$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa File: a319c139-1f08-32b0-b642-e4482a7a84e2.roa (raw, json) Hash identifier: /buAdJZ5x30/YUk26J7/T3CmGvL+tp7Dk8+fHQ0kdYQ= Subject key identifier: A1:2B:6E:2A:8A:06:58:2C:54:01:7A:A0:40:18:40:72:60:05:57:C5 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E2D0EB6750FE3DB549BC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10753 IP address blocks: 136.0.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:2d:0e:b6:75:0f:e3:db:54:9b:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=dca0d876-0670-4f0d-8472-97f715654d16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:33:90:a9:a8:1f:07:f9:0e:2e:5e:dd:36:51: af:21:05:01:57:7c:25:40:e7:80:38:6e:a9:bd:34: c8:e9:0d:56:51:30:7d:3e:8a:28:0f:35:ec:6a:01: 24:ee:74:b3:13:5a:c4:4e:90:46:4a:22:c4:45:62: 7f:72:a8:94:7d:86:64:1d:e6:8f:90:5d:83:13:7f: be:45:0c:6a:63:40:e3:74:1a:4e:d1:6b:5f:2d:ab: f9:18:f3:cf:4c:a7:60:49:01:4b:98:87:ff:25:17: e9:e0:e1:a8:cc:4b:d8:be:57:26:46:5e:82:30:48: 44:a6:6c:07:3f:c9:81:f7:dd:90:9d:d9:64:fc:c4: aa:d0:52:f2:86:88:e5:ea:3f:01:c2:3e:42:01:53: 96:2a:b9:73:f3:ed:f9:d7:85:f3:1f:64:03:9f:ab: 95:53:ef:38:67:18:30:39:c7:a8:78:1a:da:75:59: 47:95:2f:be:08:77:14:8b:2a:aa:29:42:09:1b:7d: ea:b7:8e:03:88:a6:18:05:dd:56:ed:ac:c0:5d:62: 69:3f:59:7a:60:e7:53:ed:c5:75:3a:5a:f7:0a:6b: f0:2f:bf:b2:df:1e:04:94:28:a3:46:bd:ba:5f:8a: 65:b9:85:ec:c1:b4:0b:f9:2d:b4:0b:3b:c7:31:b6: 28:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:2B:6E:2A:8A:06:58:2C:54:01:7A:A0:40:18:40:72:60:05:57:C5 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:25:8a:1f:ea:7f:99:14:64:17:7c:0c:bf:39:13:df:4b:e5: 9a:0f:55:b6:18:44:f2:14:39:f3:53:e4:9b:91:2b:82:5c:25: bf:a2:e8:29:a3:02:7a:ee:36:39:e2:b7:0f:84:3e:2a:e7:88: bb:d2:12:8c:53:8f:df:9f:80:90:d7:98:f3:35:e2:b8:15:ba: 73:7f:7c:54:45:9e:2d:f5:f2:0d:08:8c:61:d2:f3:e9:a3:39: 50:cf:81:7a:d1:48:51:fd:36:ec:dd:45:16:12:26:91:0e:34: cc:11:1a:75:e8:f8:66:63:4f:79:89:2d:81:25:53:fc:84:d9: 79:95:4c:3d:7e:18:bd:37:e7:43:5c:2d:0d:8d:82:ab:e3:1c: f0:12:b5:7f:a8:91:b8:93:5d:fa:6e:72:13:94:28:cf:7e:9e: 72:46:de:7c:38:38:29:06:51:93:97:56:6d:fa:af:96:05:1f: 33:39:87:8d:ec:c4:a7:a7:fa:ca:8b:c3:da:03:bd:16:b1:97: 3e:47:bb:82:ca:34:c3:85:9b:a5:1d:5f:d6:77:ae:55:10:50: dc:0a:2e:57:97:8e:2b:2e:aa:ac:ea:6a:6a:2e:13:70:9d:89: 45:97:57:69:2d:66:c9:83:34:df:ac:6a:af:53:83:e5:b7:30: a3:85:19:d8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jfi0OtnUP49tUm8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZGNhMGQ4NzYtMDY3MC00ZjBkLTg0NzItOTdmNzE1NjU0ZDE2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTOQqagfB/kOLl7dNlGvIQUBV3wlQOeAOG6p vTTI6Q1WUTB9PoooDzXsagEk7nSzE1rETpBGSiLERWJ/cqiUfYZkHeaPkF2DE3++ RQxqY0DjdBpO0WtfLav5GPPPTKdgSQFLmIf/JRfp4OGozEvYvlcmRl6CMEhEpmwH P8mB992Qndlk/MSq0FLyhojl6j8Bwj5CAVOWKrlz8+3514XzH2QDn6uVU+84Zxgw OceoeBradVlHlS++CHcUiyqqKUIJG33qt44DiKYYBd1W7azAXWJpP1l6YOdT7cV1 Olr3CmvwL7+y3x4ElCijRr26X4pluYXswbQL+S20CzvHMbYo5wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFKErbiqKBlgsVAF6oEAYQHJgBVfFMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMxOWMxMzktMWYwOC0z MmIwLWI2NDItZTQ0ODJhN2E4NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACglih/qf5kUZBd8DL85E99L5ZoPVbYYRPIUOfNT5JuRK4JcJb+i6Cmj AnruNjnitw+EPirniLvSEoxTj9+fgJDXmPM14rgVunN/fFRFni318g0IjGHS8+mj OVDPgXrRSFH9NuzdRRYSJpEONMwRGnXo+GZjT3mJLYElU/yE2XmVTD1+GL0350Nc LQ2NgqvjHPAStX+okbiTXfpuchOUKM9+nnJG3nw4OCkGUZOXVm36r5YFHzM5h43s xKen+sqLw9oDvRaxlz5Hu4LKNMOFm6UdX9Z3rlUQUNwKLleXjisuqqzqamouE3Cd iUWXV2ktZsmDNN+saq9Tg+W3MKOFGdg= -----END CERTIFICATE-----Generated at Fri Sep 25 05:32:32 2026 by rpki-client