$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6248db9c-6f6b-351f-83de-5b88a79f6614.roa File: 6248db9c-6f6b-351f-83de-5b88a79f6614.roa (raw, json) Hash identifier: aCE7lFVlLXKwW2jXU2e5aUEJdiBhjuJVYDRRgeWIYIk= Subject key identifier: 95:67:E6:99:1F:25:16:78:A1:E1:BE:C1:83:42:2D:0B:59:3C:FF:9A Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0D42760D50F7DB2E83B9D380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6248db9c-6f6b-351f-83de-5b88a79f6614.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 10753 IP address blocks: 136.0.124.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:76:0d:50:f7:db:2e:83:b9:d3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=de70ff17-d105-43b9-8237-982e6a0e5d80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:79:5e:5f:dd:7b:5c:99:7c:88:6d:89:34:92: 96:59:0d:69:91:26:7b:72:63:d5:2b:29:43:38:8c: 66:22:21:dc:83:3b:0c:10:f2:b5:4d:d3:e9:08:e0: 45:9e:64:6f:e2:7c:a8:16:a9:23:68:dd:88:5c:c6: 87:66:93:06:09:a0:c3:ea:af:40:35:fc:3a:49:3a: 51:85:3c:79:17:3c:23:dd:ba:86:51:19:48:45:30: 7d:2b:05:0b:07:bc:e6:44:12:e6:b7:48:9e:b3:d2: b6:84:45:e6:53:db:41:65:46:de:c6:8a:67:af:0d: a7:bd:0e:9c:c2:aa:07:b5:3e:5d:30:a4:82:75:5e: b4:6a:db:e5:92:37:d8:53:0e:1f:f6:f1:4b:c0:f7: 9f:fe:e7:6f:e2:18:0a:e3:08:20:60:2e:5e:67:57: 6e:96:ee:f7:ce:2e:d4:77:97:15:0f:03:b1:09:21: 85:e8:b7:60:9b:a8:77:74:32:75:ba:1f:3a:a5:8a: 89:51:45:ca:df:0e:1f:ca:82:3d:76:6d:99:38:ff: 68:42:56:08:57:65:13:a6:a6:0d:63:f4:2d:5e:78: a1:1d:c1:2f:ae:24:f5:25:ad:a9:de:ef:c1:21:ba: 80:bb:c9:c5:9f:45:24:c9:62:0a:f8:c4:ff:39:e3: 23:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:67:E6:99:1F:25:16:78:A1:E1:BE:C1:83:42:2D:0B:59:3C:FF:9A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/6248db9c-6f6b-351f-83de-5b88a79f6614.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.124.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 22:5d:94:bd:d8:fd:e3:ca:cd:4a:f5:f5:dd:5c:7c:51:fa:f8: 88:73:29:fc:19:0f:97:9d:b7:78:9a:84:57:4b:db:22:81:54: 9c:56:57:4b:55:e8:2f:d5:3f:0a:8d:02:f5:af:6f:cc:e0:69: 6e:35:dd:22:0b:53:80:54:3b:0b:7c:37:00:c0:46:6c:82:91: 9e:2e:ed:e3:a0:06:1a:55:1c:58:49:bf:37:3d:4e:1e:a5:54: cd:82:9d:45:c7:6e:62:3b:40:1f:eb:65:5d:8a:d1:d4:0d:74: 02:92:3b:a8:de:49:b4:33:ac:b8:88:c5:32:bb:ac:83:14:6c: bf:91:04:4a:f5:0e:dd:31:8f:35:2f:e2:07:f5:da:11:c0:7c: 5f:1d:b7:0e:9a:83:ae:a2:1c:86:b2:17:39:1a:d8:ea:80:f8: 48:e6:ef:ff:38:dd:b7:91:1d:a7:58:c4:66:b7:cb:2d:52:f8: 35:a6:5c:c2:5b:f0:f2:80:0a:33:ea:14:4d:fd:1f:0b:14:7d: 9d:d9:19:30:b4:cd:23:e2:6c:d6:cd:e5:8d:09:da:36:24:9e: 49:af:0a:f5:6b:fb:cd:89:1d:77:d0:82:90:c8:5e:66:10:f6: 94:d9:e9:97:6c:2b:20:cf:3c:0a:7d:ff:48:1a:77:7f:14:46: d0:6b:73:78 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnYNUPfbLoO504AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk ZGU3MGZmMTctZDEwNS00M2I5LTgyMzctOTgyZTZhMGU1ZDgwMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHleX917XJl8iG2JNJKWWQ1pkSZ7cmPVKylD OIxmIiHcgzsMEPK1TdPpCOBFnmRv4nyoFqkjaN2IXMaHZpMGCaDD6q9ANfw6STpR hTx5Fzwj3bqGURlIRTB9KwULB7zmRBLmt0ies9K2hEXmU9tBZUbexopnrw2nvQ6c wqoHtT5dMKSCdV60atvlkjfYUw4f9vFLwPef/udv4hgK4wggYC5eZ1dulu73zi7U d5cVDwOxCSGF6Ldgm6h3dDJ1uh86pYqJUUXK3w4fyoI9dm2ZOP9oQlYIV2UTpqYN Y/QtXnihHcEvriT1Ja2p3u/BIbqAu8nFn0UkyWIK+MT/OeMj/QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFJVn5pkfJRZ4oeG+wYNCLQtZPP+aMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNjI0OGRiOWMtNmY2Yi0z NTFmLTgzZGUtNWI4OGE3OWY2NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB8MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBACJdlL3Y/ePKzUr19d1cfFH6+IhzKfwZD5edt3iahFdL2yKBVJxWV0tV 6C/VPwqNAvWvb8zgaW413SILU4BUOwt8NwDARmyCkZ4u7eOgBhpVHFhJvzc9Th6l VM2CnUXHbmI7QB/rZV2K0dQNdAKSO6jeSbQzrLiIxTK7rIMUbL+RBEr1Dt0xjzUv 4gf12hHAfF8dtw6ag66iHIayFzka2OqA+Ejm7/843beRHadYxGa3yy1S+DWmXMJb 8PKACjPqFE39HwsUfZ3ZGTC0zSPibNbN5Y0J2jYknkmvCvVr+82JHXfQgpDIXmYQ 9pTZ6ZdsKyDPPAp9/0gad38URtBrc3g= -----END CERTIFICATE-----Generated at Thu Mar 26 00:57:29 2026 by rpki-client