$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa File: 7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa (raw, json) Hash identifier: PoO6PlF6QbEYF4fBa4Pff1IMrmTyI+Yrlq/jBfSovmE= Subject key identifier: 5B:1A:BB:73:14:53:DF:50:7D:91:ED:18:AC:4F:7B:C2:EB:C9:1D:AC Certificate issuer: /CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Certificate serial: 010D0C9F4328584EF2E76E9867F44666305E3400 Authority key identifier: F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa Signing time: Tue 25 Aug 2026 01:00:12 +0000 ROA not before: Tue 25 Aug 2026 01:00:12 +0000 ROA not after: Mon 23 Nov 2026 02:00:12 +0000 asID: 396856 IP address blocks: 172.99.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f2:e7:6e:98:67:f4:46:66:30:5e:34:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b386e256-2dc3-4d21-93b9-c253dcd37e4f Validity Not Before: Aug 25 01:00:12 2026 GMT Not After : Nov 23 02:00:12 2026 GMT Subject: CN=ae4b5776-a19c-4f30-a854-a7286e491e3b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:34:f8:7c:1f:a7:2e:a9:ba:3e:d6:27:7e:e2: 28:7a:31:bd:fa:b9:e8:68:80:19:a0:a9:c5:7a:97: a6:14:3a:33:9a:5f:39:72:bd:f2:88:65:ba:b3:5f: cb:3d:7d:58:6b:a1:c9:f8:26:d2:20:4b:25:8c:86: 01:11:80:14:3f:c2:9f:94:fd:e7:03:46:17:69:1e: 62:6a:a3:d8:2a:b4:d7:8d:b7:16:df:94:43:ee:aa: c8:8d:8c:ab:a8:7f:0f:1e:bb:24:76:ba:a2:85:61: 9c:d5:7c:86:6c:68:b5:83:39:9d:b6:7f:30:b7:02: 4a:5e:ba:e1:1a:28:ed:db:6d:34:fb:fc:ef:94:08: 1e:74:74:5b:a5:ab:ad:af:c1:9b:fc:e7:b8:f3:bd: 56:dd:0e:6c:0f:ab:ff:7e:c5:34:01:19:63:3c:11: 90:ec:8e:04:83:41:e8:46:c9:5f:e5:04:49:5f:7f: 3a:de:b6:7d:5f:07:f4:d3:0a:5e:35:cb:d6:fd:98: 69:dc:d5:eb:91:43:df:79:66:7e:b2:09:f2:7c:8c: 26:bb:c6:9e:b4:09:b5:13:c2:1f:57:2b:36:37:3d: 79:ef:83:a0:aa:17:81:93:33:04:9b:33:44:7b:d2: 57:55:3a:20:aa:4e:04:30:2c:f4:0c:0a:5c:5c:b7: 2d:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:1A:BB:73:14:53:DF:50:7D:91:ED:18:AC:4F:7B:C2:EB:C9:1D:AC Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/7b8aba06-eaab-37cd-8ec4-c9a7eaa3c4a4.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f/b386e256-2dc3-4d21-93b9-c253dcd37e4f.crl X509v3 Authority Key Identifier: keyid:F2:22:5C:07:C2:CC:A7:84:83:BD:D6:14:A6:AB:B3:79:EF:26:DE:3C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b386e256-2dc3-4d21-93b9-c253dcd37e4f.cer sbgp-ipAddrBlock: critical IPv4: 172.99.136.