$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa File: ab45727f-3999-34db-bbfb-7d55ed100de3.roa (raw, json) Hash identifier: 10NHrlKTXzKfYEkuoCoPYiw3XhPYyRWg5Izh0ed4R9g= Subject key identifier: E2:56:72:FC:4D:84:6F:B0:6E:CB:30:1A:FD:04:7A:07:CE:69:85:F3 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584F497E3318C8C2518353C6AFC0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 18779 IP address blocks: 136.0.207.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 27 Sep 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:7e:33:18:c8:c2:51:83:53:c6:af:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=2816e33b-03e9-44ab-a32a-7b7f4597b24c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:b1:49:3f:c1:87:fd:6f:ed:2d:e4:3e:4b:1b: e2:fc:e0:b5:d9:bd:77:47:01:3f:55:74:b6:e9:59: 5c:8f:9a:d9:1b:07:6b:e3:c7:a0:6a:d8:b6:ea:25: 7e:26:fc:c5:cc:93:ac:79:47:3d:73:2e:de:e6:d8: b8:6c:59:b0:ec:4f:01:09:83:d5:d3:7d:87:f6:8f: fa:8c:fd:02:cf:c6:f9:24:43:ed:d5:64:85:f7:a2: 7f:4f:9b:b3:11:96:ca:03:ab:86:e5:52:a7:35:62: 4d:f6:11:13:7e:23:6a:e4:d2:96:17:54:b5:eb:16: da:e0:a9:01:4d:43:85:28:67:f5:cb:50:fe:38:bc: 06:0f:a7:ff:02:c5:f6:34:d8:d8:67:f7:87:bc:c9: d5:1e:a1:48:fb:cd:5b:f9:c3:81:87:56:23:b7:81: 42:67:6e:67:76:16:9b:99:4c:c4:b0:c4:5a:cb:c6: 7f:1e:42:a8:5c:02:28:e2:59:8c:ef:49:a2:33:be: 24:75:fe:9e:33:80:80:cd:5b:81:fc:f6:80:9d:f6: ac:bb:61:55:dc:c9:eb:9d:7c:00:56:11:52:0c:d0: 1f:98:ee:d5:54:9f:be:32:01:4d:9c:07:75:b4:a4: 5b:d5:d5:12:70:77:1b:63:a1:15:93:7a:c5:dd:0c: 72:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:56:72:FC:4D:84:6F:B0:6E:CB:30:1A:FD:04:7A:07:CE:69:85:F3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/ab45727f-3999-34db-bbfb-7d55ed100de3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.207.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5f:c8:02:6d:96:eb:fd:29:b6:2f:a9:62:46:85:16:2d:f8:74: 53:f0:34:e0:6f:a1:67:77:2e:de:24:a5:d2:02:fc:bd:0b:3f: b8:42:08:d2:e5:06:ee:47:bd:45:8c:f9:13:bd:62:ff:54:20: 3c:4d:84:94:98:50:b6:19:15:17:80:c3:e4:5f:74:f7:17:9b: 99:27:86:b8:f4:ac:18:64:28:42:23:39:c8:5f:47:a5:65:86: 8e:d1:f3:f4:58:d1:f8:36:15:b3:7e:3c:55:1f:79:da:78:38: 4f:92:be:dc:3f:5b:8b:af:7c:9a:21:ce:c5:26:ce:6d:33:6b: e5:f2:b6:fa:99:62:1c:0a:0c:a4:7f:4c:83:f0:e5:b9:0d:e1: 09:d7:b9:d8:05:38:a3:69:ce:0d:e7:ff:b8:8a:ce:74:d0:85: c3:dd:0e:ba:91:1e:2b:2e:7b:b2:53:37:0f:67:8f:1d:69:49: 85:13:f2:07:9a:e7:9c:da:2c:67:50:ff:ef:69:78:16:2b:2f: a3:dd:10:22:d9:99:f5:51:5d:3b:93:75:d7:c0:a3:1b:f4:ff: 5b:af:61:9f:62:40:b5:4c:c6:33:a6:dd:75:51:ea:57:7b:6a: 5d:3b:d1:8b:c9:3c:3a:ff:a8:a9:61:c6:52:06:25:af:66:0a: e4:bf:07:e0 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JfjMYyMJRg1PGr8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MjgxNmUzM2ItMDNlOS00NGFiLWEzMmEtN2I3ZjQ1OTdiMjRjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLFJP8GH/W/tLeQ+Sxvi/OC12b13RwE/VXS2 6Vlcj5rZGwdr48egati26iV+JvzFzJOseUc9cy7e5ti4bFmw7E8BCYPV032H9o/6 jP0Cz8b5JEPt1WSF96J/T5uzEZbKA6uG5VKnNWJN9hETfiNq5NKWF1S16xba4KkB TUOFKGf1y1D+OLwGD6f/AsX2NNjYZ/eHvMnVHqFI+81b+cOBh1Yjt4FCZ25ndhab mUzEsMRay8Z/HkKoXAIo4lmM70miM74kdf6eM4CAzVuB/PaAnfasu2FV3MnrnXwA VhFSDNAfmO7VVJ++MgFNnAd1tKRb1dUScHcbY6EVk3rF3QxyUQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOJWcvxNhG+wbsswGv0EegfOaYXzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYWI0NTcyN2YtMzk5OS0z NGRiLWJiZmItN2Q1NWVkMTAwZGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiADPMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAF/IAm2W6/0pti+pYkaFFi34dFPwNOBvoWd3Lt4kpdIC/L0LP7hCCNLl Bu5HvUWM+RO9Yv9UIDxNhJSYULYZFReAw+RfdPcXm5knhrj0rBhkKEIjOchfR6Vl ho7R8/RY0fg2FbN+PFUfedp4OE+Svtw/W4uvfJohzsUmzm0za+XytvqZYhwKDKR/ TIPw5bkN4QnXudgFOKNpzg3n/7iKznTQhcPdDrqRHisue7JTNw9njx1pSYUT8gea 55zaLGdQ/+9peBYrL6PdECLZmfVRXTuTddfAoxv0/1uvYZ9iQLVMxjOm3XVR6ld7 al070YvJPDr/qKlhxlIGJa9mCuS/B+A= -----END CERTIFICATE-----Generated at Sat Sep 26 00:03:00 2026 by rpki-client