$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/b34031da-9520-350f-9cf6-eb4288f68001.roa File: b34031da-9520-350f-9cf6-eb4288f68001.roa (raw, json) Hash identifier: TJdtcG2D00rTWwji94nq5HUcjIN1LiJpYo7wW+xSLnA= Subject key identifier: AF:64:F1:CB:D0:F0:31:59:1E:65:5E:52:D1:1F:7C:D0:5D:3A:7C:16 Certificate issuer: /CN=61e7cca0-e65d-417d-a651-371c91be9c95 Certificate serial: 010D0C9F4328584F00DCBF711787840699CCA400 Authority key identifier: 64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/b34031da-9520-350f-9cf6-eb4288f68001.roa Signing time: Sun 30 Aug 2026 01:00:12 +0000 ROA not before: Sun 30 Aug 2026 01:00:12 +0000 ROA not after: Sat 28 Nov 2026 02:00:12 +0000 asID: 19905 IP address blocks: 156.146.128.0/17 maxlen: 24 158.41.128.0/17 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 14 Oct 2026 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:00:dc:bf:71:17:87:84:06:99:cc:a4:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=61e7cca0-e65d-417d-a651-371c91be9c95 Validity Not Before: Aug 30 01:00:12 2026 GMT Not After : Nov 28 02:00:12 2026 GMT Subject: CN=2cfdd075-ef1c-4604-9020-8029ae82ac27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d0:93:c9:d3:d9:36:c1:63:8a:f3:ee:87:ef: 1f:33:35:98:ad:98:2e:a4:ab:8c:a8:dd:49:12:31: 37:40:1a:4c:e9:7c:31:31:d6:40:93:35:71:41:cf: d0:ee:9c:6b:76:11:e0:b2:a1:e4:42:4c:4a:a4:d5: a9:35:d5:92:04:3c:2e:55:89:cc:83:03:a1:55:f9: fa:f8:25:4d:d0:4b:ce:6a:d5:88:e3:30:dd:f7:5d: db:51:ae:00:45:32:b0:a7:4d:5a:01:8e:d3:5e:34: cd:ec:dc:dd:9c:0f:a7:38:25:db:bf:51:1f:cf:b3: d6:cc:4b:2b:be:6e:34:88:f5:bf:a9:bf:cc:7f:66: 8c:24:24:9a:92:6b:11:68:98:28:23:c4:f7:23:a7: f3:42:80:c1:31:7f:41:e5:2d:05:7e:b9:08:c4:5c: ec:25:a3:ea:8d:7b:df:ab:92:eb:5a:70:c1:68:80: d0:44:a9:2c:c2:01:6c:3c:09:68:02:86:1e:7f:08: 7b:e4:1c:7d:06:bf:f0:ad:1a:22:f5:9c:0e:23:f0: de:a6:01:a6:94:0a:fc:ad:5d:b3:0d:2b:9e:e1:20: a3:76:db:22:15:6b:1a:03:07:9b:17:a2:99:a9:3e: 39:37:c5:44:51:ee:1a:c3:30:a8:77:60:43:8d:a5: ab:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:64:F1:CB:D0:F0:31:59:1E:65:5E:52:D1:1F:7C:D0:5D:3A:7C:16 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/b34031da-9520-350f-9cf6-eb4288f68001.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95/61e7cca0-e65d-417d-a651-371c91be9c95.crl X509v3 Authority Key Identifier: keyid:64:A2:9F:B0:12:A3:74:F2:09:E2:03:8E:EB:E2:C6:D3:63:24:57:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/61e7cca0-e65d-417d-a651-371c91be9c95.cer sbgp-ipAddrBlock: critical IPv4: 156.146.128.0/17 158.41.128.0/17 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:0b:8a:2b:af:50:fa:b4:72:87:e6:8b:70:89:71:2b:01:55: d2:a1:bc:7b:55:c1:db:09:5d:9e:eb:20:55:8d:0a:19:81:8d: 8f:54:e2:dc:cc:db:ab:b4:92:21:3a:f1:b6:1a:4b:2d:a1:dd: a1:78:cf:fe:f3:73:1c:f1:c0:e3:9f:a0:bb:a7:51:cd:0f:25: fa:74:f2:11:c1:aa:ba:cb:0f:e8:55:79:2d:08:1e:a2:7c:d3: 1f:5e:f3:57:8b:c3:82:85:c1:53:cf:7a:93:a0:e6:82:39:5f: 2c:00:45:31:a3:c0:fe:d8:6e:7e:47:6d:71:49:54:9a:93:2c: c6:fa:0d:bf:c9:2b:02:95:66:c3:8d:10:99:84:07:dd:fd:de: e5:7a:08:06:f3:cd:ed:d2:27:96:10:75:15:68:46:dd:af:c9: 11:57:e8:ff:89:f4:68:67:ab:f5:3b:d7:02:86:e5:bb:ad:a7: 22:15:1b:c7:c6:c6:b0:27:bd:a8:80:91:c8:30:19:a4:6b:07: 3c:78:d2:dd:91:c5:85:ef:db:38:81:3d:70:ce:49:42:e4:3a: df:40:13:91:de:e8:66:cb:1b:5d:02:fd:39:c7:ba:5f:15:49: bb:cd:a3:69:e0:8a:3b:ce:0b:a0:b2:4a:0f:09:c3:83:37:1f: 43:83:88:ea -----BEGIN CERTIFICATE----- MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE8A3L9xF4eEBpnMpAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjFlN2NjYTAtZTY1ZC00MTdkLWE2NTEtMzcxYzkxYmU5 Yzk1MB4XDTI2MDgzMDAxMDAxMloXDTI2MTEyODAyMDAxMlowLzEtMCsGA1UEAxMk MmNmZGQwNzUtZWYxYy00NjA0LTkwMjAtODAyOWFlODJhYzI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkNCTydPZNsFjivPuh+8fMzWYrZgupKuMqN1J EjE3QBpM6XwxMdZAkzVxQc/Q7pxrdhHgsqHkQkxKpNWpNdWSBDwuVYnMgwOhVfn6 +CVN0EvOatWI4zDd913bUa4ARTKwp01aAY7TXjTN7NzdnA+nOCXbv1Efz7PWzEsr vm40iPW/qb/Mf2aMJCSakmsRaJgoI8T3I6fzQoDBMX9B5S0FfrkIxFzsJaPqjXvf q5LrWnDBaIDQRKkswgFsPAloAoYefwh75Bx9Br/wrRoi9ZwOI/DepgGmlAr8rV2z DSue4SCjdtsiFWsaAwebF6KZqT45N8VEUe4awzCod2BDjaWrmQIDAQABo4IDWzCC A1cwHQYDVR0OBBYEFK9k8cvQ8DFZHmVeUtEffNBdOnwWMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3 Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFjOTFiZTljOTUvYjM0MDMxZGEtOTUyMC0z NTBmLTljZjYtZWI0Mjg4ZjY4MDAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjFlN2NjYTAtZTY1ZC00MTdkLWE2 NTEtMzcxYzkxYmU5Yzk1LzYxZTdjY2EwLWU2NWQtNDE3ZC1hNjUxLTM3MWM5MWJl OWM5NS5jcmwwHwYDVR0jBBgwFoAUZKKfsBKjdPIJ4gOO6+LG02MkVyEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy82MWU3Y2NhMC1lNjVkLTQxN2QtYTY1MS0zNzFj OTFiZTljOTUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQHnJKAAwQH nimAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0 cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI hvcNAQELBQADggEBABoLiiuvUPq0cofmi3CJcSsBVdKhvHtVwdsJXZ7rIFWNChmB jY9U4tzM26u0kiE68bYaSy2h3aF4z/7zcxzxwOOfoLunUc0PJfp08hHBqrrLD+hV eS0IHqJ80x9e81eLw4KFwVPPepOg5oI5XywARTGjwP7Ybn5HbXFJVJqTLMb6Db/J KwKVZsONEJmEB9393uV6CAbzze3SJ5YQdRVoRt2vyRFX6P+J9Ghnq/U71wKG5but pyIVG8fGxrAnvaiAkcgwGaRrBzx40t2RxYXv2ziBPXDOSULkOt9AE5He6GbLG10C /TnHul8VSbvNo2ngijvOC6CySg8Jw4M3H0ODiOo= -----END CERTIFICATE-----Generated at Mon Oct 12 02:16:56 2026 by rpki-client