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 5a:92:1d:0e:cf:63:81:aa:1f:f6:80:9f:ca:7b:41:d8:32:31: 22:9a:48:bb:ea:51:b6:fc:d3:a2:1d:d4:7b:27:a4:7a:8d:fe: 48:5f:2b:9e:ec:dd:9e:ed:2f:a5:01:24:f4:fd:82:07:0e:16: b5:fd:a8:f7:d7:b9:98:47:81:16:44:cf:a2:7e:14:37:56:0a: 52:f6:f3:8c:53:e7:3f:15:96:82:ba:b8:b0:93:52:65:8a:69: 49:65:3b:cf:27:8e:b2:1d:d2:f4:87:5c:9a:e4:9a:85:13:c1: 5c:59:3a:9e:53:28:48:5e:61:e8:e8:c8:35:0a:cb:93:91:85: 8d:1d:34:05:57:2b:e6:08:17:60:5a:b7:06:16:b0:61:7c:fc: e1:df:95:86:f9:02:4a:81:02:2e:9f:34:39:08:49:de:6f:89: c8:4f:fa:db:dc:67:f6:28:35:c4:5a:df:8a:ac:bb:23:58:be: d6:b7:16:fb:48:a9:18:06:13:7e:a5:c4:95:ee:64:42:bf:1a: be:b9:12:19:d5:0b:b9:c7:76:7f:c3:3e:03:2e:ef:a3:ab:11: 38:49:44:be:1c:00:eb:96:0f:3c:9a:2b:7a:88:02:de:8d:cd: 61:60:5c:e2:5c:ea:40:01:38:70:fa:a8:83:2f:b0:b0:d3:66: 23:71:a1:6c -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7y526YZ/RGZjBeNAAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjM4NmUyNTYtMmRjMy00ZDIxLTkzYjktYzI1M2RjZDM3 ZTRmMB4XDTI2MDgyNTAxMDAxMloXDTI2MTEyMzAyMDAxMlowLzEtMCsGA1UEAxMk YWU0YjU3NzYtYTE5Yy00ZjMwLWE4NTQtYTcyODZlNDkxZTNiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlzT4fB+nLqm6PtYnfuIoejG9+rnoaIAZoKnF epemFDozml85cr3yiGW6s1/LPX1Ya6HJ+CbSIEsljIYBEYAUP8KflP3nA0YXaR5i aqPYKrTXjbcW35RD7qrIjYyrqH8PHrskdrqihWGc1XyGbGi1gzmdtn8wtwJKXrrh Gijt2200+/zvlAgedHRbpautr8Gb/Oe4871W3Q5sD6v/fsU0ARljPBGQ7I4Eg0Ho Rslf5QRJX3863rZ9Xwf00wpeNcvW/Zhp3NXrkUPfeWZ+sgnyfIwmu8aetAm1E8If Vys2Nz1574OgqheBkzMEmzNEe9JXVTogqk4EMCz0DApcXLct6QIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFFsau3MUU99QfZHtGKxPe8LryR2sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2 ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUzZGNkMzdlNGYvN2I4YWJhMDYtZWFhYi0z N2NkLThlYzQtYzlhN2VhYTNjNGE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjM4NmUyNTYtMmRjMy00ZDIxLTkz YjktYzI1M2RjZDM3ZTRmL2IzODZlMjU2LTJkYzMtNGQyMS05M2I5LWMyNTNkY2Qz N2U0Zi5jcmwwHwYDVR0jBBgwFoAU8iJcB8LMp4SDvdYUpquzee8m3jwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iMzg2ZTI1Ni0yZGMzLTRkMjEtOTNiOS1jMjUz ZGNkMzdlNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrGOIMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAFqSHQ7PY4GqH/aAn8p7QdgyMSKaSLvqUbb806Id1HsnpHqN/khfK57s 3Z7tL6UBJPT9ggcOFrX9qPfXuZhHgRZEz6J+FDdWClL284xT5z8VloK6uLCTUmWK aUllO88njrId0vSHXJrkmoUTwVxZOp5TKEheYejoyDUKy5ORhY0dNAVXK+YIF2Ba twYWsGF8/OHflYb5AkqBAi6fNDkISd5vichP+tvcZ/YoNcRa34qsuyNYvta3FvtI qRgGE36lxJXuZEK/Gr65EhnVC7nHdn/DPgMu76OrEThJRL4cAOuWDzyaK3qIAt6N zWFgXOJc6kABOHD6qIMvsLDTZiNxoWw= -----END CERTIFICATE-----Generated at Thu Sep 10 19:13:34 2026 by rpki-client