$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/a211103d-7315-33a7-9a7c-09170d70c429.roa File: a211103d-7315-33a7-9a7c-09170d70c429.roa (raw, json) Hash identifier: Q2OcRJMR8vLd3+hv13k4qwWI0fL9ku042sVMmZDLE3Y= Subject key identifier: 64:CF:0C:61:32:67:6B:BF:7E:66:EB:B5:0D:ED:8B:DC:54:32:0F:20 Certificate issuer: /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Certificate serial: 010D0C9F4328584F1F92485C55C53D446ADC77B0 Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/a211103d-7315-33a7-9a7c-09170d70c429.roa Signing time: Thu 10 Sep 2026 01:00:12 +0000 ROA not before: Thu 10 Sep 2026 01:00:12 +0000 ROA not after: Wed 09 Dec 2026 02:00:12 +0000 asID: 6363 IP address blocks: 134.141.188.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:1f:92:48:5c:55:c5:3d:44:6a:dc:77:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0 Validity Not Before: Sep 10 01:00:12 2026 GMT Not After : Dec 9 02:00:12 2026 GMT Subject: CN=9533df9c-c906-4cf5-a4fb-2d900a7dca78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:db:b6:2c:ae:52:3b:09:7f:62:8d:06:79:4b: c8:68:3b:56:20:1a:3b:5b:25:20:94:ba:27:86:3c: 96:7a:97:10:e0:18:83:74:be:48:f9:ec:96:44:83: f1:4b:2f:67:97:cf:fe:9d:75:83:63:87:68:11:1e: 86:59:cd:9e:e9:60:71:4b:f3:0f:86:e0:19:23:f9: b6:78:dd:67:ea:84:8b:ca:c8:31:f6:79:5e:9b:4a: 4f:25:0d:0f:38:0a:3c:45:46:ec:76:a8:72:80:f9: 81:ee:3b:f9:97:e9:c4:53:80:49:bf:dc:81:27:e7: ae:e9:bb:b1:73:dd:1d:4b:b2:84:13:a0:0d:6b:60: 68:f1:82:34:cd:7a:00:f6:ee:e3:c8:7e:3f:65:0b: 96:2f:e1:46:ed:d4:be:6b:91:a7:78:17:73:ad:88: 75:3d:6e:37:a6:d5:79:6a:3a:af:78:07:cd:e6:15: 79:47:8e:58:81:23:18:6f:0a:d2:d6:d6:e0:95:69: 82:89:2a:e9:7a:e4:ef:a2:d4:59:e6:ea:b2:21:9c: be:b3:78:4d:84:af:b4:34:14:fb:53:d1:42:02:a9: 12:ac:ea:f1:94:83:ed:f4:64:3f:6d:ff:6b:3b:8c: 6c:4c:72:f9:a1:62:30:55:8b:1f:4b:09:57:d0:69: b2:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:CF:0C:61:32:67:6B:BF:7E:66:EB:B5:0D:ED:8B:DC:54:32:0F:20 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/a211103d-7315-33a7-9a7c-09170d70c429.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl X509v3 Authority Key Identifier: keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer sbgp-ipAddrBlock: critical IPv4: 134.141.188.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 77:cd:4b:64:40:39:6a:7a:f8:c6:39:29:24:83:89:13:d5:95: b8:23:7a:7c:9c:6e:f6:22:ab:e0:ea:03:75:a8:ac:43:81:94: d6:95:c8:1c:3f:8e:03:e6:a0:16:28:35:eb:09:5f:a6:73:17: fa:3b:9c:bc:15:9d:19:75:93:a2:a3:6b:87:ad:59:81:3e:87: 74:b3:69:c4:25:94:31:bd:fb:c1:f2:82:dc:bb:d2:07:f9:55: ab:7c:fd:9a:87:1d:b6:1b:1e:51:c4:54:9d:f5:8e:bc:b3:46: 34:cb:65:f5:e1:b6:ed:bd:74:bd:3f:a8:fe:61:52:02:62:db: 87:68:2b:ac:94:7f:e4:60:9a:bd:00:69:c8:97:64:ba:d3:7a: 26:01:50:8e:c9:54:e0:7e:23:8c:4f:85:57:1d:7a:11:ee:ba: 48:6e:4c:1a:56:04:38:43:c2:7c:fe:c4:a0:6a:57:b5:34:87: 11:52:3a:c5:3b:4a:4f:eb:59:24:d5:f4:15:48:c6:3a:d2:62: 29:10:74:c4:d1:01:83:6b:37:75:2d:71:78:1f:ef:06:7c:66: dd:a7:c8:6a:17:b7:68:8e:8c:39:94:f1:95:1c:f1:aa:33:65: da:32:bf:0b:8f:f1:dd:58:b3:5b:6d:36:58:e2:9a:62:de:15: da:73:6c:0a -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8fkkhcVcU9RGrcd7AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx YmUwMB4XDTI2MDkxMDAxMDAxMloXDTI2MTIwOTAyMDAxMlowLzEtMCsGA1UEAxMk OTUzM2RmOWMtYzkwNi00Y2Y1LWE0ZmItMmQ5MDBhN2RjYTc4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdu2LK5SOwl/Yo0GeUvIaDtWIBo7WyUglLon hjyWepcQ4BiDdL5I+eyWRIPxSy9nl8/+nXWDY4doER6GWc2e6WBxS/MPhuAZI/m2 eN1n6oSLysgx9nlem0pPJQ0POAo8RUbsdqhygPmB7jv5l+nEU4BJv9yBJ+eu6bux c90dS7KEE6ANa2Bo8YI0zXoA9u7jyH4/ZQuWL+FG7dS+a5GneBdzrYh1PW43ptV5 ajqveAfN5hV5R45YgSMYbwrS1tbglWmCiSrpeuTvotRZ5uqyIZy+s3hNhK+0NBT7 U9FCAqkSrOrxlIPt9GQ/bf9rO4xsTHL5oWIwVYsfSwlX0GmyQQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFGTPDGEyZ2u/fmbrtQ3ti9xUMg8gMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4 NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYTIxMTEwM2QtNzMxNS0z M2E3LTlhN2MtMDkxNzBkNzBjNDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1 OTI1MTFiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBho28MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAHfNS2RAOWp6+MY5KSSDiRPVlbgjenycbvYiq+DqA3WorEOBlNaVyBw/ jgPmoBYoNesJX6ZzF/o7nLwVnRl1k6Kja4etWYE+h3SzacQllDG9+8Hygty70gf5 Vat8/ZqHHbYbHlHEVJ31jryzRjTLZfXhtu29dL0/qP5hUgJi24doK6yUf+Rgmr0A aciXZLrTeiYBUI7JVOB+I4xPhVcdehHuukhuTBpWBDhDwnz+xKBqV7U0hxFSOsU7 Sk/rWSTV9BVIxjrSYikQdMTRAYNrN3UtcXgf7wZ8Zt2nyGoXt2iOjDmU8ZUc8aoz ZdoyvwuP8d1Ys1ttNljimmLeFdpzbAo= -----END CERTIFICATE-----Generated at Sat Sep 26 20:48:09 2026 by rpki-client