$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa File: dc8c816f-cb03-3b1b-830c-ce990ced9970.roa (raw, json) Hash identifier: vwxQWe0h+u59sDFEUTWdOO+wWJPQHhKWeWlcmp32ixA= Subject key identifier: 30:94:B0:A6:50:96:67:50:9E:05:87:8B:D5:76:07:F7:5F:01:40:90 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F268D0A85607D0620CC11D1B0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa Signing time: Sat 12 Sep 2026 13:00:13 +0000 ROA not before: Sat 12 Sep 2026 13:00:13 +0000 ROA not after: Fri 11 Dec 2026 14:00:13 +0000 asID: 214150 IP address blocks: 136.0.243.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 23 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:26:8d:0a:85:60:7d:06:20:cc:11:d1:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 12 13:00:13 2026 GMT Not After : Dec 11 14:00:13 2026 GMT Subject: CN=21d6a048-45ea-4e78-8f6f-a8d5be3a0aa9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:7a:a9:66:4c:82:2a:0b:d2:b8:7b:dd:d9:e1: 3f:af:85:42:8f:23:8a:1b:59:77:20:ef:13:29:a6: bc:8a:0e:cc:b8:92:9e:33:b0:81:9f:35:65:98:a2: 45:29:aa:ef:98:34:ee:49:71:66:d1:03:0b:12:10: 09:77:7c:80:61:47:74:fb:5b:5f:3f:00:a3:4f:87: bc:44:0c:13:a9:bb:29:3c:8d:b2:16:b3:6d:f6:e3: f3:d8:a0:43:90:f7:78:14:8f:a8:44:9d:ef:60:aa: 07:97:d9:c3:56:18:05:b8:ac:80:3f:e3:d1:1b:d7: 02:92:bd:25:cc:2c:e3:0a:b7:7f:dd:31:2b:7a:44: da:65:18:55:be:57:6f:bc:3a:ab:7b:4d:86:c7:68: 90:50:c0:d4:a5:15:01:af:a2:dd:98:97:dc:98:b2: 85:52:17:b6:7d:e0:35:72:f7:ac:55:91:0e:1b:57: 7b:6e:71:9d:b7:5f:31:9d:2a:b5:d1:dc:c1:2a:b5: 80:e4:85:4a:23:6c:6e:13:b6:e1:9c:b8:4f:81:8a: 1e:09:f9:81:0e:1e:a7:4d:78:81:28:f0:b6:83:b6: f2:d7:55:c0:f1:12:ce:7a:c0:cc:e6:71:aa:b2:1e: 67:13:dc:59:12:3d:54:36:01:14:9a:1c:8d:66:7b: c8:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:94:B0:A6:50:96:67:50:9E:05:87:8B:D5:76:07:F7:5F:01:40:90 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/dc8c816f-cb03-3b1b-830c-ce990ced9970.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.243.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:6b:6a:8a:d1:14:c7:9e:0d:b2:bf:ac:42:4b:bf:88:7f:04: 59:a7:25:c1:61:f5:53:30:e7:87:14:b2:0f:e6:cc:cb:dc:52: d3:41:e6:1a:e9:a9:11:35:15:a8:a5:b9:19:57:33:2e:cc:ea: a0:3f:b4:ae:90:c5:4b:9f:19:3b:e1:17:20:36:83:8f:dd:51: 0c:51:08:e7:ff:14:67:5b:25:af:48:23:ea:9b:a5:46:f9:6e: 71:16:38:e6:d3:dc:75:ef:5e:a0:bb:b7:cf:2e:90:24:ba:56: 54:c7:8f:e8:17:f3:19:c4:57:6f:55:e0:ee:a2:56:33:c9:7a: 0e:f1:05:34:92:81:43:b8:90:ca:2d:ab:0d:92:41:cd:11:8d: b0:c7:51:e8:51:d9:a3:e8:99:e9:24:fa:1b:58:89:5d:54:79: 12:3e:52:a3:87:ad:d9:85:94:ff:29:29:83:bb:bf:8d:4e:cf: f9:72:f6:5d:40:53:97:9c:98:30:f1:bb:04:23:18:d0:2c:07: cf:cf:45:81:09:36:ad:ae:7d:c4:d0:1c:20:b4:26:c6:6b:ae: ec:96:34:ac:bc:c7:29:cc:57:ef:de:70:d7:4b:45:b9:bc:59: 20:57:a1:f8:ea:1f:58:76:c6:94:e4:94:28:0c:79:8d:7e:e6: 3f:34:8c:c3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8mjQqFYH0GIMwR0bAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxMjEzMDAxM1oXDTI2MTIxMTE0MDAxM1owLzEtMCsGA1UEAxMk MjFkNmEwNDgtNDVlYS00ZTc4LThmNmYtYThkNWJlM2EwYWE5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nqpZkyCKgvSuHvd2eE/r4VCjyOKG1l3IO8T Kaa8ig7MuJKeM7CBnzVlmKJFKarvmDTuSXFm0QMLEhAJd3yAYUd0+1tfPwCjT4e8 RAwTqbspPI2yFrNt9uPz2KBDkPd4FI+oRJ3vYKoHl9nDVhgFuKyAP+PRG9cCkr0l zCzjCrd/3TErekTaZRhVvldvvDqre02Gx2iQUMDUpRUBr6LdmJfcmLKFUhe2feA1 cvesVZEOG1d7bnGdt18xnSq10dzBKrWA5IVKI2xuE7bhnLhPgYoeCfmBDh6nTXiB KPC2g7by11XA8RLOesDM5nGqsh5nE9xZEj1UNgEUmhyNZnvIpwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDCUsKZQlmdQngWHi9V2B/dfAUCQMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGM4YzgxNmYtY2IwMy0z YjFiLTgzMGMtY2U5OTBjZWQ5OTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADzMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAZraorRFMeeDbK/rEJLv4h/BFmnJcFh9VMw54cUsg/mzMvcUtNB5hrp qRE1FailuRlXMy7M6qA/tK6QxUufGTvhFyA2g4/dUQxRCOf/FGdbJa9II+qbpUb5 bnEWOObT3HXvXqC7t88ukCS6VlTHj+gX8xnEV29V4O6iVjPJeg7xBTSSgUO4kMot qw2SQc0RjbDHUehR2aPomekk+htYiV1UeRI+UqOHrdmFlP8pKYO7v41Oz/ly9l1A U5ecmDDxuwQjGNAsB8/PRYEJNq2ufcTQHCC0JsZrruyWNKy8xynMV+/ecNdLRbm8 WSBXofjqH1h2xpTklCgMeY1+5j80jMM= -----END CERTIFICATE-----Generated at Tue Sep 22 07:08:40 2026 by rpki-client