$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4dfaf96e-b7d2-3b60-b696-64f20b30a4db.roa File: 4dfaf96e-b7d2-3b60-b696-64f20b30a4db.roa (raw, json) Hash identifier: xKVA8AhfFP/CmmgOjwpTpsil789iaR3wFLBvZ1e9neU= Subject key identifier: 45:19:7F:0C:EA:80:F0:83:60:FB:87:1B:DF:9A:CE:F7:6D:CD:4B:A7 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D4461D1CC56E66C15310E19A0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4dfaf96e-b7d2-3b60-b696-64f20b30a4db.roa Signing time: Mon 23 Mar 2026 19:53:38 +0000 ROA not before: Mon 23 Mar 2026 19:53:38 +0000 ROA not after: Sun 21 Jun 2026 19:53:38 +0000 asID: 11798 IP address blocks: 136.0.168.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:d1:cc:56:e6:6c:15:31:0e:19:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 23 19:53:38 2026 GMT Not After : Jun 21 19:53:38 2026 GMT Subject: CN=e9016d71-24cb-4353-8392-af35fc49fd45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:75:81:b5:55:4c:15:d5:d3:7e:03:29:5f:8e: 94:ab:35:49:91:14:80:98:62:a3:1c:de:6c:c6:39: 43:48:7b:79:97:d5:c5:21:0b:b3:14:5f:5d:7e:c6: 21:aa:88:e1:3f:2c:c6:ef:a4:12:5b:f8:af:95:0f: b1:b3:ea:92:ec:ba:5f:c0:79:dc:ca:c2:9b:6c:63: ad:95:a6:ae:56:c4:05:d5:ff:f4:9e:0b:8a:3b:fd: 03:87:3c:82:d0:ff:1e:17:6a:c5:d4:05:d6:75:9d: 7c:c7:f1:5e:50:dc:b2:eb:8e:c3:d5:f5:8a:b8:7b: 68:f0:c6:ba:68:67:59:a9:e2:bf:30:6d:76:90:8a: 14:1d:33:fd:32:d5:60:fc:97:fa:8c:4e:7e:0c:3b: 52:94:47:fd:8f:53:1a:93:1e:a6:17:27:a0:fa:75: b6:03:97:fc:d6:c5:14:34:69:9f:07:82:7c:65:ac: ed:51:5c:26:59:f2:e3:45:1e:92:9a:18:e5:8d:42: 70:95:cc:2d:89:0d:45:47:32:6b:d1:23:74:39:df: dd:e1:ff:cb:d9:f7:0f:06:ce:3d:26:a2:69:fa:b2: 85:07:6f:38:5b:c9:27:7a:61:db:9d:ef:32:4d:ec: 8c:91:d4:cd:c1:fc:44:9b:8e:ac:4e:b8:08:51:02: 54:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:19:7F:0C:EA:80:F0:83:60:FB:87:1B:DF:9A:CE:F7:6D:CD:4B:A7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/4dfaf96e-b7d2-3b60-b696-64f20b30a4db.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.168.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 74:47:4b:b3:d5:bf:c4:41:e8:e0:9f:05:bd:53:7b:f5:4c:88: 04:9b:ef:39:78:3f:c9:5b:5c:90:f4:7f:45:75:63:71:74:3c: 4f:20:39:0b:3e:dd:5f:cb:0a:16:24:3a:6b:7d:ff:2d:6c:af: de:fa:11:bb:6b:1e:2a:33:c6:55:67:25:f9:60:b8:cb:51:f9: 3d:ff:50:7e:73:12:f3:f7:88:e7:80:74:c7:0f:32:db:12:a8: 19:90:d1:f1:23:e8:71:af:39:59:7b:3c:47:29:4e:b5:08:c6: 33:06:b7:ad:7e:6d:f0:78:85:d4:55:0e:ed:70:a2:e8:68:1c: d3:21:5b:6d:7a:b8:db:e5:ee:b9:2e:2b:a5:3a:fc:61:b1:9d: 0d:7f:46:0e:c8:cd:3f:f9:fe:f9:b4:1c:b0:94:03:0b:54:e8: 7a:07:67:c1:e3:4b:c8:27:d4:e6:2a:fc:dd:ee:b6:ef:e9:22: 84:e4:9a:ec:9e:a4:3d:6c:31:0e:bc:11:f5:33:6d:05:18:05: 26:a3:e0:97:a2:50:d8:8e:db:58:8c:41:9b:eb:1b:34:38:4c: 58:d4:94:62:ff:9e:de:63:9d:05:26:67:cd:a4:3b:62:8a:2e: 24:aa:18:26:79:6a:6b:59:f6:3f:c6:a9:3c:ab:cf:43:cd:3a: 8f:6a:41:05 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdHMVuZsFTEOGaAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyMzE5NTMzOFoXDTI2MDYyMTE5NTMzOFowLzEtMCsGA1UEAxMk ZTkwMTZkNzEtMjRjYi00MzUzLTgzOTItYWYzNWZjNDlmZDQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnWBtVVMFdXTfgMpX46UqzVJkRSAmGKjHN5s xjlDSHt5l9XFIQuzFF9dfsYhqojhPyzG76QSW/ivlQ+xs+qS7LpfwHncysKbbGOt laauVsQF1f/0nguKO/0DhzyC0P8eF2rF1AXWdZ18x/FeUNyy647D1fWKuHto8Ma6 aGdZqeK/MG12kIoUHTP9MtVg/Jf6jE5+DDtSlEf9j1Makx6mFyeg+nW2A5f81sUU NGmfB4J8ZaztUVwmWfLjRR6SmhjljUJwlcwtiQ1FRzJr0SN0Od/d4f/L2fcPBs49 JqJp+rKFB284W8knemHbne8yTeyMkdTNwfxEm46sTrgIUQJUOwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEUZfwzqgPCDYPuHG9+azvdtzUunMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNGRmYWY5NmUtYjdkMi0z YjYwLWI2OTYtNjRmMjBiMzBhNGRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHRHS7PVv8RB6OCfBb1Te/VMiASb7zl4P8lbXJD0f0V1Y3F0PE8gOQs+ 3V/LChYkOmt9/y1sr976EbtrHiozxlVnJflguMtR+T3/UH5zEvP3iOeAdMcPMtsS qBmQ0fEj6HGvOVl7PEcpTrUIxjMGt61+bfB4hdRVDu1wouhoHNMhW216uNvl7rku K6U6/GGxnQ1/Rg7IzT/5/vm0HLCUAwtU6HoHZ8HjS8gn1OYq/N3utu/pIoTkmuye pD1sMQ68EfUzbQUYBSaj4JeiUNiO21iMQZvrGzQ4TFjUlGL/nt5jnQUmZ82kO2KK LiSqGCZ5amtZ9j/GqTyrz0PNOo9qQQU= -----END CERTIFICATE-----Generated at Sat Mar 28 10:47:12 2026 by rpki-client