$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa File: b4d4251a-34dd-3203-a15b-88e5870f7138.roa (raw, json) Hash identifier: eLjpJcJgvKRwo8GSYLlU3rqvA6LLm9WE/3b/rCH8Qa0= Subject key identifier: 39:80:88:60:97:90:CA:B2:2E:9C:65:16:44:9C:BB:64:55:3C:66:27 Certificate issuer: /CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Certificate serial: 010D0C9F4328584ED001D9C5523C3E17E67EF610 Authority key identifier: 39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa Signing time: Wed 12 Aug 2026 13:00:12 +0000 ROA not before: Wed 12 Aug 2026 13:00:12 +0000 ROA not after: Tue 10 Nov 2026 14:00:12 +0000 asID: 394731 IP address blocks: 192.131.137.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 22 Aug 2026 23:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:d0:01:d9:c5:52:3c:3e:17:e6:7e:f6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c Validity Not Before: Aug 12 13:00:12 2026 GMT Not After : Nov 10 14:00:12 2026 GMT Subject: CN=3d954843-973c-4ac4-b359-251e4d7c69f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:dc:fc:30:3a:9c:d1:a6:1b:1d:8b:e4:76:5e: 68:c8:aa:a9:51:ad:fe:c3:e7:1b:24:79:66:5b:33: 10:5c:bb:0f:0b:10:5e:f9:95:64:da:e9:23:86:0d: 40:70:20:93:35:28:d0:3c:a8:9b:d2:f1:ff:67:d3: 2c:9d:d1:ec:77:32:12:27:6b:2a:80:6d:32:3f:09: 08:1a:76:cb:0b:13:b0:84:f2:3a:1f:44:63:65:9b: 75:1f:4a:2d:c7:e2:2c:f2:be:6b:cb:19:de:32:35: 37:e0:94:d6:4b:37:9b:24:0e:d4:78:21:3f:16:b7: f2:6b:57:68:06:65:53:64:b3:91:da:39:66:d7:3c: 37:67:64:80:1b:b4:dc:64:a5:07:08:53:91:22:43: b5:c1:d5:ce:e8:26:6d:62:1d:40:3f:c2:88:e7:7b: f2:5e:12:61:9d:7c:03:db:cc:ee:0f:61:f9:a0:45: 97:4e:a1:b5:bb:ef:01:6a:84:79:ca:b7:5f:4d:01: 2e:f8:d5:53:ac:c9:e1:33:69:1e:50:1d:09:6c:97: c2:f2:30:43:76:e1:77:f8:35:93:58:63:f2:68:45: e8:b0:06:81:83:79:40:80:56:4a:2b:9c:4d:37:8e: 81:e4:ab:49:3e:44:39:09:fc:c2:d2:b5:d3:d6:d2: 43:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:80:88:60:97:90:CA:B2:2E:9C:65:16:44:9C:BB:64:55:3C:66:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/b4d4251a-34dd-3203-a15b-88e5870f7138.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.crl X509v3 Authority Key Identifier: keyid:39:10:10:A8:A9:95:4E:EE:CD:01:64:C6:66:4B:66:9C:52:65:4E:78 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6a6365b8-6b08-42b2-9ec1-18a6b2e35b5c.cer sbgp-ipAddrBlock: critical IPv4: 192.131.137.