$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa File: b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa (raw, json) Hash identifier: NvPZJCwJA+uHQ7zT08SOcwmz4f0CYHbCRr6cfwd6VUw= Subject key identifier: 31:E5:7D:72:25:C9:6F:3C:B4:D2:08:C0:14:AE:B8:B7:BD:3A:D6:8B Certificate issuer: /CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Certificate serial: 010D0C9F4328584EFCD533664D0367185E4D4D40 Authority key identifier: 48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa Signing time: Fri 28 Aug 2026 14:21:47 +0000 ROA not before: Fri 28 Aug 2026 14:21:47 +0000 ROA not after: Thu 26 Nov 2026 15:21:47 +0000 asID: 2386 IP address blocks: 156.134.104.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:fc:d5:33:66:4d:03:67:18:5e:4d:4d:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e3c4bb1-6679-4d61-a72c-89e58d4479e3 Validity Not Before: Aug 28 14:21:47 2026 GMT Not After : Nov 26 15:21:47 2026 GMT Subject: CN=b2f99301-b05f-4456-bbaf-b14bcf69f0fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:7c:70:7a:5b:b1:3d:74:dc:8f:e8:af:e3:84: ee:3e:52:9b:fb:d6:13:a5:c0:7f:c2:55:9f:08:a0: c9:49:e3:10:5b:86:2a:b0:33:6b:c1:9b:48:ea:85: c8:9f:c4:7b:1e:35:42:ad:e6:8a:38:0d:f4:91:06: 27:4a:b1:12:0a:97:71:a1:fd:a8:33:15:6a:1f:cf: 6a:81:f1:23:ee:0a:a9:7f:64:23:d0:81:5e:93:36: 2c:73:97:50:b6:0f:7b:92:06:c5:13:2b:68:58:89: 3c:d3:30:a4:00:93:a2:98:a7:6c:50:9e:63:28:d5: d4:09:63:f0:e2:99:f1:2a:24:1a:ce:7a:65:ca:51: 88:00:92:c0:84:0e:7a:93:5e:79:be:4a:79:97:b7: 4c:3d:62:04:f4:ef:8c:3d:bd:81:ab:4b:63:9f:b5: dc:70:31:d0:33:ec:ba:1e:5c:f1:9a:99:91:5e:22: 32:26:67:f1:fa:53:a5:a5:f0:88:47:f1:a4:68:c6: d5:9e:1f:16:3d:ef:45:0b:e7:0a:63:7c:7c:fa:f4: f8:82:41:45:23:b9:28:d1:77:d7:39:69:41:af:cf: 7e:c2:18:d5:ff:ab:d8:40:a5:c3:a7:bb:7b:f7:cb: cc:21:f4:0c:58:b3:83:78:b0:65:de:9b:5a:ea:9f: 22:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:E5:7D:72:25:C9:6F:3C:B4:D2:08:C0:14:AE:B8:B7:BD:3A:D6:8B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/b6f31bd0-172b-323a-aa12-e91dc9d7c9b8.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.crl X509v3 Authority Key Identifier: keyid:48:33:B7:33:89:C8:1C:FB:C0:5A:10:59:A2:75:DD:76:AF:7A:E3:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/5e3c4bb1-6679-4d61-a72c-89e58d4479e3.cer sbgp-ipAddrBlock: critical IPv4: 156.134.104.