$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa File: a319c139-1f08-32b0-b642-e4482a7a84e2.roa (raw, json) Hash identifier: aJb5E7A7cH5ipmEI0AzLsOXGBtMYte1mIdXWlogTuDk= Subject key identifier: 27:F7:D2:7C:E7:8C:AD:75:BB:95:B7:9E:2B:D9:79:AE:CB:0C:C3:C2 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D0D4275FD9E95D15299B28B80 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa Signing time: Wed 04 Mar 2026 02:00:32 +0000 ROA not before: Wed 04 Mar 2026 02:00:32 +0000 ROA not after: Tue 02 Jun 2026 01:00:32 +0000 asID: 10753 IP address blocks: 136.0.122.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 27 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:0d:42:75:fd:9e:95:d1:52:99:b2:8b:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 4 02:00:32 2026 GMT Not After : Jun 2 01:00:32 2026 GMT Subject: CN=0c09911e-ebce-48ef-9304-04ccce419243 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:a2:73:51:fc:9c:01:5a:2c:c1:12:d5:3b:ef: 07:80:43:e0:9a:93:3f:61:fb:74:27:8e:a4:4b:37: b0:6d:12:bf:bb:6d:26:2e:25:39:ce:1a:c5:f5:a3: 64:51:f3:2b:15:7f:ab:03:a9:4e:4d:5b:d7:31:05: ea:4e:52:c9:f6:ac:76:1e:59:3c:96:df:f1:77:07: 3e:fb:b0:b5:6b:0e:af:63:7d:e1:7b:fa:c8:be:de: 82:87:5b:e1:60:ff:32:a7:12:e9:b3:12:81:f3:5a: bc:4a:62:3e:1d:c4:d1:f4:3f:b6:8d:6f:b6:7d:c0: 09:c8:c8:82:1a:cd:85:8b:4e:94:b1:b7:18:f4:9e: a0:74:47:a2:21:e4:96:aa:e7:62:7b:7b:b3:4f:1b: b3:cd:cf:b9:23:4f:7e:b5:a5:a3:c6:0b:95:18:67: 36:f0:72:a2:60:b4:9f:a7:89:8b:30:f4:8b:13:70: c7:63:05:c2:2d:5d:8e:ea:64:5d:93:ea:45:1a:ea: b2:60:52:89:55:9d:36:d9:e0:c7:3d:3e:b6:88:28: d7:6c:75:88:ee:e3:1f:ac:45:a0:a8:c8:35:f5:95: 0a:4c:43:08:d7:90:f1:68:26:2d:4d:a1:14:cb:f9: d1:ff:8c:41:b8:3e:24:9c:78:cb:38:26:b9:75:00: dd:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:F7:D2:7C:E7:8C:AD:75:BB:95:B7:9E:2B:D9:79:AE:CB:0C:C3:C2 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/a319c139-1f08-32b0-b642-e4482a7a84e2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.122.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3f:b7:bd:a4:8f:12:d7:f6:ff:42:6f:d4:eb:69:a2:2a:d4:4f: 19:04:16:fa:d6:7f:23:c6:02:89:df:02:95:58:23:7a:8b:48: 39:31:bc:26:32:5a:f0:e2:cb:c2:da:08:a9:73:f4:98:62:19: cb:0c:55:a8:d4:08:39:34:0f:70:27:c3:d8:66:89:06:7c:82: 63:64:70:d2:36:69:19:23:9a:91:16:80:8c:ab:83:73:67:ce: 9c:6b:a6:54:41:f9:5a:c6:bc:93:56:19:68:da:fd:51:15:5a: 41:cb:aa:79:ad:10:25:ec:0a:66:60:67:61:5a:33:a2:5e:86: df:3c:6c:b3:c4:df:7a:6e:64:e1:7c:f5:35:4d:17:82:f6:55: 77:1f:67:f2:e7:b5:a1:66:29:00:14:ee:e1:af:ee:d2:6f:6e: 84:d3:f5:08:f5:a7:4a:52:35:05:48:34:57:b5:c6:dc:3f:2b: b8:73:84:da:86:f0:ec:15:88:e1:c0:1e:57:ef:18:3c:fe:d2: b8:79:82:01:4c:c3:35:90:b0:97:c3:ca:50:b9:51:ac:e3:a7: df:43:60:6e:6a:fa:d0:24:02:d3:f6:5a:0a:a6:2c:19:6f:e5: b2:01:a4:22:e5:77:f7:a3:7c:4d:4f:5c:42:33:9e:56:6f:f6: 0c:9d:45:0f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0NQnX9npXRUpmyi4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMwNDAyMDAzMloXDTI2MDYwMjAxMDAzMlowLzEtMCsGA1UEAxMk MGMwOTkxMWUtZWJjZS00OGVmLTkzMDQtMDRjY2NlNDE5MjQzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16JzUfycAVoswRLVO+8HgEPgmpM/Yft0J46k SzewbRK/u20mLiU5zhrF9aNkUfMrFX+rA6lOTVvXMQXqTlLJ9qx2Hlk8lt/xdwc+ +7C1aw6vY33he/rIvt6Ch1vhYP8ypxLpsxKB81q8SmI+HcTR9D+2jW+2fcAJyMiC Gs2Fi06UsbcY9J6gdEeiIeSWqudie3uzTxuzzc+5I09+taWjxguVGGc28HKiYLSf p4mLMPSLE3DHYwXCLV2O6mRdk+pFGuqyYFKJVZ022eDHPT62iCjXbHWI7uMfrEWg qMg19ZUKTEMI15DxaCYtTaEUy/nR/4xBuD4knHjLOCa5dQDdZwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFCf30nznjK11u5W3nivZea7LDMPCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYTMxOWMxMzktMWYwOC0z MmIwLWI2NDItZTQ0ODJhN2E4NGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAB6MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAD+3vaSPEtf2/0Jv1OtpoirUTxkEFvrWfyPGAonfApVYI3qLSDkxvCYy WvDiy8LaCKlz9JhiGcsMVajUCDk0D3Anw9hmiQZ8gmNkcNI2aRkjmpEWgIyrg3Nn zpxrplRB+VrGvJNWGWja/VEVWkHLqnmtECXsCmZgZ2FaM6Jeht88bLPE33puZOF8 9TVNF4L2VXcfZ/LntaFmKQAU7uGv7tJvboTT9Qj1p0pSNQVINFe1xtw/K7hzhNqG 8OwViOHAHlfvGDz+0rh5ggFMwzWQsJfDylC5Uazjp99DYG5q+tAkAtP2WgqmLBlv 5bIBpCLld/ejfE1PXEIznlZv9gydRQ8= -----END CERTIFICATE-----Generated at Thu Mar 26 07:31:20 2026 by rpki-client