$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c2a99a5-44be-3f4e-816e-9d3dd22ffdd6.roa File: 8c2a99a5-44be-3f4e-816e-9d3dd22ffdd6.roa (raw, json) Hash identifier: 8VgR+KYWKUPX5FrRXqoXjnWB4UyKNAmLyvTd+Kcf8d8= Subject key identifier: DF:26:2E:C4:F9:0B:BE:55:9A:7C:4C:99:B7:DC:F5:0F:EA:27:E0:2E Certificate issuer: /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Certificate serial: 010D0C9F4328584EC3726BE3B2D289F83AAB2D20 Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c2a99a5-44be-3f4e-816e-9d3dd22ffdd6.roa Signing time: Sat 08 Aug 2026 01:00:11 +0000 ROA not before: Sat 08 Aug 2026 01:00:11 +0000 ROA not after: Fri 06 Nov 2026 02:00:11 +0000 asID: 46168 IP address blocks: 172.254.31.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:c3:72:6b:e3:b2:d2:89:f8:3a:ab:2d:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f Validity Not Before: Aug 8 01:00:11 2026 GMT Not After : Nov 6 02:00:11 2026 GMT Subject: CN=3dac6e97-d6b5-4f11-b79b-68a081530f02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:36:2c:e9:54:56:19:17:a3:56:10:d4:a2:17: 82:0c:52:c4:7a:4d:77:dc:7f:05:fc:22:34:7c:ea: c7:7e:a8:28:1e:33:20:ad:6a:d0:56:60:e6:43:ae: d3:70:5c:7b:19:fe:e1:07:30:fe:03:e6:29:6a:f4: 7a:a2:ff:f9:42:35:42:74:d0:48:e1:08:95:51:51: c3:40:3a:a9:42:fb:2c:12:8a:3e:3c:fc:8f:19:06: 7a:23:b7:fe:66:31:1c:f4:82:63:cc:fc:74:8b:2d: 4d:29:2e:c9:8e:5b:8d:c1:26:a9:b0:4b:94:b5:5d: cf:0f:d4:9c:30:17:cb:aa:9d:e7:33:ca:dc:1c:d4: bb:d8:10:dd:99:4a:3f:da:1c:cc:32:40:bf:8e:c9: b1:d9:d3:4c:4e:47:53:5e:39:b5:8a:f8:7c:99:36: 8a:ed:2a:09:24:d3:73:b5:4f:9e:e3:c1:16:8a:94: b8:fb:6a:02:db:bf:83:76:41:69:46:3a:df:26:d3: 4e:0a:73:05:bf:a0:11:b5:63:f2:9d:d8:42:09:6a: 6a:13:8d:be:db:00:ba:a1:0a:51:f7:db:38:2d:0d: 46:af:17:b7:7b:dd:ba:19:32:3c:94:af:24:17:67: 07:39:38:d7:56:95:88:c3:e5:e1:10:83:8a:03:d8: 0b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:26:2E:C4:F9:0B:BE:55:9A:7C:4C:99:B7:DC:F5:0F:EA:27:E0:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/8c2a99a5-44be-3f4e-816e-9d3dd22ffdd6.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl X509v3 Authority Key Identifier: keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer sbgp-ipAddrBlock: critical IPv4: 172.254.31.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:58:79:91:17:3e:72:72:58:49:3f:12:40:95:cb:c8:be:ff: 94:d1:24:9a:22:c8:07:00:54:46:22:45:a3:8e:16:8b:cd:e7: e2:a4:81:6c:42:a7:b9:2d:39:5e:d9:91:b6:e4:b4:95:82:20: 44:25:e3:a4:0d:66:b8:fc:2d:b8:ba:e9:46:8f:3a:9c:63:86: 29:72:d0:ab:25:9a:26:09:41:24:86:11:d6:41:ba:95:b8:26: 02:2b:5f:d8:ec:71:0d:69:d3:c2:94:be:b3:e4:53:c0:c3:47: 88:b3:b4:92:4a:1e:0a:e5:a4:cb:e4:47:a9:51:d2:99:6a:bf: 0c:0b:16:c9:dc:10:c9:0c:6e:88:00:d6:76:d4:5a:79:13:06: 23:34:34:4d:b8:2c:5f:1b:4e:41:7e:40:6c:48:4a:c7:23:3e: 96:40:12:70:6d:0c:6a:e3:dc:a1:5c:8a:97:3a:cd:14:06:3a: cc:03:b1:fe:6b:92:a1:7f:4d:57:86:89:6b:cd:04:31:55:42: 93:49:00:14:a4:75:bd:78:9e:dd:a0:11:7b:46:26:c4:e3:fe: f0:ae:8e:36:57:26:09:44:c5:d4:1f:7c:42:71:67:c7:86:f5: ae:2b:e6:59:bd:50:cb:06:58:cc:92:50:b4:25:8d:49:84:84: e6:57:b3:72 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7DcmvjstKJ+DqrLSAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4 NDdmMB4XDTI2MDgwODAxMDAxMVoXDTI2MTEwNjAyMDAxMVowLzEtMCsGA1UEAxMk M2RhYzZlOTctZDZiNS00ZjExLWI3OWItNjhhMDgxNTMwZjAyMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTYs6VRWGRejVhDUoheCDFLEek133H8F/CI0 fOrHfqgoHjMgrWrQVmDmQ67TcFx7Gf7hBzD+A+YpavR6ov/5QjVCdNBI4QiVUVHD QDqpQvssEoo+PPyPGQZ6I7f+ZjEc9IJjzPx0iy1NKS7JjluNwSapsEuUtV3PD9Sc MBfLqp3nM8rcHNS72BDdmUo/2hzMMkC/jsmx2dNMTkdTXjm1ivh8mTaK7SoJJNNz tU+e48EWipS4+2oC27+DdkFpRjrfJtNOCnMFv6ARtWPyndhCCWpqE42+2wC6oQpR 99s4LQ1Grxe3e926GTI8lK8kF2cHOTjXVpWIw+XhEIOKA9gL7wIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN8mLsT5C75VmnxMmbfc9Q/qJ+AuMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvOGMyYTk5YTUtNDRiZS0z ZjRlLTgxNmUtOWQzZGQyMmZmZGQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArP4fMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAlYeZEXPnJyWEk/EkCVy8i+/5TRJJoiyAcAVEYiRaOOFovN5+KkgWxC p7ktOV7ZkbbktJWCIEQl46QNZrj8Lbi66UaPOpxjhily0KslmiYJQSSGEdZBupW4 JgIrX9jscQ1p08KUvrPkU8DDR4iztJJKHgrlpMvkR6lR0plqvwwLFsncEMkMbogA 1nbUWnkTBiM0NE24LF8bTkF+QGxISscjPpZAEnBtDGrj3KFcipc6zRQGOswDsf5r kqF/TVeGiWvNBDFVQpNJABSkdb14nt2gEXtGJsTj/vCujjZXJglExdQffEJxZ8eG 9a4r5lm9UMsGWMySULQljUmEhOZXs3I= -----END CERTIFICATE-----Generated at Sat Sep 5 13:24:56 2026 by rpki-client