfD8vpkrsMFaJ4dchK2310qOo9tJyDqQjK3bxCMvDQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLAKaQfnkova19InVwHTqHOLuSveMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGZhZTgzMzUtMjUyMS0z NjJiLWFhZjMtMGJkYTYxZTNjYzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACKMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFFJCnDeWaPV3eSupUFXg0Tt1aMNvqRqCikzEEAIlzCMtOlrGHOQqaxz F/CaetaCHif+vhem6flQXonHJ+QGx0iNaHLUXwm2fgQ5yURTy9t2ggag/h4w4V6u QZps2p3/nh1BDQKAApuxIZp8dsaIQ82dNgPZ4T6j3e4X7UiWjfhmhYJ+KzOwGmR7 O6Ey+c83PKyLFAy2+VQCwv9+xU5Mzh+LXayu2t5W4Rdif1d2f+TILUsDR9xz5ZPG cWc4CpMkyPjsbVNt5FmwpFaBS6To6MIVwzatneaSzSMH2XuMP+YzLfE1zbrrsdM5 pNrMxgQ/7XQVGkq/vnttvw0SjnndEq4= -----END CERTIFICATE-----Generated at Thu Oct 1 03:32:06 2026 by rpki-client