$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa File: def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa (raw, json) Hash identifier: /vSVeEoFl04X3gFfk+OclQ7sRgn9YItnuhL7Jd0nIzE= Subject key identifier: E4:46:24:47:5F:E1:A1:94:A4:81:45:66:B5:DE:D6:D9:74:22:FA:6E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F331D2771A5B3CC7A08075800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 8881 IP address blocks: 136.0.148.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:27:71:a5:b3:cc:7a:08:07:58:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=229daea0-0a0a-4822-85fe-c07740d27e4c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:66:e3:78:da:98:2d:3b:88:84:65:cc:6d:21: 38:d7:86:8b:48:63:63:6b:20:af:64:95:ec:8b:26: 8f:ec:05:f5:25:53:0d:bb:e8:e3:3a:c1:81:15:13: c6:46:fb:13:55:88:67:b7:8a:82:34:b6:98:a7:8e: f8:12:42:8b:c7:a0:d8:b1:22:2d:ef:30:14:2c:a0: a5:6e:ca:f1:9b:e7:48:48:12:95:41:fa:93:20:1d: be:5c:96:14:c5:27:f3:64:2b:64:e0:53:78:3b:e3: d8:23:70:87:de:e8:06:b8:8f:da:a3:d1:9f:eb:91: 05:e4:3d:f9:1e:af:2b:53:e2:07:16:6f:39:74:e2: 96:3c:9b:dc:16:bf:0b:ef:7a:30:3c:fd:3e:fe:8d: 45:08:39:57:99:85:10:3d:ff:b8:83:d7:ee:5d:5a: ff:8b:b4:dd:21:07:c8:56:11:c5:19:93:2a:14:7e: 78:3e:c0:78:26:46:83:2d:7b:40:70:16:19:22:d5: 9b:a6:ce:63:53:4f:91:7d:4f:df:a3:8a:35:43:61: 0c:ce:e8:b5:9f:4f:a4:df:20:e5:b8:a2:da:90:52: a6:21:2a:24:c2:4c:29:09:1c:5d:7f:0a:e5:80:9d: 71:94:90:8b:99:cd:73:87:b5:b3:40:09:74:bc:f7: aa:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:46:24:47:5F:E1:A1:94:A4:81:45:66:B5:DE:D6:D9:74:22:FA:6E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/def6cc03-ef21-30d2-9a02-5e771e1a04a9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.148.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 07:50:d2:26:39:81:20:2c:3a:7e:d2:46:15:d4:1b:6b:51:cf: 65:8f:5e:aa:db:c5:f5:72:1d:08:66:73:51:e8:c4:42:40:7b: b8:04:3a:1c:8d:b4:89:3d:37:57:e5:13:fe:86:ca:00:fc:3d: ce:b0:19:96:f9:e1:8a:6b:fb:fc:82:c5:f8:0a:37:d2:b5:30: fb:77:ea:69:3d:ce:fe:2d:e5:17:4f:7b:c6:f1:d5:b4:c3:7f: 6a:57:a1:ff:9e:c1:b8:62:9d:5a:c0:76:9a:62:8c:8e:b7:51: 80:ba:64:69:d2:e9:53:37:f5:8d:24:b0:90:f5:ef:48:ba:39: 7b:e6:5b:50:0e:b9:2d:9b:45:c0:56:54:da:f7:d5:68:01:36: 5f:1a:b8:8d:fc:2a:13:b3:56:26:49:4e:8c:1c:58:21:34:f5: a7:4c:c8:a9:bf:5f:a2:12:e8:e3:0d:66:8d:91:9f:cf:57:e2: 53:0e:6d:31:f9:ac:95:b9:b0:e5:35:70:f4:74:de:09:df:39: a9:fe:64:90:9d:ad:d7:a8:5d:9f:fd:eb:04:b3:bf:4e:a3:7e: af:40:92:53:76:8c:21:9b:d0:ba:7c:91:43:2e:4a:60:d5:9f: cc:c8:cf:9c:af:c6:6a:fa:d8:89:13:fa:fd:51:2e:53:5d:78: ec:79:5f:31 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSdxpbPMeggHWAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MjI5ZGFlYTAtMGEwYS00ODIyLTg1ZmUtYzA3NzQwZDI3ZTRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2bjeNqYLTuIhGXMbSE414aLSGNjayCvZJXs iyaP7AX1JVMNu+jjOsGBFRPGRvsTVYhnt4qCNLaYp474EkKLx6DYsSIt7zAULKCl bsrxm+dISBKVQfqTIB2+XJYUxSfzZCtk4FN4O+PYI3CH3ugGuI/ao9Gf65EF5D35 Hq8rU+IHFm85dOKWPJvcFr8L73owPP0+/o1FCDlXmYUQPf+4g9fuXVr/i7TdIQfI VhHFGZMqFH54PsB4JkaDLXtAcBYZItWbps5jU0+RfU/fo4o1Q2EMzui1n0+k3yDl uKLakFKmISokwkwpCRxdfwrlgJ1xlJCLmc1zh7WzQAl0vPeqTQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFORGJEdf4aGUpIFFZrXe1tl0IvpuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZGVmNmNjMDMtZWYyMS0z MGQyLTlhMDItNWU3NzFlMWEwNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAdQ0iY5gSAsOn7SRhXUG2tRz2WPXqrbxfVyHQhmc1HoxEJAe7gEOhyN tIk9N1flE/6GygD8Pc6wGZb54Ypr+/yCxfgKN9K1MPt36mk9zv4t5RdPe8bx1bTD f2pXof+ewbhinVrAdppijI63UYC6ZGnS6VM39Y0ksJD170i6OXvmW1AOuS2bRcBW VNr31WgBNl8auI38KhOzViZJTowcWCE09adMyKm/X6IS6OMNZo2Rn89X4lMObTH5 rJW5sOU1cPR03gnfOan+ZJCdrdeoXZ/96wSzv06jfq9AklN2jCGb0Lp8kUMuSmDV n8zIz5yvxmr62IkT+v1RLlNdeOx5XzE= -----END CERTIFICATE-----Generated at Mon Sep 21 16:52:46 2026 by rpki-client