$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/7264578a-6d74-3f1f-b7e3-582508cf30d3.roa File: 7264578a-6d74-3f1f-b7e3-582508cf30d3.roa (raw, json) Hash identifier: Kca0p26SsgSQMM4g4i0LqhTKh6PXrZuKXo6djPVebUg= Subject key identifier: BE:44:91:1B:20:31:4F:F9:DD:79:EC:1B:8F:CF:3F:8E:46:E3:7D:FB Certificate issuer: /CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Certificate serial: 010D0C9F4328584F0AA234C020101D48D46DC600 Authority key identifier: AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/7264578a-6d74-3f1f-b7e3-582508cf30d3.roa Signing time: Wed 02 Sep 2026 13:00:12 +0000 ROA not before: Wed 02 Sep 2026 13:00:12 +0000 ROA not after: Tue 01 Dec 2026 14:00:12 +0000 asID: 1657 IP address blocks: 136.165.224.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:0a:a2:34:c0:20:10:1d:48:d4:6d:c6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd2f18c-1d13-461a-a03c-b991220bb55a Validity Not Before: Sep 2 13:00:12 2026 GMT Not After : Dec 1 14:00:12 2026 GMT Subject: CN=b0021492-d135-4f54-9fa5-6cc012493437 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8d:e6:de:e6:a6:47:ee:e6:c3:f7:aa:fe:91:a4: 77:ca:bb:e3:6c:f4:53:47:ae:43:3c:de:b0:e0:0a: ff:fe:10:c9:0e:8a:8f:11:18:67:7d:a3:4d:41:d8: d7:ec:fc:ab:ef:09:7c:51:48:28:63:2f:22:df:83: 88:d9:fd:ef:d4:6e:9a:c5:aa:e1:b8:c2:3b:c5:a1: 02:ff:c4:e7:8d:17:0e:0e:bf:5f:a2:3b:c0:da:3d: 89:0f:08:df:b5:bb:77:26:00:20:c6:7c:54:08:01: b5:0d:0b:68:a3:4b:1f:69:cb:eb:cf:67:7e:a4:cb: 6b:7c:21:bd:05:47:0d:05:1f:84:dc:b7:25:96:10: 21:da:9b:df:8f:56:d6:4a:18:f0:7f:94:c5:3b:9c: 10:d8:ae:89:38:3c:de:9c:b7:45:eb:ed:18:c9:fb: 37:48:fa:a7:4a:fd:bf:cd:1f:18:42:df:17:59:38: 63:50:f5:b1:a1:52:15:46:04:94:41:94:2e:ee:94: 47:8a:13:7e:c6:db:e6:d0:2f:75:73:ce:47:f7:91: 05:45:9d:31:6b:9c:c3:48:92:d1:86:c0:75:62:92: 52:21:b3:ee:96:12:76:24:70:8c:52:3a:62:92:6b: 6e:cb:b0:3f:61:9a:07:de:8b:22:59:57:be:44:76: 6c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:44:91:1B:20:31:4F:F9:DD:79:EC:1B:8F:CF:3F:8E:46:E3:7D:FB Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/7264578a-6d74-3f1f-b7e3-582508cf30d3.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a/6cd2f18c-1d13-461a-a03c-b991220bb55a.crl X509v3 Authority Key Identifier: keyid:AA:1C:09:2B:18:03:8E:42:40:B0:35:72:E0:89:CE:07:4D:63:5E:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/6cd2f18c-1d13-461a-a03c-b991220bb55a.cer sbgp-ipAddrBlock: critical IPv4: 136.165.224.0/20 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 2d:08:d6:cf:fb:6b:ec:23:19:44:67:bd:60:17:cd:29:13:1f: 