$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fe3b05bb-4beb-369a-8f27-580494eea2da.roa File: fe3b05bb-4beb-369a-8f27-580494eea2da.roa (raw, json) Hash identifier: MncIeoRvhPg5RP8kBjimOYNU70dRwWmO527s41g4qps= Subject key identifier: 1C:21:02:09:33:B4:50:CC:E8:1B:12:96:E3:3D:19:70:BE:AE:D5:5E Certificate issuer: /CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Certificate serial: 010D0C9F4328584EF68DA63F11A81F6211548A00 Authority key identifier: 68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fe3b05bb-4beb-369a-8f27-580494eea2da.roa Signing time: Wed 26 Aug 2026 08:22:46 +0000 ROA not before: Wed 26 Aug 2026 08:22:46 +0000 ROA not after: Tue 24 Nov 2026 09:22:46 +0000 asID: 397412 IP address blocks: 136.244.0.0/18 maxlen: 24 143.109.96.0/19 maxlen: 24 149.106.64.0/19 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 28 Aug 2026 16:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f6:8d:a6:3f:11:a8:1f:62:11:54:8a:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11 Validity Not Before: Aug 26 08:22:46 2026 GMT Not After : Nov 24 09:22:46 2026 GMT Subject: CN=d8b0a2ff-108a-48d0-9771-c08cce85e141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:a9:c8:86:16:42:92:6b:45:49:2c:5d:48:a5: ec:84:04:b9:43:cc:cb:18:30:11:f5:df:64:08:35: cb:9f:99:b7:92:8b:f2:8d:83:63:4c:2b:05:7b:7d: 12:03:e1:9c:a3:6a:15:56:09:01:ee:55:0e:02:ba: da:68:21:41:d1:cf:a1:f0:3f:96:ce:74:6a:a3:37: 47:42:7b:91:5c:f2:11:42:fc:eb:d4:5f:b5:77:9a: 09:b0:15:a5:4d:bd:ae:dd:d0:92:d4:f8:d8:fe:44: 07:c1:8d:7c:32:3f:05:29:2d:2f:07:19:a9:8d:1b: d5:a9:d6:48:2d:55:f4:35:19:24:5f:cb:e3:32:bb: 03:27:ea:26:dc:9a:73:6c:e1:cc:06:78:11:2b:36: cd:53:51:19:b9:22:bf:27:10:43:03:0e:d0:9f:f5: af:14:51:9e:32:17:d6:8a:e2:33:67:02:46:2d:75: fd:05:aa:d6:d8:ba:4b:56:e7:38:27:88:f8:d7:8b: c6:bf:e5:62:de:e7:0f:1c:69:28:c3:9d:05:bf:51: 97:22:03:2f:c3:eb:78:a7:e4:8c:43:8b:74:54:4a: b7:89:17:ef:a6:31:ae:d4:9f:36:0d:81:36:3f:69: 36:93:1d:f0:40:f7:11:b9:66:cb:5a:d2:c8:78:83: fe:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:21:02:09:33:B4:50:CC:E8:1B:12:96:E3:3D:19:70:BE:AE:D5:5E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/fe3b05bb-4beb-369a-8f27-580494eea2da.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.crl X509v3 Authority Key Identifier: keyid:68:EF:90:87:C1:F1:88:55:CE:5E:3A:B7:FF:84:47:3B:C8:59:E9:CD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/ce4a4609-6c2e-47d8-8c69-1d80a2cf3f11.cer sbgp-ipAddrBlock: critical IPv4: 136.244.0.0/18 143.109.96.0/19 149.106.64.0/19 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2c:54:c5:70:2d:eb:1f:40:86:e1:43:b2:a2:1b:fb:ce:f1:2d: 