$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa File: 5b0f7ce6-9e65-3027-ace5-5004e591656b.roa (raw, json) Hash identifier: I8Q6IRT5MLu8+mi1uoeqbTgRs2S1g4i6Hh9a2P2EUL4= Subject key identifier: 29:57:0A:16:FA:B1:3F:86:49:FC:EF:53:BB:8F:82:88:5C:BF:87:04 Certificate issuer: /CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Certificate serial: 010D0C9F4328584F119CF19174C87588171BC300 Authority key identifier: A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa Signing time: Sat 05 Sep 2026 01:00:12 +0000 ROA not before: Sat 05 Sep 2026 01:00:12 +0000 ROA not after: Fri 04 Dec 2026 02:00:12 +0000 asID: 141776 IP address blocks: 174.136.239.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:11:9c:f1:91:74:c8:75:88:17:1b:c3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0f19373b-2cc5-40f4-a6d0-7ccacc634857 Validity Not Before: Sep 5 01:00:12 2026 GMT Not After : Dec 4 02:00:12 2026 GMT Subject: CN=ffb7c30c-1433-49b6-9741-a41772734df8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:1c:88:e0:d4:9e:96:bd:db:97:35:74:23:c6: b7:b1:ed:a8:86:50:d8:6b:24:57:69:ab:ab:b5:ae: a8:bb:65:51:a0:b1:ab:75:05:20:ca:03:7d:a3:65: 8e:5c:1e:d4:1e:63:3b:5b:05:01:43:9a:11:86:4e: 94:c0:29:ea:81:a9:17:f8:ea:99:3b:5e:fc:b1:1f: 27:6a:33:22:75:a3:88:09:53:2f:5d:da:7d:9f:4c: fd:e1:83:0d:be:09:c6:84:79:ee:c5:e8:bf:0f:6e: 2d:7b:e1:0c:e3:2e:66:0b:59:93:01:c3:41:af:4e: 3b:0d:6f:0e:18:03:bb:77:a8:b6:52:a8:cb:92:8d: 1f:41:79:02:6e:32:5b:b8:cd:d6:40:f1:fa:13:d1: ba:55:3d:4e:5a:49:41:54:e3:b5:a8:40:3c:b0:ac: fb:8a:0c:cd:06:f0:7b:1a:d9:09:95:64:f1:45:27: a8:bf:52:5a:96:26:fc:2f:f5:9a:29:8e:b2:cd:c1: b6:bc:8a:ea:af:be:0b:52:93:00:f1:02:e6:83:85: 01:07:87:67:a0:86:1a:b6:4c:fc:5e:6c:c8:f4:74: 76:84:14:b4:43:c5:ce:79:60:2e:20:5e:c1:64:7b: 41:4a:b3:a2:36:e4:49:e1:1e:b7:3f:c6:98:a6:13: 8c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:57:0A:16:FA:B1:3F:86:49:FC:EF:53:BB:8F:82:88:5C:BF:87:04 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/5b0f7ce6-9e65-3027-ace5-5004e591656b.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857/0f19373b-2cc5-40f4-a6d0-7ccacc634857.crl X509v3 Authority Key Identifier: keyid:A7:8E:91:58:FC:B9:59:F7:9B:89:3D:4B:D5:FB:0C:7F:90:02:FD:33 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0f19373b-2cc5-40f4-a6d0-7ccacc634857.cer sbgp-ipAddrBlock: critical IPv4: 174.136.239.