$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/80398278-d56d-3e61-8260-e94b10e22e0d.roa File: 80398278-d56d-3e61-8260-e94b10e22e0d.roa (raw, json) Hash identifier: SUzkVMiT63RxxjO5c9Ffy0QYeQRdUk2I0YrLubItBa0= Subject key identifier: E3:C5:8E:60:78:78:5A:27:C1:7F:82:E6:02:4D:24:C8:64:0E:2C:E0 Certificate issuer: /CN=4311e6cf-5d10-4a05-8153-e6edbb4ec5e3 Certificate serial: 010D0C9F4328584F05A6CF69E8A67E866D94A700 Authority key identifier: 3C:05:AD:89:C6:A7:7E:29:17:4A:29:DD:AF:DF:34:00:A5:3D:70:BA Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/80398278-d56d-3e61-8260-e94b10e22e0d.roa Signing time: Mon 31 Aug 2026 18:10:36 +0000 ROA not before: Mon 31 Aug 2026 18:10:36 +0000 ROA not after: Sun 29 Nov 2026 19:10:36 +0000 asID: 399997 IP address blocks: 192.135.121.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:05:a6:cf:69:e8:a6:7e:86:6d:94:a7:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4311e6cf-5d10-4a05-8153-e6edbb4ec5e3 Validity Not Before: Aug 31 18:10:36 2026 GMT Not After : Nov 29 19:10:36 2026 GMT Subject: CN=161fe816-dee2-4727-97c5-6e1350e80c6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:5e:8c:d7:72:f3:18:93:1a:1f:ae:43:37:93: 01:32:0d:0d:fb:74:47:10:97:52:92:49:52:28:50: 3d:24:8a:9a:69:78:09:22:82:b9:02:bb:97:eb:e4: 21:f3:8f:d4:c1:ab:0a:89:3b:2e:ed:c9:22:cb:58: 05:09:9e:11:db:be:de:a5:1c:86:4a:7b:84:b0:b5: 2a:ce:8b:16:d9:2a:4e:42:48:0a:7c:6b:aa:e1:ef: 51:b7:7d:3d:47:c2:ff:0d:2b:46:5c:9a:92:1d:c2: 32:ea:35:90:29:de:d3:2a:3a:fc:d4:5b:d1:f8:fc: 0c:4a:8f:81:29:41:32:71:c6:9f:c9:6f:a8:63:d6: aa:c1:44:90:67:b1:b3:be:e8:7d:3f:2b:79:1c:9f: 9e:3d:6e:99:da:d0:16:11:eb:e2:19:f4:6f:4b:4a: 98:10:09:5d:cb:9e:c5:58:7f:25:d8:8e:de:0e:64: 04:95:11:7c:dc:21:65:64:66:ab:33:30:f4:e0:6f: f2:cf:5d:f6:47:ab:ea:da:1b:4b:a9:71:ec:b8:5e: a5:4c:d1:ac:32:63:4d:9d:d6:25:16:fe:e9:6a:1d: 4a:6b:d2:98:90:a4:ab:c4:97:52:43:16:b6:9d:f8: 86:c0:e6:a9:27:02:29:5b:ba:58:cc:91:37:17:2c: c1:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:C5:8E:60:78:78:5A:27:C1:7F:82:E6:02:4D:24:C8:64:0E:2C:E0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/80398278-d56d-3e61-8260-e94b10e22e0d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.crl X509v3 Authority Key Identifier: keyid:3C:05:AD:89:C6:A7:7E:29:17:4A:29:DD:AF:DF:34:00:A5:3D:70:BA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/4311e6cf-5d10-4a05-8153-e6edbb4ec5e3.cer sbgp-ipAddrBlock: critical IPv4: 192.135.121.