$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d52f60a-8da0-36f1-b6e3-0b753c7554cd.roa File: 2d52f60a-8da0-36f1-b6e3-0b753c7554cd.roa (raw, json) Hash identifier: dLmf5BCBBLYh3qPzGyi78qd4RjKuqs9LKmjbeJ1JRNg= Subject key identifier: 28:16:A0:3C:CA:07:70:17:AB:D7:E6:F3:89:68:D5:EA:B1:5A:92:B1 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F0ED22BED497AA4B64F9E0500 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d52f60a-8da0-36f1-b6e3-0b753c7554cd.roa Signing time: Fri 04 Sep 2026 01:00:12 +0000 ROA not before: Fri 04 Sep 2026 01:00:12 +0000 ROA not after: Thu 03 Dec 2026 02:00:12 +0000 asID: 7488 IP address blocks: 136.0.57.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 26 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0e:d2:2b:ed:49:7a:a4:b6:4f:9e:05:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 4 01:00:12 2026 GMT Not After : Dec 3 02:00:12 2026 GMT Subject: CN=2d798ca3-9a7e-4e3b-889d-0799cf57b371 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:4a:be:2a:5c:1c:56:07:0a:c4:c4:b8:40:48: 6b:66:5f:24:42:f1:e4:55:50:b4:b5:a8:8e:7a:9c: f4:15:bb:dc:5e:aa:72:f1:26:62:b2:3a:68:7d:b1: b3:e6:bb:8f:03:2c:8d:0a:82:4d:e5:f4:2b:1c:a1: 38:e7:f3:b3:3d:e9:25:02:42:6d:10:5c:67:ba:10: ea:4e:7b:0f:a8:4f:57:9d:6f:f8:7f:f8:0e:c8:3c: 38:f9:36:3b:17:ca:9e:93:3a:10:39:bb:5c:cf:b4: 5b:c2:21:d2:07:f4:42:ca:09:c3:b4:a1:63:91:bd: be:78:ec:16:ec:1c:f4:f4:a9:27:e6:1f:2a:e1:19: 4f:3c:3d:cf:58:d7:86:a8:e3:18:77:57:8a:b8:cc: 4d:1c:54:d9:87:7d:22:a6:f7:bf:a3:c3:5e:80:1b: 4f:78:0e:b5:e2:c2:48:94:38:c7:38:5a:d8:20:56: 80:6f:48:ef:08:46:aa:bd:8b:65:f1:7e:78:3d:ac: c6:35:40:20:74:9e:e1:96:33:4d:a0:7f:f9:b2:bd: d0:53:e2:d6:7e:06:44:73:fd:07:6a:5c:39:7a:f3: 41:82:41:ec:b8:38:dc:44:56:8e:b1:17:13:28:4b: 66:40:73:03:32:95:19:93:8d:38:1e:a1:ec:61:eb: c2:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:16:A0:3C:CA:07:70:17:AB:D7:E6:F3:89:68:D5:EA:B1:5A:92:B1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/2d52f60a-8da0-36f1-b6e3-0b753c7554cd.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.57.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:e7:ad:b9:d8:52:60:94:38:4e:23:93:3d:77:18:ab:f7:41: 40:08:ae:73:1d:fd:32:2b:97:51:1c:c0:32:96:fe:63:e5:ad: 9a:ba:6c:bd:43:6d:e7:3c:d4:87:b6:20:82:7b:82:f5:2d:32: 05:bc:6c:32:23:0b:82:bd:ca:7f:3f:20:ae:8d:4b:a3:03:66: b6:75:06:0d:e1:8c:80:a1:e5:b0:9b:bc:11:56:07:be:35:89: 63:55:6a:f4:28:ad:0e:5a:0c:04:18:08:fa:f2:cb:38:7d:2f: 08:a6:c5:1d:d6:c3:a9:18:aa:84:b7:81:2a:b0:20:2c:2f:55: 76:ef:92:7d:16:36:a8:98:de:ca:1b:3e:24:23:27:d4:63:a6: 3e:ca:68:98:9f:c8:3c:b0:db:8a:95:41:e4:64:6a:61:c9:b5: ef:37:bb:d9:b0:ce:43:a7:40:1a:a2:47:35:00:75:ec:5c:f0: 1a:3f:cc:ae:1c:8d:7b:a0:23:02:75:1c:d1:90:76:94:a3:1c: 25:f0:f5:bc:c7:4d:2b:64:45:86:c3:e5:4c:b5:50:d5:3b:05: e4:cc:77:c0:8f:ce:27:93:a3:60:c1:eb:a5:da:3c:71:2a:57: e2:32:54:a8:ac:ba:08:d0:c6:9c:88:84:bb:1a:44:5d:f4:8a: b0:bd:24:2e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8O0ivtSXqktk+eBQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk MmQ3OThjYTMtOWE3ZS00ZTNiLTg4OWQtMDc5OWNmNTdiMzcxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0q+KlwcVgcKxMS4QEhrZl8kQvHkVVC0taiO epz0FbvcXqpy8SZisjpofbGz5ruPAyyNCoJN5fQrHKE45/OzPeklAkJtEFxnuhDq TnsPqE9XnW/4f/gOyDw4+TY7F8qekzoQObtcz7RbwiHSB/RCygnDtKFjkb2+eOwW 7Bz09Kkn5h8q4RlPPD3PWNeGqOMYd1eKuMxNHFTZh30ipve/o8NegBtPeA614sJI lDjHOFrYIFaAb0jvCEaqvYtl8X54PazGNUAgdJ7hljNNoH/5sr3QU+LWfgZEc/0H alw5evNBgkHsuDjcRFaOsRcTKEtmQHMDMpUZk404HqHsYevCFwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCgWoDzKB3AXq9fm84lo1eqxWpKxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMmQ1MmY2MGEtOGRhMC0z NmYxLWI2ZTMtMGI3NTNjNzU1NGNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAA5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHPnrbnYUmCUOE4jkz13GKv3QUAIrnMd/TIrl1EcwDKW/mPlrZq6bL1D bec81Ie2IIJ7gvUtMgW8bDIjC4K9yn8/IK6NS6MDZrZ1Bg3hjICh5bCbvBFWB741 iWNVavQorQ5aDAQYCPryyzh9LwimxR3Ww6kYqoS3gSqwICwvVXbvkn0WNqiY3sob PiQjJ9Rjpj7KaJifyDyw24qVQeRkamHJte83u9mwzkOnQBqiRzUAdexc8Bo/zK4c jXugIwJ1HNGQdpSjHCXw9bzHTStkRYbD5Uy1UNU7BeTMd8CPzieTo2DB66XaPHEq V+IyVKisugjQxpyIhLsaRF30irC9JC4= -----END CERTIFICATE-----Generated at Thu Sep 24 21:54:29 2026 by rpki-client