$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a13e590-3e9a-3851-a10a-29936a1512b4.roa File: 7a13e590-3e9a-3851-a10a-29936a1512b4.roa (raw, json) Hash identifier: kQcV81U6S3eWeW4ZCYcBOYiERd9KuW9KUFt9z9hWbmM= Subject key identifier: 53:13:95:9A:72:1D:DA:0D:6A:D8:80:EE:61:07:EC:C4:74:A3:6D:1D Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D143D5155D708F7335EA45A00 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a13e590-3e9a-3851-a10a-29936a1512b4.roa Signing time: Fri 06 Mar 2026 14:00:40 +0000 ROA not before: Fri 06 Mar 2026 14:00:40 +0000 ROA not after: Thu 04 Jun 2026 13:00:40 +0000 asID: 209854 IP address blocks: 136.0.84.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:14:3d:51:55:d7:08:f7:33:5e:a4:5a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 6 14:00:40 2026 GMT Not After : Jun 4 13:00:40 2026 GMT Subject: CN=efe213de-be14-4f11-88d9-586fb3a4561b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:e1:bb:e0:7a:78:40:88:86:06:a8:29:63:f6: 06:9a:71:ce:0b:02:93:1c:a8:35:c6:d4:26:45:20: 4e:22:02:3f:e2:fe:6c:b9:cc:89:9f:1a:41:9c:8c: 3d:a5:7f:20:da:93:39:40:72:5d:c8:ca:81:f2:4f: 56:2b:ab:91:46:d8:ef:1b:dc:8f:27:2b:c3:ec:20: 9d:c7:db:60:e5:2b:21:16:be:40:12:7b:7c:0f:b4: b3:cf:6c:20:55:6d:f6:b1:e5:9d:2d:fa:d2:bf:dc: 72:17:31:98:c3:72:42:56:b2:98:df:f7:92:01:2c: 74:32:8c:e0:9a:ce:09:a7:62:e7:46:ba:2b:3e:be: d2:3c:7a:dc:4f:80:8b:41:38:0a:75:c4:0f:0f:45: f6:65:47:1a:6f:5b:89:40:f3:b3:ea:f4:aa:30:65: b5:6f:24:e9:33:54:b7:ee:72:19:87:d8:43:64:eb: b3:1d:ce:aa:9e:b9:02:32:62:78:74:6d:40:1b:fe: cf:ae:c8:88:aa:23:e0:c3:9a:50:d6:92:25:4c:21: c0:74:5c:db:ec:ac:17:31:a5:92:e6:a7:bf:64:0c: 1b:c7:04:c1:82:49:79:03:a8:7d:f3:8c:94:83:d1: da:20:28:fd:de:e1:57:f8:2b:a4:b6:97:52:d8:22: e7:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:13:95:9A:72:1D:DA:0D:6A:D8:80:EE:61:07:EC:C4:74:A3:6D:1D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/7a13e590-3e9a-3851-a10a-29936a1512b4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.84.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 13:31:5c:28:ca:a6:43:d7:75:03:db:a3:db:7b:3f:cb:36:05: 78:50:93:85:69:ac:22:43:d6:20:6f:8b:86:b0:fe:ff:30:77: 89:c3:6d:6c:02:e0:46:7a:50:3f:07:66:69:6e:37:37:a2:f3: ac:64:72:64:2b:4b:70:98:0b:f2:91:51:04:1e:97:12:7f:14: 88:b1:1c:ce:27:f1:c6:22:46:1f:96:78:e5:b6:9a:39:72:c5: a8:98:1d:aa:c7:e1:26:66:c4:c4:d9:11:57:20:38:a0:fb:47: 9e:7c:5b:7b:f1:73:6f:ee:90:0a:c5:ce:53:f8:cf:2a:1f:e4: 42:ec:28:ca:97:4d:fc:08:e0:37:c2:d2:de:62:30:75:67:44: f9:b9:59:73:2a:ae:03:59:df:7e:0e:ae:23:51:4c:bb:5c:68: 6b:ad:97:43:e5:b0:f5:47:8a:9e:23:bb:0c:c6:a1:b4:ec:d0: 60:86:c7:6e:81:00:30:07:b9:2d:ef:d2:05:22:f3:ce:36:6b: 03:34:d3:0d:bd:24:68:88:08:94:c3:9c:ec:91:19:ed:7d:70: 3e:44:d3:17:62:e2:96:3a:2b:00:60:14:86:0c:79:ff:06:1a: 6b:56:10:20:d6:c2:ca:17:e7:49:de:b6:e4:26:07:41:d9:7e: 64:23:9d:74 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0UPVFV1wj3M16kWgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk ZWZlMjEzZGUtYmUxNC00ZjExLTg4ZDktNTg2ZmIzYTQ1NjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuG74Hp4QIiGBqgpY/YGmnHOCwKTHKg1xtQm RSBOIgI/4v5sucyJnxpBnIw9pX8g2pM5QHJdyMqB8k9WK6uRRtjvG9yPJyvD7CCd x9tg5SshFr5AEnt8D7Szz2wgVW32seWdLfrSv9xyFzGYw3JCVrKY3/eSASx0Mozg ms4Jp2LnRrorPr7SPHrcT4CLQTgKdcQPD0X2ZUcab1uJQPOz6vSqMGW1byTpM1S3 7nIZh9hDZOuzHc6qnrkCMmJ4dG1AG/7PrsiIqiPgw5pQ1pIlTCHAdFzb7KwXMaWS 5qe/ZAwbxwTBgkl5A6h984yUg9HaICj93uFX+CuktpdS2CLncQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFMTlZpyHdoNatiA7mEH7MR0o20dMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvN2ExM2U1OTAtM2U5YS0z ODUxLWExMGEtMjk5MzZhMTUxMmI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABUMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABMxXCjKpkPXdQPbo9t7P8s2BXhQk4VprCJD1iBvi4aw/v8wd4nDbWwC 4EZ6UD8HZmluNzei86xkcmQrS3CYC/KRUQQelxJ/FIixHM4n8cYiRh+WeOW2mjly xaiYHarH4SZmxMTZEVcgOKD7R558W3vxc2/ukArFzlP4zyof5ELsKMqXTfwI4DfC 0t5iMHVnRPm5WXMqrgNZ334OriNRTLtcaGutl0PlsPVHip4juwzGobTs0GCGx26B ADAHuS3v0gUi8842awM00w29JGiICJTDnOyRGe19cD5E0xdi4pY6KwBgFIYMef8G GmtWECDWwsoX50netuQmB0HZfmQjnXQ= -----END CERTIFICATE-----Generated at Thu Mar 26 02:15:17 2026 by rpki-client