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:13:76:0a:48:b6:4c:a6:b5:bf:88:51:01:e4:a2:25:43:9f: fd:d7:d5:6e:a4:a4:68:f2:80:c3:38:f8:8b:78:93:06:3d:38: 4e:9a:14:69:98:e2:37:8b:10:34:62:11:82:74:93:61:26:53: 3e:ba:92:3d:bb:69:a9:17:80:0a:08:69:37:e4:b2:04:59:c9: cf:a6:4f:aa:a2:db:eb:ce:ac:70:5a:48:82:22:43:d2:4b:08: 37:fb:ae:e9:ab:9c:be:ff:c6:0b:b4:70:fb:e8:99:2c:c5:ce: e6:54:fc:49:79:22:01:ae:ce:30:db:c7:35:2d:df:b8:bc:e6: b6:be:55:02:b0:29:5d:a4:81:cb:ac:ab:9f:cc:4e:2c:0d:42: 2f:ea:d5:6e:81:f9:6d:b0:2d:b1:3d:d1:07:e9:26:99:4a:f6: d0:7d:2e:a1:e1:b6:14:48:97:2a:04:7f:93:e7:43:8f:26:34: c4:1f:68:4a:2b:9b:e1:24:2f:73:cb:54:c4:97:56:01:14:90: 48:b9:a1:ee:23:b8:2a:b3:7f:ba:89:7a:a3:89:8d:5a:f4:de: f7:0c:a4:95:d8:94:4c:73:da:3f:e5:b7:dd:09:c8:ea:6c:b5: 04:9f:52:36:69:c2:35:8f:5e:e5:db:8f:66:bb:fd:8d:20:3e: 9c:fd:06:65 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Fps9p6KZ+hm2UpwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNDMxMWU2Y2YtNWQxMC00YTA1LTgxNTMtZTZlZGJiNGVj NWUzMB4XDTI2MDgzMTE4MTAzNloXDTI2MTEyOTE5MTAzNlowLzEtMCsGA1UEAxMk MTYxZmU4MTYtZGVlMi00NzI3LTk3YzUtNmUxMzUwZTgwYzZhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlV6M13LzGJMaH65DN5MBMg0N+3RHEJdSkklS KFA9JIqaaXgJIoK5AruX6+Qh84/UwasKiTsu7ckiy1gFCZ4R277epRyGSnuEsLUq zosW2SpOQkgKfGuq4e9Rt309R8L/DStGXJqSHcIy6jWQKd7TKjr81FvR+PwMSo+B KUEyccafyW+oY9aqwUSQZ7Gzvuh9Pyt5HJ+ePW6Z2tAWEeviGfRvS0qYEAldy57F WH8l2I7eDmQElRF83CFlZGarMzD04G/yz132R6vq2htLqXHsuF6lTNGsMmNNndYl Fv7pah1Ka9KYkKSrxJdSQxa2nfiGwOapJwIpW7pYzJE3FyzB/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOPFjmB4eFonwX+C5gJNJMhkDizgMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi80MzEx ZTZjZi01ZDEwLTRhMDUtODE1My1lNmVkYmI0ZWM1ZTMvODAzOTgyNzgtZDU2ZC0z ZTYxLTgyNjAtZTk0YjEwZTIyZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNDMxMWU2Y2YtNWQxMC00YTA1LTgx NTMtZTZlZGJiNGVjNWUzLzQzMTFlNmNmLTVkMTAtNGEwNS04MTUzLWU2ZWRiYjRl YzVlMy5jcmwwHwYDVR0jBBgwFoAUPAWticanfikXSindr980AKU9cLowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi80MzExZTZjZi01ZDEwLTRhMDUtODE1My1lNmVk YmI0ZWM1ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwId5MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAETdgpItkymtb+IUQHkoiVDn/3X1W6kpGjygMM4+It4kwY9OE6aFGmY 4jeLEDRiEYJ0k2EmUz66kj27aakXgAoIaTfksgRZyc+mT6qi2+vOrHBaSIIiQ9JL CDf7rumrnL7/xgu0cPvomSzFzuZU/El5IgGuzjDbxzUt37i85ra+VQKwKV2kgcus q5/MTiwNQi/q1W6B+W2wLbE90QfpJplK9tB9LqHhthRIlyoEf5PnQ48mNMQfaEor m+EkL3PLVMSXVgEUkEi5oe4juCqzf7qJeqOJjVr03vcMpJXYlExz2j/lt90JyOps tQSfUjZpwjWPXuXbj2a7/Y0gPpz9BmU= -----END CERTIFICATE-----Generated at Fri Sep 4 22:58:18 2026 by rpki-client