$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21ad88ca-744c-38d7-b746-f88859128c89.roa File: 21ad88ca-744c-38d7-b746-f88859128c89.roa (raw, json) Hash identifier: PVkx+wS3xLWBvU+bnEP70TSrZWMN7LxOpSGxZr9JmIk= Subject key identifier: 22:5E:D2:FB:B6:1E:23:5D:CB:38:C9:A5:01:34:31:98:34:C6:F7:7C Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F4974E662C6DE021F38F07800 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21ad88ca-744c-38d7-b746-f88859128c89.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 7018 IP address blocks: 136.0.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 29 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:74:e6:62:c6:de:02:1f:38:f0:78:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=9962defc-55aa-40c4-8fad-ca366a9c1e56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:93:e4:84:f1:e8:b6:18:6a:59:d1:e7:b3:fb: ea:72:c7:b4:5a:d7:5f:c9:e5:40:e5:00:87:7b:d8: ee:68:58:5b:6a:03:97:04:cf:7b:7c:b0:a1:50:95: 94:28:d9:3d:0b:38:ec:69:9b:e8:a7:13:ee:79:a5: 77:38:cc:54:10:c2:4c:c9:65:4b:69:18:c6:73:64: 1a:f4:31:33:4b:a1:01:b8:2c:29:f0:07:58:e7:12: 99:d5:de:b6:9b:71:6c:44:f0:6a:4e:96:3d:c1:44: dc:e9:50:b3:1b:d1:2b:4a:ef:72:74:a5:5e:b7:7b: ce:9b:2c:d6:e4:1f:de:b3:67:7f:7f:ee:02:17:a0: 31:10:e0:0c:bf:55:e7:27:16:2f:cd:35:a4:a1:b9: 96:bc:54:cb:47:df:12:4f:23:0f:1f:2a:b7:9d:ce: cf:e5:00:57:73:4e:50:de:ff:3b:33:07:72:6d:2e: 0e:4f:39:83:1d:60:10:73:5b:7e:ce:c4:36:88:c6: 51:c5:53:67:9a:01:3c:65:9f:2c:ac:fb:d8:30:d4: fa:89:0f:34:af:94:5f:97:d1:ad:1f:9e:55:9f:27: 51:11:5c:d4:e8:94:92:da:2d:ac:56:d3:e5:dd:45: 68:b7:51:9f:26:40:31:df:52:69:6e:ee:12:21:22: 8b:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:5E:D2:FB:B6:1E:23:5D:CB:38:C9:A5:01:34:31:98:34:C6:F7:7C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/21ad88ca-744c-38d7-b746-f88859128c89.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 94:a1:63:28:17:0e:db:53:16:c0:ff:90:c1:58:6e:fa:11:dd: 18:d3:a4:2e:3d:7f:a6:96:30:de:95:c3:83:d8:5d:05:84:0e: ff:3b:b6:e2:23:e7:8d:77:6c:e7:8f:c0:6d:b6:1c:01:a9:d1: f7:c6:7f:9c:30:f9:85:c1:71:e6:ba:3c:a8:56:24:9e:a6:39: 48:16:10:36:21:9c:75:46:c1:3a:0e:8d:5d:69:92:35:33:f8: ab:c9:69:a3:c1:ab:e1:9e:59:8b:34:b3:a0:d1:12:32:48:d5: fe:e8:4c:4d:3b:9b:ec:80:1d:8b:24:df:36:c0:c3:6f:7b:c6: 46:d8:6d:ab:8a:7a:f9:f6:34:33:05:e7:f0:2d:b4:14:14:0c: 94:80:90:c7:31:d4:da:f9:7f:78:1c:15:55:40:b0:2b:e1:62: 79:a1:c1:4e:1e:13:ab:a4:96:43:1c:6a:2c:b5:3f:a7:74:71: 30:5b:48:df:50:2f:ee:3a:4d:fd:20:81:4b:6a:32:de:38:ab: 99:87:57:52:b1:95:f7:c6:b5:ed:84:d2:fb:a0:69:2e:60:f9: ab:3a:2e:9f:54:56:fa:3e:cc:e0:e5:9c:10:18:4a:28:a1:1e: 50:46:e0:09:b2:c6:70:90:27:bf:82:1a:9d:54:cf:9b:5e:e4: 90:de:ae:41 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdOZixt4CHzjweAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk OTk2MmRlZmMtNTVhYS00MGM0LThmYWQtY2EzNjZhOWMxZTU2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlJPkhPHothhqWdHns/vqcse0WtdfyeVA5QCH e9juaFhbagOXBM97fLChUJWUKNk9CzjsaZvopxPueaV3OMxUEMJMyWVLaRjGc2Qa 9DEzS6EBuCwp8AdY5xKZ1d62m3FsRPBqTpY9wUTc6VCzG9ErSu9ydKVet3vOmyzW 5B/es2d/f+4CF6AxEOAMv1XnJxYvzTWkobmWvFTLR98STyMPHyq3nc7P5QBXc05Q 3v87MwdybS4OTzmDHWAQc1t+zsQ2iMZRxVNnmgE8ZZ8srPvYMNT6iQ80r5Rfl9Gt H55VnydREVzU6JSS2i2sVtPl3UVot1GfJkAx31Jpbu4SISKLfwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCJe0vu2HiNdyzjJpQE0MZg0xvd8MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMjFhZDg4Y2EtNzQ0Yy0z OGQ3LWI3NDYtZjg4ODU5MTI4Yzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAJShYygXDttTFsD/kMFYbvoR3RjTpC49f6aWMN6Vw4PYXQWEDv87tuIj 5413bOePwG22HAGp0ffGf5ww+YXBcea6PKhWJJ6mOUgWEDYhnHVGwToOjV1pkjUz +KvJaaPBq+GeWYs0s6DREjJI1f7oTE07m+yAHYsk3zbAw297xkbYbauKevn2NDMF 5/AttBQUDJSAkMcx1Nr5f3gcFVVAsCvhYnmhwU4eE6uklkMcaiy1P6d0cTBbSN9Q L+46Tf0ggUtqMt44q5mHV1KxlffGte2E0vugaS5g+as6Lp9UVvo+zODlnBAYSiih HlBG4AmyxnCQJ7+CGp1Uz5te5JDerkE= -----END CERTIFICATE-----Generated at Mon Sep 28 07:21:59 2026 by rpki-client