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 12:77:9e:08:5a:c8:c5:2e:1b:da:7f:ac:5a:d3:9b:79:bb:53: 49:6a:ff:0f:1f:ea:40:2a:5e:dc:10:f4:af:ba:c7:32:ac:77: 4f:44:14:b2:16:d7:19:2f:f8:3f:6d:d2:e0:4d:62:9e:6d:dc: c0:00:dc:1e:82:b1:00:81:ce:f9:1b:46:ad:41:00:19:bf:78: 9c:e0:35:2f:ef:f3:80:91:b9:24:1d:9b:0a:5b:0e:f1:f2:34: e5:58:e7:28:fd:68:2f:b4:3f:91:98:8d:4a:3b:b1:72:66:4f: 52:e3:b2:b9:11:f4:b7:f5:1e:90:15:8d:b0:c8:8b:b2:8e:ab: bf:5e:ca:d4:c2:d5:7d:1e:35:8e:1b:d8:1d:4f:9b:b1:72:58: 80:e2:e7:44:ef:da:ab:a0:38:54:95:35:0a:8e:5c:58:d9:4a: 25:e7:ac:cc:a0:46:be:5e:9e:e9:c7:55:15:3a:a3:cd:80:ed: c2:34:12:ed:49:01:85:91:fd:fb:b1:86:46:07:31:49:cf:a7: 7d:b8:7f:06:ef:fb:3c:f3:a6:b8:42:7e:ca:cf:16:0c:ab:8f: 3e:d1:98:7e:a2:84:05:7a:59:10:a0:27:4b:10:39:fb:c0:bd: c2:ed:e2:98:79:ea:41:9d:1f:14:bd:f5:ce:66:13:97:0e:89: ba:81:d6:e8 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPGRdMh1iBcbwwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMGYxOTM3M2ItMmNjNS00MGY0LWE2ZDAtN2NjYWNjNjM0 ODU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZiN2MzMGMtMTQzMy00OWI2LTk3NDEtYTQxNzcyNzM0ZGY4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAihyI4NSelr3blzV0I8a3se2ohlDYayRXaaur ta6ou2VRoLGrdQUgygN9o2WOXB7UHmM7WwUBQ5oRhk6UwCnqgakX+OqZO178sR8n ajMidaOICVMvXdp9n0z94YMNvgnGhHnuxei/D24te+EM4y5mC1mTAcNBr047DW8O GAO7d6i2UqjLko0fQXkCbjJbuM3WQPH6E9G6VT1OWklBVOO1qEA8sKz7igzNBvB7 GtkJlWTxRSeov1Jalib8L/WaKY6yzcG2vIrqr74LUpMA8QLmg4UBB4dnoIYatkz8 XmzI9HR2hBS0Q8XOeWAuIF7BZHtBSrOiNuRJ4R63P8aYphOMnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFClXChb6sT+GSfzvU7uPgohcv4cEMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5 MzczYi0yY2M1LTQwZjQtYTZkMC03Y2NhY2M2MzQ4NTcvNWIwZjdjZTYtOWU2NS0z MDI3LWFjZTUtNTAwNGU1OTE2NTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGYxOTM3M2ItMmNjNS00MGY0LWE2 ZDAtN2NjYWNjNjM0ODU3LzBmMTkzNzNiLTJjYzUtNDBmNC1hNmQwLTdjY2FjYzYz NDg1Ny5jcmwwHwYDVR0jBBgwFoAUp46RWPy5WfebiT1L1fsMf5AC/TMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy8wZjE5MzczYi0yY2M1LTQwZjQtYTZkMC03Y2Nh Y2M2MzQ4NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArojvMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABJ3nghayMUuG9p/rFrTm3m7U0lq/w8f6kAqXtwQ9K+6xzKsd09EFLIW 1xkv+D9t0uBNYp5t3MAA3B6CsQCBzvkbRq1BABm/eJzgNS/v84CRuSQdmwpbDvHy NOVY5yj9aC+0P5GYjUo7sXJmT1LjsrkR9Lf1HpAVjbDIi7KOq79eytTC1X0eNY4b 2B1Pm7FyWIDi50Tv2qugOFSVNQqOXFjZSiXnrMygRr5enunHVRU6o82A7cI0Eu1J AYWR/fuxhkYHMUnPp324fwbv+zzzprhCfsrPFgyrjz7RmH6ihAV6WRCgJ0sQOfvA vcLt4ph56kGdHxS99c5mE5cOibqB1ug= -----END CERTIFICATE-----Generated at Sat Sep 5 06:08:59 2026 by rpki-client