96:10:34:f1:20:5b:7e:44:cc:6b:b5:4d:8e:7d:35:15:4e:ca: 9f:a9:2c:08:1c:e9:8e:63:ce:82:a3:26:bf:9b:e8:90:cc:79: 49:94:cc:0f:45:3c:23:f7:bc:6e:80:5b:09:a3:3f:86:50:21: 8c:18:b4:f2:8b:31:03:85:d1:d1:e4:1d:1d:5b:f1:2d:04:4b: e4:c2:ff:c5:d0:46:ef:87:45:7a:08:66:cd:f7:d3:88:4c:05: be:f6:ed:8d:82:75:92:fd:62:b3:1b:e5:aa:a6:9c:c4:80:2c: 34:3f:9b:c1:b7:4f:22:80:34:50:cd:37:4a:ca:31:dc:60:00: a8:95:62:7f:b7:b9:41:1e:9c:03:5e:99:00:6e:67:72:87:1c: 52:4f:42:8d:73:6d:0f:bc:b0:90:bc:a9:88:29:d8:61:78:6b: e2:66:31:d1:f9:d1:1c:bc:60:75:1a:63:30:2b:ec:92:a4:ab: 14:f2:94:df:52:50:bc:f8:72:7a:c6:be:d0:ce:b1:e8:7d:2c: 47:4f:68:d6:a8:00:7e:67:09:a9:d6:4f:b1:d2:85:75:b9:33: ca:57:cc:6a:0c:8f:73:5e:c4:e1:9f:76:9b:eb:6b:27:c3:2b: fc:ac:30:b3 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8KojTAIBAdSNRtxgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNmNkMmYxOGMtMWQxMy00NjFhLWEwM2MtYjk5MTIyMGJi NTVhMB4XDTI2MDkwMjEzMDAxMloXDTI2MTIwMTE0MDAxMlowLzEtMCsGA1UEAxMk YjAwMjE0OTItZDEzNS00ZjU0LTlmYTUtNmNjMDEyNDkzNDM3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjebe5qZH7ubD96r+kaR3yrvjbPRTR65DPN6w 4Ar//hDJDoqPERhnfaNNQdjX7Pyr7wl8UUgoYy8i34OI2f3v1G6axarhuMI7xaEC /8TnjRcODr9fojvA2j2JDwjftbt3JgAgxnxUCAG1DQtoo0sfacvrz2d+pMtrfCG9 BUcNBR+E3LcllhAh2pvfj1bWShjwf5TFO5wQ2K6JODzenLdF6+0Yyfs3SPqnSv2/ zR8YQt8XWThjUPWxoVIVRgSUQZQu7pRHihN+xtvm0C91c85H95EFRZ0xa5zDSJLR hsB1YpJSIbPulhJ2JHCMUjpikmtuy7A/YZoH3osiWVe+RHZsmwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFL5EkRsgMU/53XnsG4/PP45G4337MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy82Y2Qy ZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkxMjIwYmI1NWEvNzI2NDU3OGEtNmQ3NC0z ZjFmLWI3ZTMtNTgyNTA4Y2YzMGQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNmNkMmYxOGMtMWQxMy00NjFhLWEw M2MtYjk5MTIyMGJiNTVhLzZjZDJmMThjLTFkMTMtNDYxYS1hMDNjLWI5OTEyMjBi YjU1YS5jcmwwHwYDVR0jBBgwFoAUqhwJKxgDjkJAsDVy4InOB01jXtgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy82Y2QyZjE4Yy0xZDEzLTQ2MWEtYTAzYy1iOTkx MjIwYmI1NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiKXgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAC0I1s/7a+wjGURnvWAXzSkTH5YQNPEgW35EzGu1TY59NRVOyp+pLAgc 6Y5jzoKjJr+b6JDMeUmUzA9FPCP3vG6AWwmjP4ZQIYwYtPKLMQOF0dHkHR1b8S0E S+TC/8XQRu+HRXoIZs3304hMBb727Y2CdZL9YrMb5aqmnMSALDQ/m8G3TyKANFDN N0rKMdxgAKiVYn+3uUEenANemQBuZ3KHHFJPQo1zbQ+8sJC8qYgp2GF4a+JmMdH5 0Ry8YHUaYzAr7JKkqxTylN9SULz4cnrGvtDOseh9LEdPaNaoAH5nCanWT7HShXW5 M8pXzGoMj3NexOGfdpvrayfDK/ysMLM= -----END CERTIFICATE-----Generated at Fri Sep 11 03:34:42 2026 by rpki-client