$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: iiRJjIBkJUE8nabRYHbdvySV1HPQAifimT5eVdeYzTc= Subject key identifier: E1:A4:C4:F6:63:01:FA:69:D5:C9:E4:29:E5:99:A7:3E:F1:2E:F2:01 Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584F94D34EDE66A1D6399118C380 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Thu 22 Oct 2026 01:00:12 +0000 ROA not before: Thu 22 Oct 2026 01:00:12 +0000 ROA not after: Wed 20 Jan 2027 02:00:12 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 30 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:94:d3:4e:de:66:a1:d6:39:91:18:c3:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Oct 22 01:00:12 2026 GMT Not After : Jan 20 02:00:12 2027 GMT Subject: CN=cadfee1d-6df0-4565-825c-3451f0cfec67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:c8:78:e7:c6:bf:e9:01:e4:50:57:8e:e2:ff: d9:91:88:e2:5d:a0:74:1e:83:03:a6:41:9c:c3:27: 6c:5b:87:c0:02:1a:d5:34:b3:c7:9b:9a:fb:ad:f2: dd:1e:6d:e1:5d:6b:95:28:7c:5a:02:01:4a:90:99: 47:b4:6d:27:74:ea:55:f5:c2:55:41:b7:f6:fc:29: 52:b3:e8:fa:31:82:86:b9:96:e5:f6:25:7d:0e:9c: 15:c3:38:f7:09:6a:79:46:cf:05:7a:64:d2:af:40: b4:c6:34:ec:37:52:6a:81:35:12:58:81:90:c4:bd: 5e:3d:e7:2b:eb:f9:e5:5a:01:33:68:f1:23:6e:b1: 5c:a9:9d:d3:77:07:8a:c1:67:ce:a4:d7:c3:05:79: 67:ff:cd:ee:8f:79:d5:3f:16:fe:06:ba:4f:92:3c: 1a:32:b1:58:eb:4a:9a:c9:83:5d:46:fb:e4:1c:78: ea:8a:5d:91:ea:17:96:d9:57:ef:f5:04:6d:6e:7f: 70:d2:b9:1c:2c:45:47:65:17:2a:4a:98:60:70:90: d0:3d:f4:a3:2f:5a:e0:38:7f:71:2c:3c:5b:f9:f5: 99:d8:e0:0d:a1:3e:a6:85:cb:a2:6d:e7:ed:79:8e: 30:4f:f7:69:35:b7:59:34:b1:82:aa:59:16:92:0b: aa:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:A4:C4:F6:63:01:FA:69:D5:C9:E4:29:E5:99:A7:3E:F1:2E:F2:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6d:b6:12:13:d9:f5:3d:ba:bb:2e:4f:e5:64:f4:e3:d9:3f:97: 4f:ef:7b:3d:be:32:ce:d6:09:fe:66:a7:bb:41:8e:1a:40:6f: bf:25:37:86:e2:79:44:5b:1c:d0:f9:53:68:a1:a6:8b:f9:53: 8b:d7:06:d7:b2:0e:39:f9:0c:d8:ec:8e:76:f3:30:b8:b2:06: 88:e5:54:33:9f:df:5b:e2:f4:9a:56:31:5c:77:07:7f:5f:c9: ea:c3:02:a2:6b:2d:7b:e7:4d:f3:3a:c2:65:e1:67:88:13:76: 7e:46:06:69:b6:2a:da:55:92:e1:9d:b8:31:3f:4d:95:50:4f: dc:f2:a9:85:7e:18:fc:16:d7:e3:93:bc:db:0b:03:17:e4:dc: da:e7:99:1a:c1:6f:95:6b:61:7b:53:af:aa:17:ce:41:66:a9: 9e:e1:e5:97:dd:f3:9c:0b:77:ba:a8:c9:a1:3f:7f:77:14:2d: e6:a7:8f:7e:0c:02:f9:5b:1f:99:95:d3:06:19:e4:49:d7:c1: 4d:7b:5a:aa:a0:c7:f8:ec:5e:ad:61:52:e5:b5:1c:92:9d:ad: 8c:f0:3a:e9:29:93:34:02:71:b1:64:59:8d:84:7a:c4:97:05: a1:10:4a:04:c6:a6:b8:0a:70:61:43:bd:83:71:68:7c:e1:62: a1:80:2f:dd -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE+U007eZqHWOZEYw4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MTAyMjAxMDAxMloXDTI3MDEyMDAyMDAxMlowLzEtMCsGA1UEAxMk Y2FkZmVlMWQtNmRmMC00NTY1LTgyNWMtMzQ1MWYwY2ZlYzY3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAish458a/6QHkUFeO4v/ZkYjiXaB0HoMDpkGc wydsW4fAAhrVNLPHm5r7rfLdHm3hXWuVKHxaAgFKkJlHtG0ndOpV9cJVQbf2/ClS s+j6MYKGuZbl9iV9DpwVwzj3CWp5Rs8FemTSr0C0xjTsN1JqgTUSWIGQxL1ePecr 6/nlWgEzaPEjbrFcqZ3TdweKwWfOpNfDBXln/83uj3nVPxb+BrpPkjwaMrFY60qa yYNdRvvkHHjqil2R6heW2Vfv9QRtbn9w0rkcLEVHZRcqSphgcJDQPfSjL1rgOH9x LDxb+fWZ2OANoT6mhcuibefteY4wT/dpNbdZNLGCqlkWkguq0wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFOGkxPZjAfpp1cnkKeWZpz7xLvIBMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG22EhPZ9T26uy5P5WT049k/l0/vez2+Ms7WCf5mp7tBjhpAb78lN4bi eURbHND5U2ihpov5U4vXBteyDjn5DNjsjnbzMLiyBojlVDOf31vi9JpWMVx3B39f yerDAqJrLXvnTfM6wmXhZ4gTdn5GBmm2KtpVkuGduDE/TZVQT9zyqYV+GPwW1+OT vNsLAxfk3NrnmRrBb5VrYXtTr6oXzkFmqZ7h5Zfd85wLd7qoyaE/f3cULeanj34M AvlbH5mV0wYZ5EnXwU17Wqqgx/jsXq1hUuW1HJKdrYzwOukpkzQCcbFkWY2EesSX BaEQSgTGprgKcGFDvYNxaHzhYqGAL90= -----END CERTIFICATE-----Generated at Thu Oct 29 00:41:50 2026 by rpki-client