$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4af5f38b-f556-32af-a50d-f51d6de48fc4.roa File: 4af5f38b-f556-32af-a50d-f51d6de48fc4.roa (raw, json) Hash identifier: Qi2dwRMx9v+J/u7iTtyFGzjPS/RPSuXiZCvt0Rl+6j0= Subject key identifier: EE:57:EE:86:46:F3:0F:E9:21:A8:E1:79:4E:EC:3E:B7:D1:E8:17:18 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F68282A521D4D4EAF370CC580 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4af5f38b-f556-32af-a50d-f51d6de48fc4.roa Signing time: Tue 06 Oct 2026 01:00:13 +0000 ROA not before: Tue 06 Oct 2026 01:00:13 +0000 ROA not after: Mon 04 Jan 2027 02:00:13 +0000 asID: 11798 IP address blocks: 136.0.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 12 Oct 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:68:28:2a:52:1d:4d:4e:af:37:0c:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Oct 6 01:00:13 2026 GMT Not After : Jan 4 02:00:13 2027 GMT Subject: CN=992b8eb8-0c05-4cd9-8eda-6301a1ddbf5b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:71:ef:44:e8:52:2a:8e:8f:6b:56:c1:73:f4: 3d:91:6e:44:ba:20:f9:35:6f:6e:5a:b4:e6:38:b1: 97:87:18:e0:30:62:f1:1c:a0:ee:b9:94:8a:ef:17: e0:de:95:3d:bd:58:0b:a0:b3:9e:a6:41:79:0d:a4: 54:63:f9:f6:10:36:44:b3:54:8e:87:1c:d6:da:ae: a4:4b:3a:61:b3:25:d3:8e:e6:4a:a8:a1:05:00:2e: bb:3b:26:6c:2e:5f:24:02:f4:2d:b6:bf:e2:7f:68: d3:bf:9a:5b:e9:fb:00:19:45:e0:a1:6e:1c:a6:ce: 43:55:90:ba:57:7a:c3:74:84:3d:0d:45:0f:e9:dd: a0:58:ab:f2:54:23:67:70:bb:dd:ae:88:f6:e4:db: a8:6e:06:f8:c5:d8:d5:ff:b3:e0:04:c1:ee:28:18: b8:c0:ec:b3:c2:7c:33:c3:ea:f2:d3:a9:10:f3:dd: 64:a9:f2:86:00:1b:5a:ec:ea:f9:04:70:d9:91:a4: 50:fb:d4:2c:17:33:20:d1:47:c5:9e:c5:59:17:92: 95:e5:e8:89:a8:ea:b7:73:52:df:46:f2:8c:c7:90: d6:10:fd:8d:ba:8c:44:55:a5:d9:f2:aa:a7:93:c7: 38:b8:c1:83:69:7e:d1:22:55:c0:31:88:b6:44:f9: 98:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:57:EE:86:46:F3:0F:E9:21:A8:E1:79:4E:EC:3E:B7:D1:E8:17:18 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4af5f38b-f556-32af-a50d-f51d6de48fc4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 58:c3:2c:e4:92:1f:13:96:fc:67:0f:05:58:47:a6:aa:1b:31: 8e:bb:6f:72:cb:1c:6c:0b:2d:25:fc:29:e7:2e:85:af:32:8a: 89:09:29:a3:1d:a0:87:78:2d:0c:7e:1c:3e:3b:b8:e4:ce:3e: 52:d2:1d:ea:ae:1a:d9:69:08:02:b0:de:df:5d:d9:65:c2:ff: 69:f7:5b:fb:f2:68:29:11:2a:ec:75:94:2b:a7:0f:6c:3b:8d: 8d:e9:de:e7:c0:53:64:36:ee:12:62:d7:26:d0:5e:f7:24:e2: 04:42:ea:f1:ff:ca:89:8b:ba:78:eb:16:82:77:a8:3d:87:90: 32:de:ea:fc:23:21:7b:75:2a:1a:59:b1:96:c2:df:5d:f5:85: d4:dd:01:e4:14:e2:a6:d8:c8:55:24:16:3f:c8:d0:aa:95:5e: 13:9a:15:e3:bf:45:93:f9:0a:df:1b:16:58:0e:f3:bc:6d:d7: 67:09:de:e9:e9:18:87:05:47:5a:b4:be:b2:dc:18:b9:e1:a1: df:95:63:ce:7c:30:6d:14:17:d8:e5:1c:36:98:12:4f:2a:b4: 73:59:1e:df:ba:e3:4b:d9:51:d6:69:c3:ee:69:03:a0:bf:c6: 64:5b:a1:c8:aa:74:3a:ed:31:36:37:f1:d7:f3:7c:3c:52:50: fd:12:ce:d0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9oKCpSHU1OrzcMxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MTAwNjAxMDAxM1oXDTI3MDEwNDAyMDAxM1owLzEtMCsGA1UEAxMk OTkyYjhlYjgtMGMwNS00Y2Q5LThlZGEtNjMwMWExZGRiZjViMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAinHvROhSKo6Pa1bBc/Q9kW5EuiD5NW9uWrTm OLGXhxjgMGLxHKDuuZSK7xfg3pU9vVgLoLOepkF5DaRUY/n2EDZEs1SOhxzW2q6k SzphsyXTjuZKqKEFAC67OyZsLl8kAvQttr/if2jTv5pb6fsAGUXgoW4cps5DVZC6 V3rDdIQ9DUUP6d2gWKvyVCNncLvdroj25Nuobgb4xdjV/7PgBMHuKBi4wOyzwnwz w+ry06kQ891kqfKGABta7Or5BHDZkaRQ+9QsFzMg0UfFnsVZF5KV5eiJqOq3c1Lf RvKMx5DWEP2NuoxEVaXZ8qqnk8c4uMGDaX7RIlXAMYi2RPmYLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFO5X7oZG8w/pIajheU7sPrfR6BcYMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGFmNWYzOGItZjU1Ni0z MmFmLWE1MGQtZjUxZDZkZTQ4ZmM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFjDLOSSHxOW/GcPBVhHpqobMY67b3LLHGwLLSX8Kecuha8yiokJKaMd oId4LQx+HD47uOTOPlLSHequGtlpCAKw3t9d2WXC/2n3W/vyaCkRKux1lCunD2w7 jY3p3ufAU2Q27hJi1ybQXvck4gRC6vH/yomLunjrFoJ3qD2HkDLe6vwjIXt1KhpZ sZbC3131hdTdAeQU4qbYyFUkFj/I0KqVXhOaFeO/RZP5Ct8bFlgO87xt12cJ3unp GIcFR1q0vrLcGLnhod+VY858MG0UF9jlHDaYEk8qtHNZHt+640vZUdZpw+5pA6C/ xmRbociqdDrtMTY38dfzfDxSUP0SztA= -----END CERTIFICATE-----Generated at Sun Oct 11 06:25:48 2026 by rpki-client