$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa File: a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa (raw, json) Hash identifier: 4nWYmI+alm3m578tQ1SLrjnQH8QB+MWl0QgW+xsFeMk= Subject key identifier: 15:05:43:92:99:D3:35:71:09:39:BA:F6:61:B0:5F:0C:13:01:46:29 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F331D27AD4A8E4EACD43FB980 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 8881 IP address blocks: 136.0.167.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:27:ad:4a:8e:4e:ac:d4:3f:b9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=39422001-55fa-402e-b0ef-94d6088391f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:ba:0b:0b:ff:44:98:df:01:80:4d:7d:40:6c: 5f:6d:a5:69:cd:88:3c:6c:86:36:6a:99:67:fb:d4: 74:8e:53:63:9b:2e:fb:87:04:7c:10:00:76:93:4d: 03:73:02:65:41:88:21:d1:9f:a1:e1:80:aa:3f:a1: c0:51:fb:a2:52:e7:a3:1f:89:f0:4b:78:0b:ba:37: ea:d9:81:7c:26:56:74:48:da:de:9d:f2:27:88:bf: 97:71:b3:0a:5c:13:03:2e:8f:6d:07:cf:5f:ba:b2: 5b:ff:dc:87:0b:dc:f8:43:ee:35:ec:bb:8a:b9:5c: 8e:9d:4f:e4:11:de:49:28:94:4b:9c:71:8d:2d:68: 96:44:8d:4a:1d:c1:47:53:55:95:db:4e:17:de:e6: 36:b5:f4:4b:2b:29:07:54:1b:eb:f1:0f:17:36:13: 8d:9a:a2:b9:f6:ea:35:28:17:75:91:08:6c:95:f9: 92:bb:4e:6f:a7:0c:ee:c9:99:af:f5:22:5c:ff:cd: 0a:6b:85:7c:ff:7b:57:21:1c:0d:d1:79:c8:e2:76: 5b:b2:e0:0e:4e:49:b0:1b:42:7e:a8:bb:d9:b6:d9: 1f:6a:a4:25:1f:33:26:3e:38:a6:c8:06:a7:67:0a: 49:10:d8:36:66:68:66:ed:16:2d:4e:3f:99:f4:08: 1c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:05:43:92:99:D3:35:71:09:39:BA:F6:61:B0:5F:0C:13:01:46:29 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a3dc0a8e-b4e5-3486-a0c0-d2f7a3e910d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.167.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5c:d0:99:dc:e9:d2:a6:5f:e3:48:4e:ab:36:b6:d0:d4:da:11: 84:c5:d2:62:a9:87:9b:7d:68:77:c1:31:de:2c:14:94:18:c6: 1c:32:58:73:03:53:f2:dc:62:7e:fb:af:5c:cb:b2:00:7e:98: b0:73:66:2d:ba:e4:fb:ba:af:51:26:26:e1:49:d9:2a:f1:3e: 82:d5:df:8d:4b:96:a4:4a:58:08:95:48:20:ec:7e:4d:a0:71: a1:5f:7d:75:83:cb:07:43:96:6b:ea:3b:3d:08:ee:ed:12:92: a7:b4:c8:a9:f5:6a:e5:c1:22:d9:da:b0:d1:c0:ed:d1:e2:95: cd:8f:9c:a5:c2:c0:04:bd:d2:42:bb:1a:83:bd:c8:48:69:8a: 80:3e:08:91:b5:23:25:de:4b:e5:7c:70:8d:25:61:6b:b3:e4: eb:12:42:6f:90:12:91:22:71:86:ad:3e:b8:99:7a:2f:9a:25: fd:10:3a:66:23:d2:7c:c8:4b:88:aa:55:ef:f7:16:f6:02:a5: 51:b9:59:6d:2e:28:eb:2f:6f:9a:e7:c8:81:72:a2:d6:62:27: 02:8a:43:cd:21:09:76:03:ec:78:bf:cb:89:80:3e:fc:39:b6: 34:e3:7b:dd:19:b7:ed:b9:08:d6:b5:8d:de:89:7c:c6:f1:d8: ff:04:c6:8d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSetSo5OrNQ/uYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk Mzk0MjIwMDEtNTVmYS00MDJlLWIwZWYtOTRkNjA4ODM5MWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6roLC/9EmN8BgE19QGxfbaVpzYg8bIY2apln +9R0jlNjmy77hwR8EAB2k00DcwJlQYgh0Z+h4YCqP6HAUfuiUuejH4nwS3gLujfq 2YF8JlZ0SNrenfIniL+XcbMKXBMDLo9tB89furJb/9yHC9z4Q+417LuKuVyOnU/k Ed5JKJRLnHGNLWiWRI1KHcFHU1WV204X3uY2tfRLKykHVBvr8Q8XNhONmqK59uo1 KBd1kQhslfmSu05vpwzuyZmv9SJc/80Ka4V8/3tXIRwN0XnI4nZbsuAOTkmwG0J+ qLvZttkfaqQlHzMmPjimyAanZwpJENg2Zmhm7RYtTj+Z9AgccQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBUFQ5KZ0zVxCTm69mGwXwwTAUYpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTNkYzBhOGUtYjRlNS0z NDg2LWEwYzAtZDJmN2EzZTkxMGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACnMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFzQmdzp0qZf40hOqza20NTaEYTF0mKph5t9aHfBMd4sFJQYxhwyWHMD U/LcYn77r1zLsgB+mLBzZi265Pu6r1EmJuFJ2SrxPoLV341LlqRKWAiVSCDsfk2g caFffXWDywdDlmvqOz0I7u0Skqe0yKn1auXBItnasNHA7dHilc2PnKXCwAS90kK7 GoO9yEhpioA+CJG1IyXeS+V8cI0lYWuz5OsSQm+QEpEicYatPriZei+aJf0QOmYj 0nzIS4iqVe/3FvYCpVG5WW0uKOsvb5rnyIFyotZiJwKKQ80hCXYD7Hi/y4mAPvw5 tjTje90Zt+25CNa1jd6JfMbx2P8Exo0= -----END CERTIFICATE-----Generated at Mon Sep 21 16:08:13 2026 by rpki-client