$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa File: 8cef892b-8eeb-3fb4-b77a-7a436e812874.roa (raw, json) Hash identifier: XFP4pjSQUNiFH09+cZcuavLpz/gxu9MQjGNvoSfdW1Y= Subject key identifier: 0A:65:67:E9:59:59:0F:EE:4E:A5:D8:6B:B6:45:02:2A:7B:64:41:C6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EEEB77A6938E08C4CC617F980 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 19527 IP address blocks: 136.121.32.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:7a:69:38:e0:8c:4c:c6:17:f9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=fbf16e22-2638-497f-beb0-d07c0ba13fb7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d8:64:b1:a8:94:ab:f8:6d:cf:db:d1:02:8f: 3f:36:b8:be:09:c7:75:4d:18:66:01:ce:28:60:bc: 64:c2:d5:e7:75:c2:8f:71:78:a1:b5:1a:10:ee:8d: 75:29:af:a7:1b:11:34:19:9a:46:23:d5:86:6d:4d: 18:20:80:db:2f:0a:99:8a:d9:dc:a3:f4:7f:2a:53: 45:23:f8:85:33:e9:dc:8b:b9:84:b8:dc:1e:fa:f7: d8:da:69:7d:20:d9:d6:59:96:64:9d:db:65:d1:47: 0b:a1:ec:14:9f:0f:31:95:3c:ea:7d:66:41:8c:be: 75:93:d9:e8:99:ec:17:09:9b:fd:59:5e:35:6d:ce: f7:64:0a:a7:72:8b:5c:c0:b9:f1:82:94:ff:12:29: 54:3d:56:e8:ca:36:04:14:c1:fb:cc:bf:04:8a:82: 09:a9:5f:57:56:99:65:ad:e2:8f:2e:19:8b:af:d5: bc:60:75:b9:61:70:98:73:e5:7b:98:ba:23:67:36: 4d:64:da:62:e5:73:23:c4:8c:34:d6:d6:17:38:a8: e1:60:1f:b9:d0:07:de:1b:5d:38:6f:76:14:96:cf: de:50:f1:84:9f:f4:9f:62:e2:28:a4:04:52:ac:e4: 2f:8a:e9:f4:45:7e:59:7a:a2:95:43:a4:90:59:8b: 2a:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:65:67:E9:59:59:0F:EE:4E:A5:D8:6B:B6:45:02:2A:7B:64:41:C6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8cef892b-8eeb-3fb4-b77a-7a436e812874.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.32.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6b:b2:e5:35:c5:ce:6a:d1:89:57:33:c4:56:7f:f9:44:59:41: e7:09:e8:13:c9:7a:af:5a:ec:fd:82:78:d8:65:1b:ed:f0:73: a5:33:e2:c4:ab:4a:e3:97:d4:97:df:9c:ff:2c:ca:53:f8:c2: 78:cf:77:58:5a:4f:0e:7e:f7:c3:2e:8c:a5:ed:f4:41:1c:72: 40:31:69:e5:5e:4b:b5:2b:7e:c6:05:d6:e6:c9:bf:12:09:13: 38:2a:e5:83:aa:72:77:eb:92:46:90:ce:50:e5:50:06:64:a9: 99:e3:b8:c6:a8:25:c6:99:05:10:fb:43:cb:bd:36:2b:6f:26: e2:73:0d:68:70:41:99:91:ec:1a:74:d5:57:1a:56:e3:83:c9: 35:48:33:d0:7a:ae:e5:1b:da:11:de:7e:07:c2:18:63:a8:81: 67:2e:9a:6c:86:e8:52:e1:d3:96:3d:d4:7e:e5:d7:0e:c0:65: b5:3a:91:23:68:ce:5c:b2:f1:9e:70:d5:02:50:f1:b4:95:7d: 7b:e2:d6:65:73:f5:b5:dc:f1:c2:07:b8:8c:ac:54:5b:de:e9: 85:15:8c:12:d0:b0:6f:74:1e:9f:70:d1:04:ae:ec:c6:c9:91: 45:22:0c:c6:e4:d0:b7:97:98:f9:ab:7a:d6:5e:5a:d1:b4:47: 66:04:e2:92 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut3ppOOCMTMYX+YAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk ZmJmMTZlMjItMjYzOC00OTdmLWJlYjAtZDA3YzBiYTEzZmI3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAothksaiUq/htz9vRAo8/Nri+Ccd1TRhmAc4o YLxkwtXndcKPcXihtRoQ7o11Ka+nGxE0GZpGI9WGbU0YIIDbLwqZitnco/R/KlNF I/iFM+nci7mEuNwe+vfY2ml9INnWWZZkndtl0UcLoewUnw8xlTzqfWZBjL51k9no mewXCZv9WV41bc73ZAqncotcwLnxgpT/EilUPVboyjYEFMH7zL8EioIJqV9XVpll reKPLhmLr9W8YHW5YXCYc+V7mLojZzZNZNpi5XMjxIw01tYXOKjhYB+50AfeG104 b3YUls/eUPGEn/SfYuIopARSrOQviun0RX5ZeqKVQ6SQWYsqWQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFAplZ+lZWQ/uTqXYa7ZFAip7ZEHGMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOGNlZjg5MmItOGVlYi0z ZmI0LWI3N2EtN2E0MzZlODEyODc0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAGuy5TXFzmrRiVczxFZ/+URZQecJ6BPJeq9a7P2CeNhlG+3wc6Uz4sSr SuOX1JffnP8sylP4wnjPd1haTw5+98MujKXt9EEcckAxaeVeS7UrfsYF1ubJvxIJ Ezgq5YOqcnfrkkaQzlDlUAZkqZnjuMaoJcaZBRD7Q8u9NitvJuJzDWhwQZmR7Bp0 1VcaVuODyTVIM9B6ruUb2hHefgfCGGOogWcummyG6FLh05Y91H7l1w7AZbU6kSNo zlyy8Z5w1QJQ8bSVfXvi1mVz9bXc8cIHuIysVFve6YUVjBLQsG90Hp9w0QSu7MbJ kUUiDMbk0LeXmPmretZeWtG0R2YE4pI= -----END CERTIFICATE-----Generated at Mon Sep 28 13:13:07 2026 by rpki-client