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 85:21:c6:07:18:4d:ee:fe:b6:c9:97:a1:2f:fe:b5:b7:0a:b9: da:b3:28:36:4f:98:ba:e1:7c:53:6a:94:12:d3:36:c8:be:1b: 3e:ee:f3:4e:f9:09:56:8f:68:ee:3e:4f:e1:c1:f5:30:9f:f4: dd:73:7c:66:49:a1:b7:a1:7c:fc:fe:87:78:a3:8c:fd:03:1c: a7:3b:b9:08:48:d4:75:45:40:87:4f:00:c0:18:98:69:62:b3: 0d:ae:c2:37:ae:b8:27:6b:24:34:bb:c5:7b:4a:a3:6b:0a:36: 29:4f:71:67:d0:f1:c0:bb:14:b2:ef:19:4e:0b:07:64:37:5e: ee:c5:d8:19:ff:55:bd:1d:5a:21:21:e0:d5:38:43:e8:85:ba: 3b:08:f2:ef:f3:89:3f:2b:bb:2c:b0:d6:62:3a:6e:31:4e:59: 4d:84:81:39:b0:4f:6b:a6:ff:58:10:7f:49:98:a3:da:a2:ab: 1f:ca:64:a9:54:ab:42:20:e3:2e:d4:b3:eb:02:62:22:6b:72: 33:a9:71:69:3d:31:7d:b8:48:02:ed:31:63:8f:93:65:b3:c6: d2:68:f0:6f:30:f8:5d:35:ff:79:c1:32:e6:fd:cf:02:fa:fb: c6:ac:eb:b5:68:4c:72:6a:92:bf:5a:0c:0a:7d:6b:93:ab:dc: 0d:66:9b:a2 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE781TNmTQNnGF5NTUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWUzYzRiYjEtNjY3OS00ZDYxLWE3MmMtODllNThkNDQ3 OWUzMB4XDTI2MDgyODE0MjE0N1oXDTI2MTEyNjE1MjE0N1owLzEtMCsGA1UEAxMk YjJmOTkzMDEtYjA1Zi00NDU2LWJiYWYtYjE0YmNmNjlmMGZjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXxweluxPXTcj+iv44TuPlKb+9YTpcB/wlWf CKDJSeMQW4YqsDNrwZtI6oXIn8R7HjVCreaKOA30kQYnSrESCpdxof2oMxVqH89q gfEj7gqpf2Qj0IFekzYsc5dQtg97kgbFEytoWIk80zCkAJOimKdsUJ5jKNXUCWPw 4pnxKiQaznplylGIAJLAhA56k155vkp5l7dMPWIE9O+MPb2Bq0tjn7XccDHQM+y6 HlzxmpmRXiIyJmfx+lOlpfCIR/GkaMbVnh8WPe9FC+cKY3x8+vT4gkFFI7ko0XfX OWlBr89+whjV/6vYQKXDp7t798vMIfQMWLODeLBl3pta6p8i/wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDHlfXIlyW88tNIIwBSuuLe9OtaLMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi81ZTNj NGJiMS02Njc5LTRkNjEtYTcyYy04OWU1OGQ0NDc5ZTMvYjZmMzFiZDAtMTcyYi0z MjNhLWFhMTItZTkxZGM5ZDdjOWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05 YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNWUzYzRiYjEtNjY3OS00ZDYxLWE3 MmMtODllNThkNDQ3OWUzLzVlM2M0YmIxLTY2NzktNGQ2MS1hNzJjLTg5ZTU4ZDQ0 NzllMy5jcmwwHwYDVR0jBBgwFoAUSDO3M4nIHPvAWhBZonXddq9649IwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz OS05NDBmLWJlMjczZDljMGI2Mi81ZTNjNGJiMS02Njc5LTRkNjEtYTcyYy04OWU1 OGQ0NDc5ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnIZoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAIUhxgcYTe7+tsmXoS/+tbcKudqzKDZPmLrhfFNqlBLTNsi+Gz7u8075 CVaPaO4+T+HB9TCf9N1zfGZJobehfPz+h3ijjP0DHKc7uQhI1HVFQIdPAMAYmGli sw2uwjeuuCdrJDS7xXtKo2sKNilPcWfQ8cC7FLLvGU4LB2Q3Xu7F2Bn/Vb0dWiEh 4NU4Q+iFujsI8u/ziT8ruyyw1mI6bjFOWU2EgTmwT2um/1gQf0mYo9qiqx/KZKlU q0Ig4y7Us+sCYiJrcjOpcWk9MX24SALtMWOPk2WzxtJo8G8w+F01/3nBMub9zwL6 +8as67VoTHJqkr9aDAp9a5Or3A1mm6I= -----END CERTIFICATE-----Generated at Sat Sep 5 00:24:48 2026 by rpki-client