$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa File: 5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa (raw, json) Hash identifier: cPQ/uiSeb1bBVFdkc5nC6mDwwB7KUFiU1TS7YC6jK/s= Subject key identifier: 01:84:C6:77:FD:F3:9A:4D:0B:48:DB:0C:D1:FD:26:86:C4:DE:2D:0E Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0EA7D59A256CBAFF40C66700 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa Signing time: Wed 04 Mar 2026 14:00:41 +0000 ROA not before: Wed 04 Mar 2026 14:00:41 +0000 ROA not after: Tue 02 Jun 2026 13:00:41 +0000 asID: 18779 IP address blocks: 136.0.221.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0e:a7:d5:9a:25:6c:ba:ff:40:c6:67:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 14:00:41 2026 GMT Not After : Jun 2 13:00:41 2026 GMT Subject: CN=bd28dbcd-4cf8-4bb7-adf4-68ed520ff842 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e4:c9:f5:fe:83:61:62:9a:44:6b:7c:4a:57: cd:a2:33:b4:22:1a:f5:43:67:b7:3b:e5:d5:90:a3: 25:99:b8:17:c9:b4:77:96:05:73:53:97:ce:6d:c2: 4c:c0:73:fe:a1:c3:29:53:21:6a:d0:cd:61:9a:af: 12:28:4c:bc:f3:ec:81:28:a2:99:cd:58:86:fc:47: e8:f0:4a:9e:68:3b:59:29:31:4f:9e:18:70:c8:0a: 9a:8f:cc:cb:2e:a5:76:3e:6c:b8:a8:dc:85:c6:17: b4:70:39:e3:e5:65:88:a6:dc:67:8f:e5:28:6b:a0: 3f:de:c9:2d:80:91:ef:31:48:e0:63:9a:8d:8e:71: e0:1e:e4:0a:78:f2:ea:1c:34:ca:47:0f:39:15:75: e8:fb:f7:dc:5f:05:83:33:a8:3c:60:79:31:6b:2a: 76:59:82:3b:7e:e5:e4:64:b2:0c:59:50:f9:63:0f: f3:8d:ab:8f:dc:84:4f:d2:af:f4:47:2b:19:d0:01: 20:bc:64:fa:ff:0a:99:f2:de:3f:33:fc:78:96:76: c4:3e:56:85:1e:34:54:12:2d:4a:0c:a1:59:75:9b: df:9c:86:6d:77:6b:44:67:b7:5b:73:23:15:a4:34: 59:6f:78:1a:7f:72:27:01:80:53:cf:79:ca:59:97: 8a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:84:C6:77:FD:F3:9A:4D:0B:48:DB:0C:D1:FD:26:86:C4:DE:2D:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/5b28d6e0-8a0f-3695-be80-8cdcb97e8da9.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.221.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7a:00:55:90:3a:10:64:b6:dc:03:b7:34:4d:22:f5:67:cc:e3: 2b:a6:7e:d1:f3:07:3d:69:4c:c0:31:74:70:56:34:45:e9:52: be:94:00:f8:9a:c6:65:9c:e8:5b:71:ba:f7:70:b7:f0:d5:37: 54:e3:60:e3:cc:76:c8:1f:9e:7d:d3:2d:ff:21:81:4a:82:2d: a4:cf:2a:7b:b1:c5:59:79:d7:9e:fd:03:8e:ed:81:fb:50:49: db:92:20:52:54:69:a8:8f:b7:9e:26:b0:27:e5:28:f3:c7:77: ea:cc:ca:64:63:73:a5:bf:d5:d0:b5:82:06:91:49:d6:4b:44: 58:5a:ea:6b:bd:26:c4:65:a2:3a:29:91:cf:18:b2:3d:7c:57: 62:87:7b:3d:78:7f:56:02:e2:7d:da:90:8c:be:3e:87:13:2b: ce:32:4f:12:cf:e0:2c:f8:3c:f2:11:8d:12:ad:51:11:fe:56: d0:0d:31:a5:a6:52:09:4d:6c:c9:eb:bd:92:b5:91:a3:23:e7: 6a:a5:ce:68:96:8c:07:d5:69:c9:b8:71:53:7c:5c:a4:75:9f: 0a:da:86:b6:b9:c6:84:3f:11:79:c3:da:02:10:e6:24:37:b3: 03:cc:e2:bf:e1:a0:23:6f:ce:7c:97:0a:8b:7e:05:50:82:1f: 9f:1c:95:61 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op9WaJWy6/0DGZwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk YmQyOGRiY2QtNGNmOC00YmI3LWFkZjQtNjhlZDUyMGZmODQyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeTJ9f6DYWKaRGt8SlfNojO0Ihr1Q2e3O+XV kKMlmbgXybR3lgVzU5fObcJMwHP+ocMpUyFq0M1hmq8SKEy88+yBKKKZzViG/Efo 8EqeaDtZKTFPnhhwyAqaj8zLLqV2Pmy4qNyFxhe0cDnj5WWIptxnj+Uoa6A/3skt gJHvMUjgY5qNjnHgHuQKePLqHDTKRw85FXXo+/fcXwWDM6g8YHkxayp2WYI7fuXk ZLIMWVD5Yw/zjauP3IRP0q/0RysZ0AEgvGT6/wqZ8t4/M/x4lnbEPlaFHjRUEi1K DKFZdZvfnIZtd2tEZ7dbcyMVpDRZb3gaf3InAYBTz3nKWZeKSQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAGExnf985pNC0jbDNH9JobE3i0OMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNWIyOGQ2ZTAtOGEwZi0z Njk1LWJlODAtOGNkY2I5N2U4ZGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADdMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHoAVZA6EGS23AO3NE0i9WfM4yumftHzBz1pTMAxdHBWNEXpUr6UAPia xmWc6Ftxuvdwt/DVN1TjYOPMdsgfnn3TLf8hgUqCLaTPKnuxxVl51579A47tgftQ SduSIFJUaaiPt54msCflKPPHd+rMymRjc6W/1dC1ggaRSdZLRFha6mu9JsRlojop kc8Ysj18V2KHez14f1YC4n3akIy+PocTK84yTxLP4Cz4PPIRjRKtURH+VtANMaWm UglNbMnrvZK1kaMj52qlzmiWjAfVacm4cVN8XKR1nwrahra5xoQ/EXnD2gIQ5iQ3 swPM4r/hoCNvznyXCot+BVCCH58clWE= -----END CERTIFICATE-----Generated at Thu Mar 26 07:30:53 2026 by rpki-client