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 54:7f:37:45:f0:2a:10:ab:8b:01:64:e0:78:48:07:29:f5:e9: 85:06:58:f8:e8:fa:88:bf:f9:4e:58:e3:68:bf:22:59:86:0f: 6e:58:94:1e:8b:8d:33:47:94:23:3f:f2:29:e0:b5:1b:21:ea: a2:21:1d:82:d6:96:fa:66:08:a6:c1:c4:e0:c7:99:73:2f:74: 0c:f5:3b:9f:49:c4:47:2a:00:5b:7b:6d:f7:cf:dd:24:db:3f: be:dd:23:75:35:0d:23:ac:4e:1c:cb:ba:28:1c:74:92:59:9c: 67:61:24:47:f5:03:8b:ba:f9:39:b7:7b:2b:40:3c:e9:b5:f1: da:26:6a:37:77:fc:a6:61:81:dc:ac:79:50:20:f0:f0:bb:f7: 51:eb:ae:fc:fe:2b:21:e3:aa:c6:a2:8c:05:9d:03:2e:17:5b: ca:c6:ea:34:17:ed:12:02:9d:1e:1f:a9:ed:2d:7a:c1:f1:dd: d8:42:1f:9f:cb:e1:39:06:11:5d:e2:e5:9d:9a:2d:54:9c:a5: 4c:2e:de:b7:f8:68:e0:e0:8a:6e:fe:31:54:bf:fc:84:f7:29: c8:24:81:4e:da:47:28:d4:82:14:a5:7a:4a:27:29:cf:fd:ce: 03:3f:aa:a0:83:10:49:53:b5:aa:b6:63:c7:43:3a:6a:37:df: d9:87:c9:d7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7QAdnFUjw+F+Z+9hAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmE2MzY1YjgtNmIwOC00MmIyLTllYzEtMThhNmIyZTM1 YjVjMB4XDTI2MDgxMjEzMDAxMloXDTI2MTExMDE0MDAxMlowLzEtMCsGA1UEAxMk M2Q5NTQ4NDMtOTczYy00YWM0LWIzNTktMjUxZTRkN2M2OWY1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Nz8MDqc0aYbHYvkdl5oyKqpUa3+w+cbJHlm WzMQXLsPCxBe+ZVk2ukjhg1AcCCTNSjQPKib0vH/Z9MsndHsdzISJ2sqgG0yPwkI GnbLCxOwhPI6H0RjZZt1H0otx+Is8r5ryxneMjU34JTWSzebJA7UeCE/Frfya1do BmVTZLOR2jlm1zw3Z2SAG7TcZKUHCFORIkO1wdXO6CZtYh1AP8KI53vyXhJhnXwD 28zuD2H5oEWXTqG1u+8BaoR5yrdfTQEu+NVTrMnhM2keUB0JbJfC8jBDduF3+DWT WGPyaEXosAaBg3lAgFZKK5xNN46B5KtJPkQ5CfzC0rXT1tJDNwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDmAiGCXkMqyLpxlFkScu2RVPGYnMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYz NjViOC02YjA4LTQyYjItOWVjMS0xOGE2YjJlMzViNWMvYjRkNDI1MWEtMzRkZC0z MjAzLWExNWItODhlNTg3MGY3MTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmE2MzY1YjgtNmIwOC00MmIyLTll YzEtMThhNmIyZTM1YjVjLzZhNjM2NWI4LTZiMDgtNDJiMi05ZWMxLTE4YTZiMmUz NWI1Yy5jcmwwHwYDVR0jBBgwFoAUORAQqKmVTu7NAWTGZktmnFJlTngwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi82YTYzNjViOC02YjA4LTQyYjItOWVjMS0xOGE2 YjJlMzViNWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIOJMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFR/N0XwKhCriwFk4HhIByn16YUGWPjo+oi/+U5Y42i/IlmGD25YlB6L jTNHlCM/8ingtRsh6qIhHYLWlvpmCKbBxODHmXMvdAz1O59JxEcqAFt7bffP3STb P77dI3U1DSOsThzLuigcdJJZnGdhJEf1A4u6+Tm3eytAPOm18domajd3/KZhgdys eVAg8PC791Hrrvz+KyHjqsaijAWdAy4XW8rG6jQX7RICnR4fqe0tesHx3dhCH5/L 4TkGEV3i5Z2aLVScpUwu3rf4aODgim7+MVS//IT3KcgkgU7aRyjUghSlekonKc/9 zgM/qqCDEElTtaq2Y8dDOmo339mHydc= -----END CERTIFICATE-----Generated at Fri Aug 21 22:06:25 2026 by rpki-client