$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cba036b8-8554-3a3e-8ead-d837ebc59fae.roa File: cba036b8-8554-3a3e-8ead-d837ebc59fae.roa (raw, json) Hash identifier: rfV7cJ9Q2nuQ7CaWrHzVLF9N/TGJWOXhUQS7rA8NZHQ= Subject key identifier: D9:FF:9C:69:2F:3E:9A:C6:68:80:60:B4:E0:F5:31:62:1C:F2:BB:BF Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F243FE575F24C84B9D8B27080 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cba036b8-8554-3a3e-8ead-d837ebc59fae.roa Signing time: Fri 11 Sep 2026 17:13:18 +0000 ROA not before: Fri 11 Sep 2026 17:13:18 +0000 ROA not after: Thu 10 Dec 2026 18:13:18 +0000 asID: 62005 IP address blocks: 136.0.20.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 24 Sep 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:24:3f:e5:75:f2:4c:84:b9:d8:b2:70:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 11 17:13:18 2026 GMT Not After : Dec 10 18:13:18 2026 GMT Subject: CN=cbeb27ab-c5ab-4444-8105-819a2236a998 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:41:f4:87:c5:30:8b:9f:a8:41:f9:d1:53:80: fb:c5:33:d9:66:4c:f0:af:90:40:5e:c3:06:bb:a2: ba:f6:d9:d7:07:0e:43:f3:e6:79:0d:d8:f7:bf:61: 78:31:d6:c7:8e:5f:76:6a:5a:99:fe:43:66:55:56: e6:b1:5a:68:22:0c:49:0c:33:77:f0:cd:21:21:0f: a2:95:c6:34:83:cc:e2:2d:6b:b0:54:85:12:fd:b3: e6:27:e6:47:4d:31:64:79:79:bb:bd:9d:2d:26:61: ed:f3:ba:4b:c1:62:17:d6:8d:ba:d6:0e:9a:46:c9: 23:be:d9:9f:8c:88:b9:7e:69:24:06:e5:d6:cb:c8: 05:5d:8f:fd:0f:c6:0a:2c:89:04:6c:1a:8b:08:45: 65:48:fb:00:bc:5b:48:ac:ec:db:4b:14:9e:5a:87: 9f:ae:69:0f:32:a9:b0:4c:d6:c0:f8:d2:99:4c:a9: b2:c8:ea:f2:8e:3e:50:89:db:be:76:f5:44:cc:e6: b5:ed:a5:a6:70:cb:53:f5:11:46:fd:08:4b:ca:03: 6e:da:44:55:98:8d:a6:b6:fa:6d:4a:8e:f2:d5:fd: 17:cf:86:c4:97:c6:b7:a3:50:ca:5b:c2:24:a3:f5: 48:6c:d9:72:d0:7e:0c:58:af:8a:83:44:bf:c9:18: 8c:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:FF:9C:69:2F:3E:9A:C6:68:80:60:B4:E0:F5:31:62:1C:F2:BB:BF Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/cba036b8-8554-3a3e-8ead-d837ebc59fae.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.20.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 9d:53:e6:a8:53:70:a4:65:5c:40:60:5f:e8:bf:11:28:2d:e4: d2:7c:4b:42:f0:d9:60:93:e3:f6:84:96:a4:9a:26:d2:08:af: 20:4c:de:8a:c5:bc:ce:59:34:31:f6:63:06:3d:41:23:02:b4: 87:a3:4d:0d:ad:5b:09:9e:33:ba:84:df:a4:f1:c6:7c:a0:61: ae:12:43:81:c4:fe:f6:aa:28:8a:4f:be:68:55:25:ca:c3:6b: 3f:e4:9a:3f:d5:15:97:29:6c:f2:02:a2:1a:09:bc:43:e6:27: 14:4e:cf:32:c2:19:4b:0a:7c:bb:bb:87:aa:88:17:b8:0f:cc: a9:b2:30:e6:4b:7e:55:ce:f4:d6:cd:4c:bc:50:f2:23:46:57: 44:f7:cc:78:cc:f1:db:2b:c7:c4:38:16:da:99:c2:85:50:f5: 9c:5e:ad:ba:57:a7:2d:fe:5d:93:cc:66:c9:18:46:44:be:88: 56:49:0f:57:8b:05:d6:4c:50:62:96:12:4d:ef:74:99:0c:f0: 11:88:67:01:09:8d:1a:f0:d7:f8:36:24:6a:f8:21:02:a7:77: ba:17:48:6c:a6:17:89:4f:ff:1a:9c:df:97:79:98:15:aa:b9: 21:1c:53:10:40:a1:2c:e3:90:d7:eb:e2:4f:9f:64:6f:fa:46: 45:44:de:1d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8kP+V18kyEudiycIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxMTE3MTMxOFoXDTI2MTIxMDE4MTMxOFowLzEtMCsGA1UEAxMk Y2JlYjI3YWItYzVhYi00NDQ0LTgxMDUtODE5YTIyMzZhOTk4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiEH0h8Uwi5+oQfnRU4D7xTPZZkzwr5BAXsMG u6K69tnXBw5D8+Z5Ddj3v2F4MdbHjl92alqZ/kNmVVbmsVpoIgxJDDN38M0hIQ+i lcY0g8ziLWuwVIUS/bPmJ+ZHTTFkeXm7vZ0tJmHt87pLwWIX1o261g6aRskjvtmf jIi5fmkkBuXWy8gFXY/9D8YKLIkEbBqLCEVlSPsAvFtIrOzbSxSeWoefrmkPMqmw TNbA+NKZTKmyyOryjj5Qidu+dvVEzOa17aWmcMtT9RFG/QhLygNu2kRVmI2mtvpt So7y1f0Xz4bEl8a3o1DKW8Iko/VIbNly0H4MWK+Kg0S/yRiMjQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNn/nGkvPprGaIBgtOD1MWIc8ru/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvY2JhMDM2YjgtODU1NC0z YTNlLThlYWQtZDgzN2ViYzU5ZmFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJ1T5qhTcKRlXEBgX+i/ESgt5NJ8S0Lw2WCT4/aElqSaJtIIryBM3orF vM5ZNDH2YwY9QSMCtIejTQ2tWwmeM7qE36TxxnygYa4SQ4HE/vaqKIpPvmhVJcrD az/kmj/VFZcpbPICohoJvEPmJxROzzLCGUsKfLu7h6qIF7gPzKmyMOZLflXO9NbN TLxQ8iNGV0T3zHjM8dsrx8Q4FtqZwoVQ9ZxerbpXpy3+XZPMZskYRkS+iFZJD1eL BdZMUGKWEk3vdJkM8BGIZwEJjRrw1/g2JGr4IQKnd7oXSGymF4lP/xqc35d5mBWq uSEcUxBAoSzjkNfr4k+fZG/6RkVE3h0= -----END CERTIFICATE-----Generated at Wed Sep 23 18:26:09 2026 by rpki-client