$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa File: d20a987f-18e0-34af-a31d-c7adaa75767b.roa (raw, json) Hash identifier: qG4yjD+l6qN1PrNLG85QYbps4BXdbqRQRuBmsuPTfbY= Subject key identifier: 07:40:22:11:0D:EA:10:F2:CA:0E:B0:F7:F8:6C:1E:73:15:B6:B7:CC Certificate issuer: /CN=10fa2500-375d-430f-932e-9e2080243439 Certificate serial: 010D0C9F4328584EC371CA82BA1F0336D90018C0 Authority key identifier: EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 23261 IP address blocks: 136.175.116.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 23 Aug 2026 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:71:ca:82:ba:1f:03:36:d9:00:18:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=10fa2500-375d-430f-932e-9e2080243439 Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=d7d41eb3-720b-4add-a385-087eb7fc03a6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:fc:bd:6e:8a:61:c3:d9:fc:60:78:a8:13:24: bd:4e:98:f0:f2:0d:50:f6:e8:41:72:c6:be:42:e7: d1:a5:9b:cf:b9:27:33:33:22:39:c7:24:5d:f1:c3: 0b:b7:49:c2:f6:af:ee:a3:8d:89:78:fa:e5:15:c5: 93:47:b1:2d:d2:0b:40:d5:47:9c:64:9a:83:67:78: bf:86:43:d4:1e:7c:1e:5a:06:8c:5e:4d:11:f7:fa: 8b:34:fb:6f:04:bf:0f:83:3e:18:f0:19:89:02:23: 9f:7e:d9:35:41:4a:3e:e0:4d:50:4f:ec:01:f0:d3: 08:cb:6b:42:ec:7f:88:69:0f:ff:6a:67:b7:5d:df: 61:b5:21:07:0e:3f:c4:00:af:b1:13:45:6d:6c:a1: cb:c9:67:15:03:dd:4a:8d:02:47:cb:92:a1:a3:54: c0:a7:8e:0b:2e:27:09:09:bd:8b:1c:81:08:94:e2: 92:a5:72:2e:c3:66:53:65:a6:9a:e9:5d:f3:17:12: f9:0e:46:7f:cf:56:aa:e1:7d:da:76:50:a0:29:3d: a6:2d:94:77:90:9f:77:0d:f1:7e:93:f0:e7:81:23: 38:88:f0:40:8f:5b:14:53:d8:96:1f:83:8c:36:85: 0a:24:79:63:00:d0:7b:6f:1c:34:6e:de:e5:e2:d7: a3:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:40:22:11:0D:EA:10:F2:CA:0E:B0:F7:F8:6C:1E:73:15:B6:B7:CC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/d20a987f-18e0-34af-a31d-c7adaa75767b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439/10fa2500-375d-430f-932e-9e2080243439.crl X509v3 Authority Key Identifier: keyid:EC:2E:E1:0E:27:6F:DE:AD:2C:F8:2D:F1:A7:18:49:8C:CB:EC:DB:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/10fa2500-375d-430f-932e-9e2080243439.cer sbgp-ipAddrBlock: critical IPv4: 136.175.116.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 32:60:c6:96:6c:71:c1:9d:36:e7:e8:84:c5:aa:09:a0:f9:62: 2a:3d:2d:25:83:e0:c2:9f:4e:98:50:c5:87:a4:56:5f:ce:6d: 0a:41:46:13:b9:1c:8b:a0:cf:a2:f7:64:29:9b:3c:08:09:8f: f9:34:85:7f:ae:0c:51:ac:ed:9b:53:2a:c2:0f:71:e7:a0:56: f5:f7:f4:e1:1d:3e:53:43:d2:85:21:b5:4b:d4:13:09:f8:ef: 85:e5:f0:b3:b5:8e:d4:6d:20:a1:c8:12:92:cf:d2:7e:1d:8a: ee:91:bc:64:a1:81:13:71:a3:54:1b:b0:68:8f:90:a8:67:4e: 4a:a2:66:47:88:65:f2:ce:a1:ed:63:a0:c6:6f:a7:2b:56:85: 5c:1e:29:36:3b:5b:63:d4:3c:5a:1d:9e:0b:0d:96:b0:ca:4e: f1:4b:53:6a:00:6a:7c:28:b4:7b:aa:e1:3c:93:bd:f0:bc:80: bf:03:33:53:f4:fa:3b:b6:b8:60:07:35:a3:bb:8a:74:64:6e: b8:07:75:ff:42:b7:19:3a:ae:7e:45:62:d4:de:8b:e2:09:0e: d3:6a:d8:ba:81:49:e6:de:10:ed:54:9e:ff:ed:85:9a:02:3e: 93:ce:02:88:ee:63:91:00:97:53:b5:9c:27:ec:9d:0a:3a:63: d5:1c:19:9f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DccqCuh8DNtkAGMAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTBmYTI1MDAtMzc1ZC00MzBmLTkzMmUtOWUyMDgwMjQz NDM5MB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk ZDdkNDFlYjMtNzIwYi00YWRkLWEzODUtMDg3ZWI3ZmMwM2E2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuPy9bophw9n8YHioEyS9Tpjw8g1Q9uhBcsa+ QufRpZvPuSczMyI5xyRd8cMLt0nC9q/uo42JePrlFcWTR7Et0gtA1UecZJqDZ3i/ hkPUHnweWgaMXk0R9/qLNPtvBL8Pgz4Y8BmJAiOfftk1QUo+4E1QT+wB8NMIy2tC 7H+IaQ//ame3Xd9htSEHDj/EAK+xE0VtbKHLyWcVA91KjQJHy5Kho1TAp44LLicJ Cb2LHIEIlOKSpXIuw2ZTZaaa6V3zFxL5DkZ/z1aq4X3adlCgKT2mLZR3kJ93DfF+ k/DngSM4iPBAj1sUU9iWH4OMNoUKJHljANB7bxw0bt7l4tejuwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAdAIhEN6hDyyg6w9/hsHnMVtrfMMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZh MjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIwODAyNDM0MzkvZDIwYTk4N2YtMThlMC0z NGFmLWEzMWQtYzdhZGFhNzU3NjdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMTBmYTI1MDAtMzc1ZC00MzBmLTkz MmUtOWUyMDgwMjQzNDM5LzEwZmEyNTAwLTM3NWQtNDMwZi05MzJlLTllMjA4MDI0 MzQzOS5jcmwwHwYDVR0jBBgwFoAU7C7hDidv3q0s+C3xpxhJjMvs25AwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi8xMGZhMjUwMC0zNzVkLTQzMGYtOTMyZS05ZTIw ODAyNDM0MzkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCiK90MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADJgxpZsccGdNufohMWqCaD5Yio9LSWD4MKfTphQxYekVl/ObQpBRhO5 HIugz6L3ZCmbPAgJj/k0hX+uDFGs7ZtTKsIPceegVvX39OEdPlND0oUhtUvUEwn4 74Xl8LO1jtRtIKHIEpLP0n4diu6RvGShgRNxo1QbsGiPkKhnTkqiZkeIZfLOoe1j oMZvpytWhVweKTY7W2PUPFodngsNlrDKTvFLU2oAanwotHuq4TyTvfC8gL8DM1P0 +ju2uGAHNaO7inRkbrgHdf9Ctxk6rn5FYtTei+IJDtNq2LqBSebeEO1Unv/thZoC PpPOAojuY5EAl1O1nCfsnQo6Y9UcGZ8= -----END CERTIFICATE-----Generated at Fri Aug 21 23:03:22 2026 by rpki-client