$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db0913ce-b92e-31d3-a8ff-fe2b950f121e.roa File: db0913ce-b92e-31d3-a8ff-fe2b950f121e.roa (raw, json) Hash identifier: Nv3IsfFIdmzFaDq3huKfb5Jpasx5qZ2IgsjEQ+RD8+A= Subject key identifier: DD:11:1A:F7:BE:CB:65:B3:7F:7E:84:71:C4:E6:67:13:E1:1C:B2:5D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584E07E43CB66EFCCC43C3C7FD80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db0913ce-b92e-31d3-a8ff-fe2b950f121e.roa Signing time: Mon 01 Jun 2026 20:39:02 +0000 ROA not before: Mon 01 Jun 2026 20:39:02 +0000 ROA not after: Sun 30 Aug 2026 20:39:02 +0000 asID: 401152 IP address blocks: 136.0.161.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 14 Jun 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:07:e4:3c:b6:6e:fc:cc:43:c3:c7:fd:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Jun 1 20:39:02 2026 GMT Not After : Aug 30 20:39:02 2026 GMT Subject: CN=0d211005-e17f-47ad-95dd-1f0a38cb9170 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:c5:fb:08:81:bc:80:5b:8e:eb:62:cd:57:0a: b4:83:e6:0c:6b:c2:1b:15:e8:aa:d4:8e:d0:79:c3: 13:f5:67:7d:67:4f:9b:6b:7a:64:15:95:00:d9:e6: a3:78:ca:86:f5:a4:66:f6:a8:fc:ca:a2:99:cc:18: 83:79:05:cf:49:7e:bb:23:b6:c1:bf:f2:71:1b:9d: 06:27:77:f3:80:3d:d3:97:dd:4e:21:24:c0:4e:1d: 74:59:1e:83:32:d5:d2:bf:ee:b3:a6:a2:07:8f:ba: 27:6b:62:36:8b:50:1b:0d:6b:41:1d:a4:4a:12:a5: 6b:ea:86:cc:a4:f2:f6:26:b8:8c:08:1a:40:b3:70: 02:b9:4a:9d:cc:33:e1:8a:17:ad:f5:a4:f5:a2:49: 29:07:23:a4:f8:5c:52:d9:0c:83:42:ce:dd:48:c4: 47:ab:e1:1d:d9:1f:f9:91:d8:a3:e1:bb:30:3d:be: 22:49:be:c4:d1:07:15:34:26:19:cb:1a:f4:4f:be: f9:ca:b4:1e:a7:5e:b1:67:a7:e6:f6:db:da:2e:06: a2:0d:12:ac:88:fe:91:4b:cf:28:a4:b6:be:da:c7: ce:78:68:f7:d4:54:50:9c:f2:a9:3f:d0:91:60:db: b3:79:5e:f4:8f:88:94:3d:c5:e8:b2:8f:4f:91:1e: a5:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:11:1A:F7:BE:CB:65:B3:7F:7E:84:71:C4:E6:67:13:E1:1C:B2:5D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/db0913ce-b92e-31d3-a8ff-fe2b950f121e.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.161.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 19:c2:e0:6a:14:6e:ec:2b:2b:1b:83:1a:c5:ca:b8:49:17:72: c9:04:a8:89:42:b0:56:bb:17:47:d8:39:ac:1e:ae:6f:bd:c3: 4a:25:b4:13:9b:77:67:7e:e6:cf:a4:c3:f1:15:6d:e4:ac:c0: d6:10:e9:ff:ba:8a:d3:8d:e8:1e:bd:d3:bc:11:ee:cc:5b:90: 7b:70:36:39:32:ae:f8:97:26:12:7f:4c:17:87:ee:65:60:75: ea:11:11:92:35:02:4f:eb:e0:2c:ce:27:2e:30:de:db:fb:ae: 18:c0:f0:47:f6:81:f5:02:67:4a:f0:11:61:b3:a7:0d:6f:b1: a2:3b:5a:eb:3a:a2:bb:6b:8a:4f:da:6f:e0:47:e5:95:5a:c3: a3:96:bd:3c:07:d1:6b:05:7b:7b:76:18:3d:80:6e:79:38:70: 1f:a8:ca:eb:90:61:c2:a2:71:13:da:06:c6:73:56:51:fa:d5: 8d:1e:d8:16:70:7c:90:5e:0e:92:69:e6:e6:42:5b:6c:ea:b2: 01:fd:3f:7a:11:55:56:70:be:2b:fd:7b:c5:19:0e:fb:1e:c5: 31:64:72:48:56:5a:6f:56:0a:b9:a8:ed:1c:ad:b0:68:ad:e4: f5:49:78:e6:f0:8b:50:46:b7:f9:ed:50:f6:1f:b5:ba:82:11: 41:e5:99:b6 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4H5Dy2bvzMQ8PH/YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDYwMTIwMzkwMloXDTI2MDgzMDIwMzkwMlowLzEtMCsGA1UEAxMk MGQyMTEwMDUtZTE3Zi00N2FkLTk1ZGQtMWYwYTM4Y2I5MTcwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7sX7CIG8gFuO62LNVwq0g+YMa8IbFeiq1I7Q ecMT9Wd9Z0+ba3pkFZUA2eajeMqG9aRm9qj8yqKZzBiDeQXPSX67I7bBv/JxG50G J3fzgD3Tl91OISTATh10WR6DMtXSv+6zpqIHj7ona2I2i1AbDWtBHaRKEqVr6obM pPL2JriMCBpAs3ACuUqdzDPhihet9aT1okkpByOk+FxS2QyDQs7dSMRHq+Ed2R/5 kdij4bswPb4iSb7E0QcVNCYZyxr0T775yrQep16xZ6fm9tvaLgaiDRKsiP6RS88o pLa+2sfOeGj31FRQnPKpP9CRYNuzeV70j4iUPcXoso9PkR6l6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN0RGve+y2Wzf36EccTmZxPhHLJdMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGIwOTEzY2UtYjkyZS0z MWQzLWE4ZmYtZmUyYjk1MGYxMjFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAChMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABnC4GoUbuwrKxuDGsXKuEkXcskEqIlCsFa7F0fYOawerm+9w0oltBOb d2d+5s+kw/EVbeSswNYQ6f+6itON6B6907wR7sxbkHtwNjkyrviXJhJ/TBeH7mVg deoREZI1Ak/r4CzOJy4w3tv7rhjA8Ef2gfUCZ0rwEWGzpw1vsaI7Wus6ortrik/a b+BH5ZVaw6OWvTwH0WsFe3t2GD2Abnk4cB+oyuuQYcKicRPaBsZzVlH61Y0e2BZw fJBeDpJp5uZCW2zqsgH9P3oRVVZwviv9e8UZDvsexTFkckhWWm9WCrmo7RytsGit 5PVJeObwi1BGt/ntUPYftbqCEUHlmbY= -----END CERTIFICATE-----Generated at Sat Jun 13 08:23:17 2026 by rpki-client