$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa File: 3cc29482-6619-346c-9509-0c1ddedf9a3c.roa (raw, json) Hash identifier: UwuWxn8DlDZQE9bjMNiHGN/0qp9i0Wqx/a8Mwu4XWGI= Subject key identifier: 78:D8:5B:BA:8A:F0:7F:68:16:05:FF:E2:60:5B:B3:F4:DD:E8:7A:E9 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F498BA0E9D7C864FB06F01140 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 396178 IP address blocks: 136.121.24.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 06 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:8b:a0:e9:d7:c8:64:fb:06:f0:11:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=156908a4-585b-4f57-9331-d654ecdb72d8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:7d:e9:7c:d5:d5:73:fa:80:54:15:4c:c5:84: 6c:f7:86:8a:bf:a8:e1:9a:ba:6d:11:e5:9e:35:5b: 9b:ee:03:6a:0c:02:59:0d:9c:72:ce:8b:61:8d:85: 0e:35:86:8b:38:2c:8b:1f:44:b2:a8:9a:81:c3:19: 97:53:af:a5:48:60:e9:e2:47:aa:0d:0f:71:9d:c5: b8:16:08:0d:1e:45:14:d2:86:06:bd:8c:96:79:8e: a3:25:78:69:46:2b:e5:44:5f:ba:ae:5d:80:d9:d7: ff:3d:bc:4f:be:42:44:cd:d1:44:82:14:f9:99:ac: 72:8a:c0:91:88:e0:de:37:6d:d0:6b:62:c5:83:ea: b1:0f:5a:f6:2e:65:44:58:ac:2c:63:b6:67:51:85: 72:2d:b0:5c:65:28:1c:e8:41:6a:7c:1e:af:a5:37: 54:81:51:c5:60:ce:db:3b:32:a1:c3:e8:27:a3:6e: 5b:53:13:fe:cb:5d:24:43:7c:22:29:33:bd:fa:70: 0b:65:04:b1:82:50:92:07:f8:9e:06:35:cc:f9:d6: ad:2e:36:a9:4d:bf:40:2e:60:53:65:00:f6:d6:bb: 25:20:69:6b:96:c8:db:7e:f7:88:7e:3b:46:8b:08: 1b:6f:8b:ea:63:f3:32:da:51:a5:13:57:a3:7e:0a: 07:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D8:5B:BA:8A:F0:7F:68:16:05:FF:E2:60:5B:B3:F4:DD:E8:7A:E9 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/3cc29482-6619-346c-9509-0c1ddedf9a3c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.24.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 0d:48:27:38:5e:a8:e3:05:47:6f:f3:07:41:20:82:c7:52:f1: 42:2b:b4:b3:ed:93:7f:ec:88:a7:aa:20:70:8f:03:93:0b:d0: 70:5e:aa:aa:80:ea:f0:ab:95:67:40:11:0b:9b:3a:c9:64:55: 1b:2c:10:bf:22:cd:9c:e0:46:e0:96:36:98:e8:fd:6d:f1:8a: 5f:40:a7:cb:9f:cd:b2:e8:eb:9f:ad:e2:2c:f5:f0:22:b4:39: 0d:c9:e0:d3:ad:0e:25:ad:47:67:39:ee:ed:8a:35:2f:62:7d: 4f:c9:f6:14:ab:37:9f:6c:26:d8:62:d2:cf:00:ba:c0:a2:7b: e2:82:ba:7d:70:72:50:04:80:ed:c9:b5:f3:83:92:67:91:60: 43:7f:c2:63:fc:04:a9:6e:c7:dd:3a:e1:ea:c1:0b:16:5e:ef: df:44:3c:a5:5d:d8:9b:fd:ee:a3:6b:73:18:ff:d3:78:66:4b: 45:f4:9f:33:2d:8a:c5:1d:14:93:98:b1:77:80:9d:0e:de:3b: a0:b9:a9:48:67:6f:48:9a:7f:4a:d3:bc:4b:15:36:78:3d:30: 2e:d0:c8:d6:74:11:61:4d:79:4e:5f:10:40:19:c8:6a:82:de: da:80:f1:eb:bc:51:d8:1e:69:9b:10:06:2b:4e:9d:a7:a6:19: b7:a9:39:3b -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Ji6Dp18hk+wbwEUAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk MTU2OTA4YTQtNTg1Yi00ZjU3LTkzMzEtZDY1NGVjZGI3MmQ4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsn3pfNXVc/qAVBVMxYRs94aKv6jhmrptEeWe NVub7gNqDAJZDZxyzothjYUONYaLOCyLH0SyqJqBwxmXU6+lSGDp4keqDQ9xncW4 FggNHkUU0oYGvYyWeY6jJXhpRivlRF+6rl2A2df/PbxPvkJEzdFEghT5maxyisCR iODeN23Qa2LFg+qxD1r2LmVEWKwsY7ZnUYVyLbBcZSgc6EFqfB6vpTdUgVHFYM7b OzKhw+gno25bUxP+y10kQ3wiKTO9+nALZQSxglCSB/ieBjXM+datLjapTb9ALmBT ZQD21rslIGlrlsjbfveIfjtGiwgbb4vqY/My2lGlE1ejfgoHnQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFHjYW7qK8H9oFgX/4mBbs/Td6HrpMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvM2NjMjk0ODItNjYxOS0z NDZjLTk1MDktMGMxZGRlZGY5YTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHkYMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAA1IJzheqOMFR2/zB0EggsdS8UIrtLPtk3/siKeqIHCPA5ML0HBeqqqA 6vCrlWdAEQubOslkVRssEL8izZzgRuCWNpjo/W3xil9Ap8ufzbLo65+t4iz18CK0 OQ3J4NOtDiWtR2c57u2KNS9ifU/J9hSrN59sJthi0s8AusCie+KCun1wclAEgO3J tfODkmeRYEN/wmP8BKlux9064erBCxZe799EPKVd2Jv97qNrcxj/03hmS0X0nzMt isUdFJOYsXeAnQ7eO6C5qUhnb0iaf0rTvEsVNng9MC7QyNZ0EWFNeU5fEEAZyGqC 3tqA8eu8UdgeaZsQBitOnaemGbepOTs= -----END CERTIFICATE-----Generated at Sun Oct 4 22:20:17 2026 by rpki-client