$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/127468a1-cd67-363d-a8fb-c77ee3d2f8e4.roa File: 127468a1-cd67-363d-a8fb-c77ee3d2f8e4.roa (raw, json) Hash identifier: OpLuFMY1zlZJiUViy2UYN6ZoP8DRiNOYtbagN7GjNIU= Subject key identifier: AF:58:D1:42:38:0A:12:AA:E6:74:5B:36:44:76:4D:C6:CA:0A:19:AD Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F498804D6B47BD5BDF5933D80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/127468a1-cd67-363d-a8fb-c77ee3d2f8e4.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 10753 IP address blocks: 136.0.223.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:04:d6:b4:7b:d5:bd:f5:93:3d:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=3b08dde1-dd10-4150-85d6-8d57945a65fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:7c:f3:ef:58:71:18:db:1c:cc:21:f5:11:e6: f2:d7:95:c8:d8:4b:f9:bb:36:ed:4a:c6:89:a7:bb: c6:80:56:06:c1:d6:4a:10:52:38:eb:8f:56:08:ce: 05:68:59:a6:15:3e:6d:4d:c2:9d:f8:ec:d1:73:c3: be:ca:fd:a7:60:6d:09:23:96:fc:50:61:2b:10:bc: 53:6e:50:16:fe:40:17:48:14:cc:ab:16:2e:00:35: 81:57:d7:31:a7:83:00:c1:ca:24:ef:74:d5:27:19: f7:2e:47:bd:f9:c0:3d:aa:47:38:36:0a:45:9f:d3: c0:fb:e5:f0:f8:c0:2b:ae:80:be:12:6b:7e:ac:0f: 41:a7:e4:37:9c:e5:3c:6e:5f:cc:b5:38:25:9d:2f: 31:53:45:fe:e7:d2:96:16:ae:0b:b1:c1:e2:e5:e7: a5:85:c2:93:3e:54:a4:42:fe:6f:f8:45:0a:c2:64: 60:5f:ca:8f:76:c7:f0:2d:85:9a:92:50:73:56:d5: e7:8a:6c:40:45:28:0f:d7:fb:83:41:6f:a7:37:73: 65:57:d7:ff:0a:04:c2:b8:7c:88:11:ee:31:a5:ae: 9a:ec:15:86:e2:40:4a:8c:58:b5:bd:05:62:64:c2: 51:ca:ea:a7:b0:6a:70:43:ed:8a:53:57:bc:75:cc: 16:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:58:D1:42:38:0A:12:AA:E6:74:5B:36:44:76:4D:C6:CA:0A:19:AD Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/127468a1-cd67-363d-a8fb-c77ee3d2f8e4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.223.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:69:4a:35:bc:01:c7:d2:be:76:d5:5d:98:a7:de:46:8b:78: 33:eb:c7:60:32:20:49:c7:c8:5e:a4:00:b3:da:f7:da:98:02: eb:0a:8b:4b:8b:19:e2:09:33:2f:61:b6:d7:2b:7d:42:c0:a0: dd:29:bd:0f:69:5e:f2:87:a0:9f:1f:7a:43:7c:2d:fe:12:d6: 39:91:1a:ce:db:2c:03:07:32:07:80:eb:ba:2f:7c:a5:4a:72: 01:69:bc:5f:2a:55:e6:53:bc:6c:0e:c3:71:13:33:0a:e8:3a: 75:3d:73:af:5e:57:b2:67:ec:82:62:cd:b1:14:f8:41:c2:c1: cb:ef:af:70:55:b6:b0:7b:28:60:42:c1:13:32:76:d3:80:5f: 18:b7:ff:13:2b:37:bf:d3:38:00:bb:74:42:fd:75:48:c0:4f: 98:95:9c:1b:69:1c:4b:a7:98:af:79:c7:17:f5:7b:5b:4d:07: 12:c4:59:ea:dc:75:8a:4e:4c:de:06:bc:2a:67:31:e1:37:0c: 92:29:fa:c4:d8:a4:79:58:e2:88:0b:ab:a5:4c:a8:5a:6e:c6: bc:68:bc:f4:58:18:3e:97:56:73:40:ca:15:c8:c0:57:64:b1: 50:6c:1b:e0:39:a3:10:32:eb:2c:07:13:4a:bd:17:e8:21:3a: 91:3c:be:55 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiATWtHvVvfWTPYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk M2IwOGRkZTEtZGQxMC00MTUwLTg1ZDYtOGQ1Nzk0NWE2NWZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHzz71hxGNsczCH1Eeby15XI2Ev5uzbtSsaJ p7vGgFYGwdZKEFI4649WCM4FaFmmFT5tTcKd+OzRc8O+yv2nYG0JI5b8UGErELxT blAW/kAXSBTMqxYuADWBV9cxp4MAwcok73TVJxn3Lke9+cA9qkc4NgpFn9PA++Xw +MArroC+Emt+rA9Bp+Q3nOU8bl/MtTglnS8xU0X+59KWFq4LscHi5eelhcKTPlSk Qv5v+EUKwmRgX8qPdsfwLYWaklBzVtXnimxARSgP1/uDQW+nN3NlV9f/CgTCuHyI Ee4xpa6a7BWG4kBKjFi1vQViZMJRyuqnsGpwQ+2KU1e8dcwWwwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFK9Y0UI4ChKq5nRbNkR2TcbKChmtMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTI3NDY4YTEtY2Q2Ny0z NjNkLWE4ZmItYzc3ZWUzZDJmOGU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADfMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJpSjW8AcfSvnbVXZin3kaLeDPrx2AyIEnHyF6kALPa99qYAusKi0uL GeIJMy9httcrfULAoN0pvQ9pXvKHoJ8fekN8Lf4S1jmRGs7bLAMHMgeA67ovfKVK cgFpvF8qVeZTvGwOw3ETMwroOnU9c69eV7Jn7IJizbEU+EHCwcvvr3BVtrB7KGBC wRMydtOAXxi3/xMrN7/TOAC7dEL9dUjAT5iVnBtpHEunmK95xxf1e1tNBxLEWerc dYpOTN4GvCpnMeE3DJIp+sTYpHlY4ogLq6VMqFpuxrxovPRYGD6XVnNAyhXIwFdk sVBsG+A5oxAy6ywHE0q9F+ghOpE8vlU= -----END CERTIFICATE-----Generated at Sat Sep 26 02:00:06 2026 by rpki-client