$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/689e9f73-3a87-35e3-97c3-1c1043533474.roa File: 689e9f73-3a87-35e3-97c3-1c1043533474.roa (raw, json) Hash identifier: asHQFH+imSzm6jc2PF9XGNIpb1wbkJJt2zBbBxgXLYw= Subject key identifier: 75:86:47:10:89:CF:8E:26:AC:6B:80:F9:D9:29:9E:22:10:15:43:B7 Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Certificate serial: 010D0C9F4328584EDDF74194914779A0131C4180 Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/689e9f73-3a87-35e3-97c3-1c1043533474.roa Signing time: Mon 17 Aug 2026 13:00:11 +0000 ROA not before: Mon 17 Aug 2026 13:00:11 +0000 ROA not after: Sun 15 Nov 2026 14:00:11 +0000 asID: 22616 IP address blocks: 136.226.152.0/23 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 14 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:dd:f7:41:94:91:47:79:a0:13:1c:41:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48 Validity Not Before: Aug 17 13:00:11 2026 GMT Not After : Nov 15 14:00:11 2026 GMT Subject: CN=42f20a9c-224f-4d7e-97ea-cec0bddc697c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:cb:17:89:48:86:2e:55:7f:61:3b:fe:2e:19: 1f:93:3e:46:14:a9:3a:cf:d6:31:26:34:26:da:97: a7:d3:d1:32:f0:7b:4c:23:3c:3a:65:da:bf:e1:c0: 38:26:02:d4:0c:82:bb:0e:a0:33:61:e7:41:73:f6: 21:c0:a1:3c:4a:d6:97:c4:d9:a2:ac:4b:ec:8f:d5: 09:6c:78:82:ff:35:3d:f6:30:86:81:72:04:38:f9: 39:f1:ff:2a:6a:c1:9f:b5:14:c9:e9:be:f2:e6:31: 78:22:08:c2:9e:a7:60:6e:43:2c:96:c2:d8:76:6d: 7c:45:00:9a:65:74:ae:88:a6:d3:2b:bc:6b:46:52: 10:76:d0:0d:88:ba:f7:33:fe:d2:91:d1:4c:32:8b: 3e:2a:67:02:b2:1c:2e:64:24:1c:de:ab:d2:de:b1: 71:1a:49:69:85:24:1f:2f:2a:68:19:ad:4c:c4:13: bf:48:e4:72:e7:70:bb:0c:35:d0:61:02:cf:74:41: d0:40:55:e0:ba:63:cd:ad:51:7b:f7:2e:d4:11:51: 23:52:d0:29:2a:ec:7c:04:df:7e:be:92:e9:f3:84: c3:cc:c2:aa:99:63:0b:e1:e9:56:06:e8:ef:b5:fd: 4f:aa:c0:40:f2:81:4d:4c:54:43:38:cf:2e:cc:16: 39:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:86:47:10:89:CF:8E:26:AC:6B:80:F9:D9:29:9E:22:10:15:43:B7 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/689e9f73-3a87-35e3-97c3-1c1043533474.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl X509v3 Authority Key Identifier: keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer sbgp-ipAddrBlock: critical IPv4: 136.226.152.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:97:6c:c9:b1:37:e3:9c:00:20:b4:ff:b1:bc:8b:58:23:b8: a0:b9:d5:7c:15:8a:7c:d3:91:0f:5d:7b:d3:de:20:42:94:4d: b6:68:b9:d8:4b:13:b2:63:14:09:e7:23:e3:3d:4b:80:88:ad: 87:34:7e:31:28:dd:44:5b:ba:9f:a4:bc:e8:74:fc:83:60:07: d5:0d:cc:ff:55:3a:f8:f2:78:f9:e4:5b:2f:73:80:bf:66:d5: d0:7f:e8:41:89:ed:0e:f1:8f:00:86:36:0a:db:fc:a1:b1:0b: 6a:90:23:7f:b8:5d:e7:76:a7:7d:62:2a:ec:3c:f0:b1:69:dd: f3:00:0f:67:a0:9b:f5:81:6e:ce:27:94:7f:b2:f2:7e:df:00: e0:ba:31:28:05:eb:ed:4c:6c:ca:2c:f0:68:13:e3:4b:dc:09: a5:6b:a5:06:fb:0e:4c:d6:2b:27:a5:3c:e8:f4:41:00:4b:4f: b5:23:be:13:e9:1a:30:69:5c:19:ca:52:43:1a:ec:1b:0e:99: 90:84:31:df:e5:4e:cc:81:8f:9e:6c:b4:c1:dc:44:c3:57:22: e0:75:a7:94:b3:4d:4f:31:7c:d4:bd:2d:75:82:59:48:cb:cb: 1a:3d:96:7d:32:92:a0:b1:ea:dd:e9:ec:26:c0:67:ec:13:0f: e8:e0:0e:2c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7d90GUkUd5oBMcQYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy ZTQ4MB4XDTI2MDgxNzEzMDAxMVoXDTI2MTExNTE0MDAxMVowLzEtMCsGA1UEAxMk NDJmMjBhOWMtMjI0Zi00ZDdlLTk3ZWEtY2VjMGJkZGM2OTdjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAucsXiUiGLlV/YTv+Lhkfkz5GFKk6z9YxJjQm 2pen09Ey8HtMIzw6Zdq/4cA4JgLUDIK7DqAzYedBc/YhwKE8StaXxNmirEvsj9UJ bHiC/zU99jCGgXIEOPk58f8qasGftRTJ6b7y5jF4IgjCnqdgbkMslsLYdm18RQCa ZXSuiKbTK7xrRlIQdtANiLr3M/7SkdFMMos+KmcCshwuZCQc3qvS3rFxGklphSQf LypoGa1MxBO/SORy53C7DDXQYQLPdEHQQFXgumPNrVF79y7UEVEjUtApKux8BN9+ vpLp84TDzMKqmWML4elWBujvtf1PqsBA8oFNTFRDOM8uzBY5iQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHWGRxCJz44mrGuA+dkpniIQFUO3MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvNjg5ZTlmNzMtM2E4Ny0z NWUzLTk3YzMtMWMxMDQzNTMzNDc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4 MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi YTVmODJlNDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiOKYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAE6XbMmxN+OcACC0/7G8i1gjuKC51XwVinzTkQ9de9PeIEKUTbZoudhL E7JjFAnnI+M9S4CIrYc0fjEo3URbup+kvOh0/INgB9UNzP9VOvjyePnkWy9zgL9m 1dB/6EGJ7Q7xjwCGNgrb/KGxC2qQI3+4Xed2p31iKuw88LFp3fMAD2egm/WBbs4n lH+y8n7fAOC6MSgF6+1MbMos8GgT40vcCaVrpQb7DkzWKyelPOj0QQBLT7UjvhPp GjBpXBnKUkMa7BsOmZCEMd/lTsyBj55stMHcRMNXIuB1p5SzTU8xfNS9LXWCWUjL yxo9ln0ykqCx6t3p7CbAZ+wTD+jgDiw= -----END CERTIFICATE-----Generated at Sun Sep 13 14:23:32 2026 by rpki-client