$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c48c363-738e-39f2-a18d-9b2ec3c2a9fc.roa File: 3c48c363-738e-39f2-a18d-9b2ec3c2a9fc.roa (raw, json) Hash identifier: V2l6kCrzLCZm5pRhYXWdXir8+BPMpgmou0q2LDE8bFg= Subject key identifier: 17:36:5E:C3:49:A5:D3:99:40:29:FE:81:BD:72:AD:DB:5C:40:A0:80 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0CC936E331519383036FCEA0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c48c363-738e-39f2-a18d-9b2ec3c2a9fc.roa Signing time: Tue 03 Mar 2026 21:56:42 +0000 ROA not before: Tue 03 Mar 2026 21:56:42 +0000 ROA not after: Mon 01 Jun 2026 20:56:42 +0000 asID: 210355 IP address blocks: 136.0.21.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0c:c9:36:e3:31:51:93:83:03:6f:ce:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 3 21:56:42 2026 GMT Not After : Jun 1 20:56:42 2026 GMT Subject: CN=0de9b524-3599-494e-b149-204fca40c647 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:6d:d5:85:f3:82:c8:20:11:e9:03:a3:ef:2c: fa:c3:38:ee:e1:9a:04:dd:ae:ce:bf:88:08:37:f0: c5:d2:4e:f8:52:0c:c0:de:e5:01:3d:35:9f:2d:29: 34:38:3a:c3:6f:9b:a9:d2:d6:30:c5:f9:d3:9b:2e: b4:6b:76:53:e4:41:1e:bc:db:61:fa:50:6c:a4:74: 9c:1b:8d:19:63:d0:ed:ef:98:31:17:d4:77:26:7a: 79:83:3d:80:0b:a2:00:06:e1:2b:3a:30:e5:0b:d8: bc:5f:36:82:41:49:ef:6c:52:a5:70:8d:11:51:76: b6:59:fd:73:a4:da:9b:00:e9:01:6e:51:80:c1:e3: a7:90:f3:f8:0e:c3:53:e9:5c:a8:1a:2f:c9:9e:68: 7a:62:90:29:68:e2:b4:2d:2e:f7:c5:de:6d:e1:ec: f1:8d:87:19:2e:c2:be:69:00:43:a0:9f:06:bc:11: 1f:21:e4:47:c6:d7:48:e3:d9:fe:d3:fb:51:2d:2a: 48:e3:64:eb:09:53:06:17:cb:1b:f1:53:0d:6d:94: 1c:54:75:fd:2f:90:fc:f2:e9:9f:12:03:b9:f8:72: f2:9d:35:ac:e8:a1:36:d6:ec:59:a3:f8:48:95:a4: ad:f8:f4:6e:07:70:b5:bd:4c:ea:36:5e:27:5d:c9: 88:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:36:5E:C3:49:A5:D3:99:40:29:FE:81:BD:72:AD:DB:5C:40:A0:80 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/3c48c363-738e-39f2-a18d-9b2ec3c2a9fc.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.21.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 00:ca:63:f4:ce:7d:31:a3:03:4d:a0:da:63:79:99:41:7a:a9: f0:8d:65:a6:fa:4d:7a:4d:e8:1a:9a:1a:22:3c:ff:dd:d1:a6: 7b:ea:67:2d:c8:73:1c:71:e3:1c:14:4b:90:2f:1d:66:f3:c0: 45:dc:9d:13:8f:d6:1d:d4:00:61:97:e4:2b:d4:1e:13:00:3c: 07:99:20:2a:74:a7:13:44:1c:e3:48:d3:08:53:37:70:44:69: cf:87:f2:fe:d6:aa:e1:ba:63:ed:73:42:3b:76:17:9c:f3:8d: 70:5f:a0:15:26:4e:bb:63:ac:ed:d9:ac:58:2f:6b:97:9c:62: 77:e3:c4:5b:59:42:f5:39:d6:9b:9f:00:f7:56:3b:bd:78:da: 17:83:1a:34:35:56:f4:06:c8:19:91:de:85:29:78:a4:64:15: 4e:2c:81:29:1e:18:4b:5f:d1:e1:29:42:ac:72:80:be:91:f1: 39:6d:9e:e2:a6:7a:99:91:10:d7:58:a7:90:81:7f:b6:8a:45: ad:ae:6e:1d:c0:06:fb:58:6a:c4:02:60:c9:ec:37:63:25:8b: 35:97:a9:5b:06:f5:b5:e4:90:63:d4:5e:ed:4d:81:09:61:d4: 4c:c5:9a:79:24:e0:7e:e8:be:c9:7f:39:5f:51:4c:60:4e:e3: e5:5b:46:7c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0MyTbjMVGTgwNvzqAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwMzIxNTY0MloXDTI2MDYwMTIwNTY0MlowLzEtMCsGA1UEAxMk MGRlOWI1MjQtMzU5OS00OTRlLWIxNDktMjA0ZmNhNDBjNjQ3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkW3VhfOCyCAR6QOj7yz6wzju4ZoE3a7Ov4gI N/DF0k74UgzA3uUBPTWfLSk0ODrDb5up0tYwxfnTmy60a3ZT5EEevNth+lBspHSc G40ZY9Dt75gxF9R3Jnp5gz2AC6IABuErOjDlC9i8XzaCQUnvbFKlcI0RUXa2Wf1z pNqbAOkBblGAweOnkPP4DsNT6VyoGi/Jnmh6YpApaOK0LS73xd5t4ezxjYcZLsK+ aQBDoJ8GvBEfIeRHxtdI49n+0/tRLSpI42TrCVMGF8sb8VMNbZQcVHX9L5D88umf EgO5+HLynTWs6KE21uxZo/hIlaSt+PRuB3C1vUzqNl4nXcmILQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFBc2XsNJpdOZQCn+gb1yrdtcQKCAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvM2M0OGMzNjMtNzM4ZS0z OWYyLWExOGQtOWIyZWMzYzJhOWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAVMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAADKY/TOfTGjA02g2mN5mUF6qfCNZab6TXpN6BqaGiI8/93RpnvqZy3I cxxx4xwUS5AvHWbzwEXcnROP1h3UAGGX5CvUHhMAPAeZICp0pxNEHONI0whTN3BE ac+H8v7WquG6Y+1zQjt2F5zzjXBfoBUmTrtjrO3ZrFgva5ecYnfjxFtZQvU51puf APdWO7142heDGjQ1VvQGyBmR3oUpeKRkFU4sgSkeGEtf0eEpQqxygL6R8TltnuKm epmRENdYp5CBf7aKRa2ubh3ABvtYasQCYMnsN2MlizWXqVsG9bXkkGPUXu1NgQlh 1EzFmnkk4H7ovsl/OV9RTGBO4+VbRnw= -----END CERTIFICATE-----Generated at Sat Mar 28 08:49:05 2026 by rpki-client