$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2858ff-e53b-3ead-acb6-46ca58ec44d2.roa File: aa2858ff-e53b-3ead-acb6-46ca58ec44d2.roa (raw, json) Hash identifier: Hl7yL3kLv3wnRJM3GmmFUeD//pDROY6yR1OG7f0TgH8= Subject key identifier: E1:91:DA:07:4F:41:0D:DE:75:72:38:E6:88:66:5C:9F:54:01:AB:42 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D4461D20A2FE6460406206380 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2858ff-e53b-3ead-acb6-46ca58ec44d2.roa Signing time: Mon 23 Mar 2026 19:53:38 +0000 ROA not before: Mon 23 Mar 2026 19:53:38 +0000 ROA not after: Sun 21 Jun 2026 19:53:38 +0000 asID: 11798 IP address blocks: 136.0.249.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:44:61:d2:0a:2f:e6:46:04:06:20:63:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 23 19:53:38 2026 GMT Not After : Jun 21 19:53:38 2026 GMT Subject: CN=4683e84d-3afc-4cf2-a01c-d139f990013c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:07:2b:4d:ea:62:d7:28:97:ce:34:ac:a6:b3: 0e:8f:c3:d7:eb:75:f8:44:ae:bf:9e:a9:c1:7d:96: c3:10:f3:78:3f:6f:d8:dc:b9:4f:72:bc:5e:ba:89: 90:07:da:f4:2b:6b:4e:44:b4:85:61:23:d3:d4:d2: fd:c5:fd:c4:24:7d:ab:87:d3:1b:29:89:ba:1a:16: f1:90:34:19:72:ad:47:c9:57:77:a3:6f:b5:44:f4: b8:35:b6:76:cb:6f:71:a0:0f:8e:a8:85:18:4f:96: d1:eb:bc:d4:fd:b1:3f:57:dd:e2:2b:b8:41:a9:94: b8:fc:d4:8d:4d:35:da:04:a1:5b:d9:ea:e6:bb:81: 83:e6:90:30:90:a2:5c:a6:0a:04:c5:88:ba:27:c1: 50:b6:40:f4:4a:ff:1b:37:19:2f:df:08:2c:fd:7d: da:de:0e:ad:83:4b:12:bc:9a:8d:7d:23:a0:8c:05: 55:98:d3:d0:84:5b:4b:2c:bb:aa:64:50:05:37:5b: 54:af:69:57:91:77:4e:47:49:6a:e9:c1:58:4b:d8: f8:e6:17:f9:20:48:b9:b9:81:7f:b7:ad:16:03:a2: ea:2b:57:17:79:68:3a:30:fc:44:8c:32:f3:65:bb: b6:08:ea:04:67:9e:b1:e3:00:11:2e:0b:38:7f:49: 2f:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:91:DA:07:4F:41:0D:DE:75:72:38:E6:88:66:5C:9F:54:01:AB:42 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/aa2858ff-e53b-3ead-acb6-46ca58ec44d2.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.249.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1c:9e:97:e7:fa:1d:aa:08:8b:bb:6f:12:36:e9:a5:7b:3d:d7: e7:a9:f8:7d:6c:c1:d2:51:ac:1b:4f:23:2d:df:57:b4:c7:d4: 8d:8b:db:0c:55:76:b3:de:03:10:dc:35:be:cd:1f:98:e6:3d: 1f:4c:ee:aa:03:78:82:66:35:ef:63:65:22:4d:ac:c4:a5:de: f3:17:0b:78:64:df:4b:7f:00:0c:dd:1d:8e:e7:0b:44:4a:ef: 43:66:49:65:f7:6a:76:23:c0:14:08:03:a4:99:0c:ce:8a:04: 7d:32:88:c1:e1:09:9e:72:e2:ce:8a:65:74:0f:0e:6f:fe:be: 2a:8c:96:3f:9a:d7:6d:02:7f:00:2d:7b:1f:f1:4e:69:1e:9d: 33:67:71:18:fa:bc:d7:99:d9:2f:36:95:de:7f:51:be:b5:82: 4e:a9:2a:fc:6a:01:af:d1:2a:4b:2b:e5:d2:15:25:f3:14:e6: ab:22:f3:d0:8d:3b:f9:92:a5:14:72:dd:a4:c9:50:92:2c:d6: 5f:82:d7:21:97:f8:e0:13:2b:13:5a:ac:3a:cf:42:88:ca:57: 3d:f8:c1:64:39:2d:d9:9d:aa:27:dc:52:ec:25:34:42:e6:02: d4:23:98:29:e2:a2:df:96:06:d0:d7:96:ed:39:f6:fd:63:28: 86:76:dc:5e -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1EYdIKL+ZGBAYgY4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMyMzE5NTMzOFoXDTI2MDYyMTE5NTMzOFowLzEtMCsGA1UEAxMk NDY4M2U4NGQtM2FmYy00Y2YyLWEwMWMtZDEzOWY5OTAwMTNjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqgcrTepi1yiXzjSsprMOj8PX63X4RK6/nqnB fZbDEPN4P2/Y3LlPcrxeuomQB9r0K2tORLSFYSPT1NL9xf3EJH2rh9MbKYm6Ghbx kDQZcq1HyVd3o2+1RPS4NbZ2y29xoA+OqIUYT5bR67zU/bE/V93iK7hBqZS4/NSN TTXaBKFb2ermu4GD5pAwkKJcpgoExYi6J8FQtkD0Sv8bNxkv3wgs/X3a3g6tg0sS vJqNfSOgjAVVmNPQhFtLLLuqZFAFN1tUr2lXkXdOR0lq6cFYS9j45hf5IEi5uYF/ t60WA6LqK1cXeWg6MPxEjDLzZbu2COoEZ56x4wARLgs4f0kvnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGR2gdPQQ3edXI45ohmXJ9UAatCMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWEyODU4ZmYtZTUzYi0z ZWFkLWFjYjYtNDZjYTU4ZWM0NGQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAD5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAByel+f6HaoIi7tvEjbppXs91+ep+H1swdJRrBtPIy3fV7TH1I2L2wxV drPeAxDcNb7NH5jmPR9M7qoDeIJmNe9jZSJNrMSl3vMXC3hk30t/AAzdHY7nC0RK 70NmSWX3anYjwBQIA6SZDM6KBH0yiMHhCZ5y4s6KZXQPDm/+viqMlj+a120CfwAt ex/xTmkenTNncRj6vNeZ2S82ld5/Ub61gk6pKvxqAa/RKksr5dIVJfMU5qsi89CN O/mSpRRy3aTJUJIs1l+C1yGX+OATKxNarDrPQojKVz34wWQ5LdmdqifcUuwlNELm AtQjmCniot+WBtDXlu059v1jKIZ23F4= -----END CERTIFICATE-----Generated at Sat Mar 28 10:46:33 2026 by rpki-client