$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa File: daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa (raw, json) Hash identifier: X9qoY/lIjhiNcXEXcJEodHi8UiA0OBNYOWZoAmKzYcA= Subject key identifier: DA:EB:5E:7B:8E:9E:AF:11:13:DD:F8:BE:51:74:7D:43:F9:CC:AE:D9 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E32ABD8D4806FBB5B9480 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 136.0.109.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:32:ab:d8:d4:80:6f:bb:5b:94:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=8aa14cd4-9c0f-430f-9c54-511875369b45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:e0:df:7f:44:1f:9e:89:7f:1a:f8:67:7a:27: 1c:c9:d9:d2:6d:39:e1:d2:57:eb:3f:cc:5e:c1:4f: 3e:dd:76:59:e4:de:d6:53:e9:53:2e:fb:ee:75:c9: 53:78:eb:a9:4b:3a:12:d5:bf:8e:97:0c:85:74:c3: 5a:72:fb:77:9a:9c:ac:db:56:11:36:8b:31:64:93: cb:5f:66:6a:dc:ec:5b:5b:9f:cc:25:f7:1e:a3:fe: 57:15:21:b6:d7:b6:b4:fc:98:68:4f:e4:55:22:38: a6:3e:1b:2e:ff:eb:0c:bc:87:1d:4f:cd:15:5c:42: 73:45:87:a6:e4:a5:f8:15:b2:83:2e:b7:1e:e6:41: e1:3d:52:2d:5c:a6:c2:71:d4:fa:19:6b:4b:16:eb: 79:67:fd:af:b9:d2:1c:76:3d:8b:c9:72:fd:85:fa: 26:09:7d:83:00:0c:c8:26:f9:e9:e9:70:6b:4e:9b: 62:fa:a6:1c:ad:34:21:26:7d:5e:ea:3c:a6:da:65: 82:7c:1d:ab:b5:b9:ba:e1:60:cb:5c:0c:ce:f5:f7: 88:d1:01:8e:b9:95:e7:0c:eb:55:7f:40:87:99:c5: 3f:59:68:3a:58:c4:78:c8:0d:fb:1a:51:c8:5e:91: e8:f9:09:6d:53:c3:b7:d0:c7:17:8b:3b:1d:3c:a2: 7b:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:EB:5E:7B:8E:9E:AF:11:13:DD:F8:BE:51:74:7D:43:F9:CC:AE:D9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/daf5cc17-5f64-32be-ba4c-1b98cb7472a5.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.109.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:93:32:79:aa:80:54:10:57:33:a4:99:fb:ff:2b:ae:7c:b8: 50:a6:28:fd:97:bf:23:71:9b:c9:12:ac:1e:dd:9c:b4:09:bb: 45:d2:52:06:dc:35:b4:58:00:0f:a9:cb:88:1a:14:06:cc:ed: df:c3:b3:3d:6d:3e:9a:a2:48:1b:ec:d6:aa:bf:ab:ba:b4:56: 4f:74:b5:36:29:f8:15:29:f2:71:88:de:38:79:fd:11:89:b1: f0:06:74:e6:b6:3c:ae:7c:bb:98:44:b4:0d:b6:a0:41:eb:46: 38:d2:ea:f0:b1:d8:43:42:22:d0:4d:e8:f3:15:77:90:3a:89: 61:4b:14:80:ea:63:11:18:65:36:0f:e2:93:bf:4d:db:8b:cb: 10:6c:0e:26:ea:10:07:25:0b:db:8a:91:46:4e:ff:8c:9e:37: b6:0a:3a:14:82:1c:0b:2c:d4:27:e9:a9:0c:24:5c:66:61:9a: c7:95:26:c6:52:e3:45:8a:f5:41:32:5b:58:df:60:c5:aa:a5: f5:18:f2:d9:a2:82:82:c8:11:a4:cb:d2:8e:c9:20:67:5f:f5: 10:78:f0:aa:68:09:94:40:20:a9:14:3f:c4:34:51:f6:88:07: 4d:f8:a2:f4:35:23:0f:12:76:e7:5e:0e:72:b7:48:c9:01:56: 98:9f:2c:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfjKr2NSAb7tblIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OGFhMTRjZDQtOWMwZi00MzBmLTljNTQtNTExODc1MzY5YjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnuDff0Qfnol/GvhneiccydnSbTnh0lfrP8xe wU8+3XZZ5N7WU+lTLvvudclTeOupSzoS1b+OlwyFdMNacvt3mpys21YRNosxZJPL X2Zq3OxbW5/MJfceo/5XFSG217a0/JhoT+RVIjimPhsu/+sMvIcdT80VXEJzRYem 5KX4FbKDLrce5kHhPVItXKbCcdT6GWtLFut5Z/2vudIcdj2LyXL9hfomCX2DAAzI Jvnp6XBrTpti+qYcrTQhJn1e6jym2mWCfB2rtbm64WDLXAzO9feI0QGOuZXnDOtV f0CHmcU/WWg6WMR4yA37GlHIXpHo+QltU8O30McXizsdPKJ7UwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFNrrXnuOnq8RE934vlF0fUP5zK7ZMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGFmNWNjMTctNWY2NC0z MmJlLWJhNGMtMWI5OGNiNzQ3MmE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABtMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACKTMnmqgFQQVzOkmfv/K658uFCmKP2XvyNxm8kSrB7dnLQJu0XSUgbc NbRYAA+py4gaFAbM7d/Dsz1tPpqiSBvs1qq/q7q0Vk90tTYp+BUp8nGI3jh5/RGJ sfAGdOa2PK58u5hEtA22oEHrRjjS6vCx2ENCItBN6PMVd5A6iWFLFIDqYxEYZTYP 4pO/TduLyxBsDibqEAclC9uKkUZO/4yeN7YKOhSCHAss1CfpqQwkXGZhmseVJsZS 40WK9UEyW1jfYMWqpfUY8tmigoLIEaTL0o7JIGdf9RB48KpoCZRAIKkUP8Q0UfaI B034ovQ1Iw8SdudeDnK3SMkBVpifLCw= -----END CERTIFICATE-----Generated at Sat Sep 26 10:49:35 2026 by rpki-client