$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa File: f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa (raw, json) Hash identifier: hV6N7JdG9O0Zi1hGYRXXYXaKZ7Tz4b73JF2Nk8BpoWA= Subject key identifier: B2:F0:F2:33:CB:0A:B9:72:3A:B4:88:52:8C:9A:B4:47:6B:09:A8:7F Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F331D274E67F78A61B8524300 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa Signing time: Thu 17 Sep 2026 01:00:11 +0000 ROA not before: Thu 17 Sep 2026 01:00:11 +0000 ROA not after: Wed 16 Dec 2026 02:00:11 +0000 asID: 8881 IP address blocks: 136.0.28.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 22 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:33:1d:27:4e:67:f7:8a:61:b8:52:43:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 17 01:00:11 2026 GMT Not After : Dec 16 02:00:11 2026 GMT Subject: CN=1d5ec93a-61d4-437b-87c9-05442c957b4d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:79:c4:67:a9:4d:b1:b7:d1:77:38:17:33:78: 86:6d:43:c6:2d:79:e5:45:4d:65:0a:fc:4e:74:4f: 35:99:92:46:b0:35:b2:f5:90:b3:1c:bf:89:c9:6c: 8c:e2:de:35:df:95:8e:ce:e9:a9:b4:9c:0f:b7:40: ac:5a:05:6c:f0:06:df:c6:0c:1f:a8:41:61:2c:db: 66:0c:dc:6b:97:4b:11:e8:f4:7c:ed:49:2b:d8:ed: ab:2e:52:c5:50:08:2c:fa:59:e1:26:35:c9:dd:79: 81:4f:24:72:29:c1:8d:1f:60:e8:6d:96:28:91:e7: 83:0c:de:6f:fc:51:4e:7c:b4:58:1c:c4:c0:ee:fa: d5:77:ff:34:0a:29:81:73:1b:60:ec:5c:1b:87:90: 4d:4e:a3:33:91:46:0f:33:b3:33:5c:50:44:db:de: bb:05:1f:a5:66:4c:51:97:9c:cc:1a:f6:eb:bb:1e: f9:24:09:2d:e5:0d:94:e5:70:e3:ad:1c:2c:c4:9a: 69:ca:8a:a7:8a:df:16:6f:07:5d:b3:fb:9e:52:a1: 7b:01:a2:50:7e:f2:10:11:5b:0b:73:03:28:91:47: b6:df:69:82:27:21:c2:3e:80:7a:a9:a4:d6:7d:db: ca:1d:26:97:1d:1d:5d:a7:76:de:c0:db:02:27:25: c7:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:F0:F2:33:CB:0A:B9:72:3A:B4:88:52:8C:9A:B4:47:6B:09:A8:7F Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/f11c28d5-0f6a-3116-b0aa-098ab7dc92e0.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.28.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:47:b5:23:48:ca:a4:eb:19:94:60:2f:ae:ea:a4:17:56:fb: 12:b1:dd:8b:8c:85:34:32:88:1f:65:09:82:17:a1:a7:27:13: d5:39:13:a0:37:f8:b5:e1:32:14:6a:28:f4:71:3e:c3:15:5a: 34:4a:3c:9a:ce:f8:71:0a:93:cc:5d:91:9e:91:fe:1e:68:5c: 01:eb:45:55:71:38:25:9d:e4:7a:b4:04:74:b3:b6:3f:5b:f8: ad:3d:a9:5c:47:9d:e0:ae:7e:c3:ee:5d:eb:70:5c:2a:fb:a8: 51:85:15:31:63:1e:67:96:bc:7f:e3:20:16:57:5d:20:a5:5d: 9a:e0:71:2d:cd:24:72:3e:f0:1b:9e:4f:23:34:8a:60:77:df: d7:a3:7b:06:c0:7e:4a:e8:4d:92:ec:7f:69:1c:fd:19:45:b9: 35:a2:25:a5:aa:d5:5f:b1:4b:a4:0d:1d:01:cd:a9:60:0e:32: d7:9d:1d:9e:68:e6:02:ba:9c:92:ae:6c:63:78:6f:d3:e9:26: a2:9c:3d:e3:f5:d3:45:e4:6b:e8:7f:5d:eb:3d:97:d9:e9:94: e4:a6:e6:d0:b7:b7:eb:e4:11:08:b9:65:9e:d5:a0:8f:8e:b5: ee:6e:16:0b:7f:0b:e2:e2:65:63:8c:2d:ee:c5:51:4d:8c:a5: 29:78:30:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8zHSdOZ/eKYbhSQwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkxNzAxMDAxMVoXDTI2MTIxNjAyMDAxMVowLzEtMCsGA1UEAxMk MWQ1ZWM5M2EtNjFkNC00MzdiLTg3YzktMDU0NDJjOTU3YjRkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHnEZ6lNsbfRdzgXM3iGbUPGLXnlRU1lCvxO dE81mZJGsDWy9ZCzHL+JyWyM4t4135WOzumptJwPt0CsWgVs8AbfxgwfqEFhLNtm DNxrl0sR6PR87Ukr2O2rLlLFUAgs+lnhJjXJ3XmBTyRyKcGNH2DobZYokeeDDN5v /FFOfLRYHMTA7vrVd/80CimBcxtg7Fwbh5BNTqMzkUYPM7MzXFBE2967BR+lZkxR l5zMGvbrux75JAkt5Q2U5XDjrRwsxJppyoqnit8Wbwdds/ueUqF7AaJQfvIQEVsL cwMokUe232mCJyHCPoB6qaTWfdvKHSaXHR1dp3bewNsCJyXHMQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFLLw8jPLCrlyOrSIUoyatEdrCah/MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvZjExYzI4ZDUtMGY2YS0z MTE2LWIwYWEtMDk4YWI3ZGM5MmUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABRHtSNIyqTrGZRgL67qpBdW+xKx3YuMhTQyiB9lCYIXoacnE9U5E6A3 +LXhMhRqKPRxPsMVWjRKPJrO+HEKk8xdkZ6R/h5oXAHrRVVxOCWd5Hq0BHSztj9b +K09qVxHneCufsPuXetwXCr7qFGFFTFjHmeWvH/jIBZXXSClXZrgcS3NJHI+8Bue TyM0imB339ejewbAfkroTZLsf2kc/RlFuTWiJaWq1V+xS6QNHQHNqWAOMtedHZ5o 5gK6nJKubGN4b9PpJqKcPeP100Xka+h/Xes9l9nplOSm5tC3t+vkEQi5ZZ7VoI+O te5uFgt/C+LiZWOMLe7FUU2MpSl4MNA= -----END CERTIFICATE-----Generated at Mon Sep 21 17:17:34 2026 by rpki-client