$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/841b67a4-1ad9-36aa-abf5-f0dfa78dbcfc.roa File: 841b67a4-1ad9-36aa-abf5-f0dfa78dbcfc.roa (raw, json) Hash identifier: dSCwV9Pa45sO0aaPbmL02KpfQU87aVPI+UQ/ZPbpfJ0= Subject key identifier: 64:AC:A9:16:AF:C8:10:D9:49:23:4B:25:C9:D3:6D:AD:B6:09:1E:56 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F34826FE64CA81B21D1499840 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/841b67a4-1ad9-36aa-abf5-f0dfa78dbcfc.roa Signing time: Thu 17 Sep 2026 13:00:12 +0000 ROA not before: Thu 17 Sep 2026 13:00:12 +0000 ROA not after: Wed 16 Dec 2026 14:00:12 +0000 asID: 3561 IP address blocks: 136.0.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 21 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:34:82:6f:e6:4c:a8:1b:21:d1:49:98:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 17 13:00:12 2026 GMT Not After : Dec 16 14:00:12 2026 GMT Subject: CN=d69bd03e-1780-4e33-be7c-36fa0aba5d30 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:03:a5:91:05:b8:27:78:7a:20:6b:81:02:c9: c2:f6:6c:3f:d4:dd:e5:30:45:da:6e:17:aa:45:67: 37:02:74:96:bd:05:4a:98:3a:8f:c3:eb:a2:05:9a: 62:57:ea:9b:01:51:93:2f:3e:6e:9c:a6:65:9c:0c: 0c:0c:87:ce:eb:f3:ca:f2:85:9c:db:8b:ff:dd:68: b0:4c:93:19:98:8b:08:89:b0:36:b5:35:a9:35:c5: 3e:f4:b5:c3:e0:3e:9d:d5:6e:6f:c1:01:8a:1f:a9: 02:a9:e2:38:fa:3a:2e:32:29:b1:b2:5a:2b:1f:3d: fd:51:0f:fc:8d:06:21:97:00:1d:1a:0e:78:8f:47: 6d:61:1c:27:0b:f5:87:d3:07:dd:f6:a6:5b:c1:6f: f9:bc:0b:6e:ee:a9:7e:e8:c4:bc:69:c7:5f:a3:de: 0d:e1:bd:f5:a0:4d:e8:88:d2:09:13:dd:56:b1:2b: 50:29:32:70:d1:cb:39:aa:91:47:76:6f:4b:9b:ed: be:80:89:9d:aa:bb:c2:24:cc:08:52:ed:99:e6:25: 93:70:0d:33:5f:b1:a3:68:8f:e1:8c:e1:22:a1:c6: de:92:94:e6:0f:57:5b:e0:ec:ca:05:ec:1f:e9:f6: db:ff:86:34:62:3a:e9:8d:69:0b:27:50:aa:f1:c1: a4:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:AC:A9:16:AF:C8:10:D9:49:23:4B:25:C9:D3:6D:AD:B6:09:1E:56 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/841b67a4-1ad9-36aa-abf5-f0dfa78dbcfc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 49:1e:83:6b:9d:8a:a6:98:d0:70:2a:54:b5:e0:16:fe:d5:29: 1b:6f:98:75:85:d3:fa:34:f8:39:37:6f:93:e7:94:2d:16:d1: e6:1d:dd:5e:fd:37:f6:11:75:95:cd:01:43:54:98:f1:89:f1: 62:ad:0c:83:9b:47:64:c2:14:93:a9:3a:17:92:0b:c8:8c:d8: e4:19:5e:91:eb:2e:2b:69:c3:e3:fe:f3:91:92:b4:15:6a:2f: d7:ff:89:ee:58:b9:67:86:7f:49:a4:81:d8:e8:ff:b0:c5:76: e7:ad:ec:c7:3f:b5:8f:4f:0f:ab:ba:51:11:6e:9e:83:d1:c9: 8d:0c:9b:0d:c4:79:a0:84:aa:17:a1:f7:fa:21:31:85:12:83: 8b:b8:9d:ab:c6:0a:f3:05:ea:bf:8b:d1:b8:c7:27:06:51:57: 78:bf:9a:fa:18:ac:26:9c:60:58:65:66:9f:81:03:72:b5:27: b5:0d:da:04:e3:7c:69:8b:38:5f:ea:7e:d1:0a:20:69:32:ed: 32:5d:48:f1:11:13:4a:43:24:5d:7f:53:ff:64:9c:42:d6:40: f6:23:d4:b9:34:81:4f:87:e9:a6:18:35:e1:f7:6e:88:75:9b: 0a:c9:56:a8:df:27:b4:78:af:f4:c4:c1:cb:e9:0b:be:de:21: 35:62:a1:f1 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE80gm/mTKgbIdFJmEAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxNzEzMDAxMloXDTI2MTIxNjE0MDAxMlowLzEtMCsGA1UEAxMk ZDY5YmQwM2UtMTc4MC00ZTMzLWJlN2MtMzZmYTBhYmE1ZDMwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgOlkQW4J3h6IGuBAsnC9mw/1N3lMEXabheq RWc3AnSWvQVKmDqPw+uiBZpiV+qbAVGTLz5unKZlnAwMDIfO6/PK8oWc24v/3Wiw TJMZmIsIibA2tTWpNcU+9LXD4D6d1W5vwQGKH6kCqeI4+jouMimxslorHz39UQ/8 jQYhlwAdGg54j0dtYRwnC/WH0wfd9qZbwW/5vAtu7ql+6MS8acdfo94N4b31oE3o iNIJE91WsStQKTJw0cs5qpFHdm9Lm+2+gImdqrvCJMwIUu2Z5iWTcA0zX7GjaI/h jOEiocbekpTmD1db4OzKBewf6fbb/4Y0YjrpjWkLJ1Cq8cGkBwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGSsqRavyBDZSSNLJcnTba22CR5WMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvODQxYjY3YTQtMWFkOS0z NmFhLWFiZjUtZjBkZmE3OGRiY2ZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEkeg2udiqaY0HAqVLXgFv7VKRtvmHWF0/o0+Dk3b5PnlC0W0eYd3V79 N/YRdZXNAUNUmPGJ8WKtDIObR2TCFJOpOheSC8iM2OQZXpHrLitpw+P+85GStBVq L9f/ie5YuWeGf0mkgdjo/7DFduet7Mc/tY9PD6u6URFunoPRyY0Mmw3EeaCEqheh 9/ohMYUSg4u4navGCvMF6r+L0bjHJwZRV3i/mvoYrCacYFhlZp+BA3K1J7UN2gTj fGmLOF/qftEKIGky7TJdSPERE0pDJF1/U/9knELWQPYj1Lk0gU+H6aYYNeH3boh1 mwrJVqjfJ7R4r/TEwcvpC77eITViofE= -----END CERTIFICATE-----Generated at Sun Sep 20 16:00:17 2026 by rpki-client