$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5966eb9-4b94-3e3d-a70e-46b021753bd6.roa File: b5966eb9-4b94-3e3d-a70e-46b021753bd6.roa (raw, json) Hash identifier: oOWBT68nPmsFCIxyvk9AXBDNGNv9Ju8Nc5tVE0M2nt8= Subject key identifier: 49:58:3E:EC:D9:4A:78:CD:A8:61:A5:3C:A9:96:0B:2A:C0:2B:19:00 Certificate issuer: /CN=984181fc-af40-43f8-a4ce-77cad82506f9 Certificate serial: 010D0C9F4328584D366F5304012C6934428A83C0 Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5966eb9-4b94-3e3d-a70e-46b021753bd6.roa Signing time: Wed 18 Mar 2026 19:59:32 +0000 ROA not before: Wed 18 Mar 2026 19:59:32 +0000 ROA not after: Tue 16 Jun 2026 19:59:32 +0000 asID: 401152 IP address blocks: 136.0.156.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Mar 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4d:36:6f:53:04:01:2c:69:34:42:8a:83:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9 Validity Not Before: Mar 18 19:59:32 2026 GMT Not After : Jun 16 19:59:32 2026 GMT Subject: CN=3d796d51-6f3a-457a-a88a-d464baa96774 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:29:6a:df:6a:f1:9e:d7:c4:1b:03:c0:32:45: 95:27:a9:c2:2c:59:b2:fc:6a:e8:6e:32:42:d8:3c: b3:13:ca:d8:d8:bc:66:0e:1a:b1:73:ea:bd:8c:4a: 55:ff:95:c0:e3:33:92:90:3a:9e:6c:fd:4e:b3:77: 7b:14:1e:8c:73:68:92:5e:c5:d8:a6:6b:15:16:91: 1a:e8:21:60:b9:f9:91:74:d0:2e:c8:17:2e:ec:95: ee:bd:3f:ff:6a:fb:8c:0a:77:cf:5f:19:94:54:b2: 86:bc:ec:53:70:2d:43:37:73:7d:fd:6b:f0:39:98: 8f:e9:4b:0b:7f:f7:02:1b:8e:af:d8:85:24:d3:cf: 76:c6:06:c4:11:c7:d0:53:e3:26:cf:65:03:8e:4d: 8a:65:04:3f:b1:75:99:c5:70:6c:7c:4e:5e:92:54: 39:09:9e:79:f5:c6:cf:57:0b:05:8c:d4:a0:ed:77: 07:41:a4:69:06:ff:72:e4:7f:fa:16:09:2f:bf:0d: 46:83:7b:82:c4:64:2f:18:36:e9:34:50:5c:4a:e1: 6b:91:f4:d5:2f:0b:90:c5:c8:14:16:9b:f0:37:f3: 6b:c9:17:2e:00:3d:16:d6:2a:66:27:f6:5f:89:6b: bb:7c:77:fa:40:7a:43:12:2b:73:72:ff:26:78:bf: ec:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:58:3E:EC:D9:4A:78:CD:A8:61:A5:3C:A9:96:0B:2A:C0:2B:19:00 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/b5966eb9-4b94-3e3d-a70e-46b021753bd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl X509v3 Authority Key Identifier: keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer sbgp-ipAddrBlock: critical IPv4: 136.0.156.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 69:c3:d1:47:c0:e0:a9:20:89:5a:3d:05:09:ea:7a:fe:14:a6: 86:10:4d:1a:08:29:7e:e6:0b:eb:ea:34:ff:09:ca:ef:db:0b: 27:63:3f:4b:91:86:b9:15:f9:9f:be:87:7d:af:60:f0:39:cd: c7:22:ae:eb:d3:0e:d8:76:fd:86:d0:77:62:5e:81:7e:9d:eb: 52:d4:4c:91:19:89:f7:5b:fd:45:e8:13:2a:6b:86:4b:a2:a0: cc:d7:5b:f5:98:42:a1:30:46:27:22:92:30:bf:7c:25:cd:53: a3:59:e4:4c:7c:a3:7d:78:28:aa:79:6a:89:9b:98:a6:78:e7: ad:5c:fb:fb:5c:bb:2c:e7:ba:d2:68:7c:38:4d:ef:20:66:36: ff:bd:b7:45:d0:2e:95:c9:ce:e4:ac:82:8d:34:f3:44:70:ef: 38:9d:6d:e8:a8:80:07:55:03:79:36:fb:4b:cb:21:fc:af:05: a3:e3:d2:71:3a:54:53:bd:76:6e:99:cf:dc:06:33:d1:4d:f7: cf:d2:af:b1:e9:19:78:73:9d:8c:8c:80:5f:a2:ed:84:b9:4e: 25:d0:b3:b1:b4:70:ae:0d:70:7b:49:b2:ba:da:b1:a3:6c:8e: 55:92:55:30:f7:43:3d:b1:21:27:0e:83:7b:2f:e7:1c:4a:43: 9f:1f:d9:9d -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02b1MEASxpNEKKg8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw NmY5MB4XDTI2MDMxODE5NTkzMloXDTI2MDYxNjE5NTkzMlowLzEtMCsGA1UEAxMk M2Q3OTZkNTEtNmYzYS00NTdhLWE4OGEtZDQ2NGJhYTk2Nzc0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Clq32rxntfEGwPAMkWVJ6nCLFmy/GrobjJC 2DyzE8rY2LxmDhqxc+q9jEpV/5XA4zOSkDqebP1Os3d7FB6Mc2iSXsXYpmsVFpEa 6CFgufmRdNAuyBcu7JXuvT//avuMCnfPXxmUVLKGvOxTcC1DN3N9/WvwOZiP6UsL f/cCG46v2IUk0892xgbEEcfQU+Mmz2UDjk2KZQQ/sXWZxXBsfE5eklQ5CZ559cbP VwsFjNSg7XcHQaRpBv9y5H/6Fgkvvw1Gg3uCxGQvGDbpNFBcSuFrkfTVLwuQxcgU FpvwN/NryRcuAD0W1ipmJ/ZfiWu7fHf6QHpDEitzcv8meL/sWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFElYPuzZSnjNqGGlPKmWCyrAKxkAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvYjU5NjZlYjktNGI5NC0z ZTNkLWE3MGUtNDZiMDIxNzUzYmQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0 Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1 MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiACcMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGnD0UfA4KkgiVo9BQnqev4UpoYQTRoIKX7mC+vqNP8Jyu/bCydjP0uR hrkV+Z++h32vYPA5zcciruvTDth2/YbQd2JegX6d61LUTJEZifdb/UXoEyprhkui oMzXW/WYQqEwRicikjC/fCXNU6NZ5Ex8o314KKp5aombmKZ4561c+/tcuyznutJo fDhN7yBmNv+9t0XQLpXJzuSsgo0080Rw7zidbeiogAdVA3k2+0vLIfyvBaPj0nE6 VFO9dm6Zz9wGM9FN98/Sr7HpGXhznYyMgF+i7YS5TiXQs7G0cK4NcHtJsrrasaNs jlWSVTD3Qz2xIScOg3sv5xxKQ58f2Z0= -----END CERTIFICATE-----Generated at Sat Mar 28 12:20:30 2026 by rpki-client