81:f1:93:40:76:47:6d:98:6a:8e:0d:3a:12:97:f6:9f:aa:70: 13:18:e7:f4:2f:a9:26:d7:a7:0b:bd:6d:d5:04:13:9b:7d:cd: 25:de:9f:e7:de:f9:0e:07:3b:cc:33:58:b7:ae:38:58:8c:17: 71:db:ca:49:8a:01:a8:d3:61:6f:12:a7:78:f7:63:54:0f:8e: 98:a8:77:54:9d:7c:9d:0f:6b:e6:b9:13:b9:1d:db:45:5d:e1: 1f:53:5c:a4:df:29:d9:e5:29:28:46:51:96:b1:84:ee:84:6f: 53:32:25:16:ac:db:70:9f:1d:44:7a:2a:3a:bd:d0:c6:72:bf: 62:c7:b6:7f:17:53:cc:d8:83:52:5c:ed:cf:9e:37:95:03:9f: ad:e4:bd:d9:ab:0e:e6:b7:c9:c4:af:d8:19:25:37:9b:a0:92: d8:79:ec:65:b6:d8:8a:e3:37:a8:9f:3d:a9:52:67:ed:a5:6d: 86:bd:cd:b3:d1:c7:b8:93:a3:32:ed:f3:81:58:70:a9:79:c9: 8c:6b:30:4e:61:89:a2:b1:af:fd:4c:f7:9d:1f:cf:4a:cb:f7: af:ca:b3:86:19:bd:fa:84:1b:10:f7:24:95:51:a7:3b:fe:99: 11:60:5f:e0 -----BEGIN CERTIFICATE----- MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWE72jaY/EagfYhFUigAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkY2U0YTQ2MDktNmMyZS00N2Q4LThjNjktMWQ4MGEyY2Yz ZjExMB4XDTI2MDgyNjA4MjI0NloXDTI2MTEyNDA5MjI0NlowLzEtMCsGA1UEAxMk ZDhiMGEyZmYtMTA4YS00OGQwLTk3NzEtYzA4Y2NlODVlMTQxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0anIhhZCkmtFSSxdSKXshAS5Q8zLGDAR9d9k CDXLn5m3kovyjYNjTCsFe30SA+Gco2oVVgkB7lUOArraaCFB0c+h8D+WznRqozdH QnuRXPIRQvzr1F+1d5oJsBWlTb2u3dCS1PjY/kQHwY18Mj8FKS0vBxmpjRvVqdZI LVX0NRkkX8vjMrsDJ+om3JpzbOHMBngRKzbNU1EZuSK/JxBDAw7Qn/WvFFGeMhfW iuIzZwJGLXX9BarW2LpLVuc4J4j414vGv+Vi3ucPHGkow50Fv1GXIgMvw+t4p+SM Q4t0VEq3iRfvpjGu1J82DYE2P2k2kx3wQPcRuWbLWtLIeIP+aQIDAQABo4IDYTCC A10wHQYDVR0OBBYEFBwhAgkztFDM6BsSluM9GXC+rtVeMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9jZTRh NDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgwYTJjZjNmMTEvZmUzYjA1YmItNGJlYi0z NjlhLThmMjctNTgwNDk0ZWVhMmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvY2U0YTQ2MDktNmMyZS00N2Q4LThj NjktMWQ4MGEyY2YzZjExL2NlNGE0NjA5LTZjMmUtNDdkOC04YzY5LTFkODBhMmNm M2YxMS5jcmwwHwYDVR0jBBgwFoAUaO+Qh8HxiFXOXjq3/4RHO8hZ6c0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC9jZTRhNDYwOS02YzJlLTQ3ZDgtOGM2OS0xZDgw YTJjZjNmMTEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQGiPQAAwQF j21gAwQFlWpAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww DQYJKoZIhvcNAQELBQADggEBACxUxXAt6x9AhuFDsqIb+87xLYHxk0B2R22Yao4N OhKX9p+qcBMY5/QvqSbXpwu9bdUEE5t9zSXen+fe+Q4HO8wzWLeuOFiMF3HbykmK AajTYW8Sp3j3Y1QPjpiod1SdfJ0Pa+a5E7kd20Vd4R9TXKTfKdnlKShGUZaxhO6E b1MyJRas23CfHUR6Kjq90MZyv2LHtn8XU8zYg1Jc7c+eN5UDn63kvdmrDua3ycSv 2BklN5ugkth57GW22IrjN6ifPalSZ+2lbYa9zbPRx7iTozLt84FYcKl5yYxrME5h iaKxr/1M950fz0rL96/Ks4YZvfqEGxD3JJVRpzv+mRFgX+A= -----END CERTIFICATE-----Generated at Wed Aug 26 23:35:29 2026 by rpki-client