$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bb44455-c04e-3375-a9d7-0801da57af17.roa File: 9bb44455-c04e-3375-a9d7-0801da57af17.roa (raw, json) Hash identifier: Ub6DcKg+mk8ea7rTKJ8KW+zYf32DR6IDi+UHRLPqhkE= Subject key identifier: 48:FB:90:94:27:76:22:C5:91:E0:D2:63:B8:BA:C9:5B:F5:A4:3C:1B Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EEEB7562C49310C45E54BA880 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bb44455-c04e-3375-a9d7-0801da57af17.roa Signing time: Sun 23 Aug 2026 13:00:12 +0000 ROA not before: Sun 23 Aug 2026 13:00:12 +0000 ROA not after: Sat 21 Nov 2026 14:00:12 +0000 asID: 19527 IP address blocks: 136.121.32.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 30 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:ee:b7:56:2c:49:31:0c:45:e5:4b:a8:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 23 13:00:12 2026 GMT Not After : Nov 21 14:00:12 2026 GMT Subject: CN=4ab20552-1c8a-447c-9d64-6eecbd8c7977 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:59:15:e5:c6:48:cc:a9:c1:aa:69:6b:2c:7d: a7:0f:d9:b3:d4:f1:a0:e0:65:80:50:8f:37:40:91: 7a:bd:08:c1:13:5b:67:b4:b7:de:f1:43:95:ed:d2: 37:db:58:4d:19:98:e0:cb:f7:66:f6:94:ca:cd:7b: d4:2f:b6:ce:51:0c:ba:16:b1:f8:13:74:3b:52:9b: 81:4c:81:45:d1:2f:4a:0a:98:38:05:41:ea:af:04: a6:0a:4c:5c:83:62:82:7b:fc:41:6f:91:38:6f:e2: cc:5a:49:8a:89:d4:e2:89:d0:da:1b:a7:90:e0:51: 85:96:e8:70:bd:21:e7:c3:27:3b:67:87:1a:65:f9: 6d:f0:4b:cc:30:f0:3c:05:85:bb:6d:f8:3c:79:14: 83:b8:c8:75:47:ed:c2:3e:f9:7f:ab:93:fe:93:86: af:a4:11:61:db:a8:a4:01:08:30:d8:44:09:b3:0d: 4f:ec:c9:69:92:a3:0d:6b:45:3a:74:5a:55:7a:b7: 54:7a:ae:59:02:37:e1:18:25:43:c7:69:d6:dc:89: 89:e4:24:20:87:66:1d:5b:4b:b4:f5:1f:51:c9:c5: 9b:15:84:91:79:3b:6b:92:3c:ac:c4:64:fe:91:e9: f6:3c:b8:5a:92:82:70:d4:c1:3e:b5:42:e8:ad:19: b3:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:FB:90:94:27:76:22:C5:91:E0:D2:63:B8:BA:C9:5B:F5:A4:3C:1B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/9bb44455-c04e-3375-a9d7-0801da57af17.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.121.32.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 04:8b:f4:f2:a2:3f:01:06:18:97:26:a6:eb:c6:8f:7f:9f:8f: 2f:9e:84:7b:9f:7f:8b:b6:ba:5d:a8:77:ee:17:77:cb:7a:8c: 62:1a:9d:cf:9e:7c:17:f3:ed:ad:c1:e9:f8:17:1a:1c:ee:3a: 19:89:92:3c:11:3c:4e:5e:a3:35:e7:ae:71:c1:aa:09:ff:ba: de:b8:3f:f5:58:62:f5:bc:d7:0e:27:d1:2f:1c:02:a1:c4:8f: 81:5e:ed:ca:29:e8:d1:4e:5b:85:c1:6f:7c:84:a0:39:fd:41: 90:1a:9a:88:6b:b1:2b:7f:b3:a8:c5:3e:5c:a3:ac:f8:5c:45: f7:55:60:de:25:9e:e0:45:62:1e:11:de:c2:9b:c4:0d:05:50: 6d:40:1c:a5:b9:fa:5d:37:dc:68:d6:dc:40:b5:c7:bd:17:2c: 45:dc:6c:f5:29:39:f3:4f:99:f4:60:f3:db:b2:d9:e0:70:e9: 96:30:81:62:14:82:02:90:46:d0:ab:ea:ce:5b:37:0c:d1:85: 33:ce:e2:ea:ee:be:38:cf:93:f0:dc:27:12:25:a3:2b:60:7d: df:b0:4d:22:da:d9:6b:81:2e:4a:62:d5:b4:35:76:43:72:7d: 62:e7:ae:3b:96:eb:48:0d:38:3b:c4:d7:e3:bf:b8:64:80:71: 57:34:93:30 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7ut1YsSTEMReVLqIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgyMzEzMDAxMloXDTI2MTEyMTE0MDAxMlowLzEtMCsGA1UEAxMk NGFiMjA1NTItMWM4YS00NDdjLTlkNjQtNmVlY2JkOGM3OTc3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVkV5cZIzKnBqmlrLH2nD9mz1PGg4GWAUI83 QJF6vQjBE1tntLfe8UOV7dI321hNGZjgy/dm9pTKzXvUL7bOUQy6FrH4E3Q7UpuB TIFF0S9KCpg4BUHqrwSmCkxcg2KCe/xBb5E4b+LMWkmKidTiidDaG6eQ4FGFluhw vSHnwyc7Z4caZflt8EvMMPA8BYW7bfg8eRSDuMh1R+3CPvl/q5P+k4avpBFh26ik AQgw2EQJsw1P7MlpkqMNa0U6dFpVerdUeq5ZAjfhGCVDx2nW3ImJ5CQgh2YdW0u0 9R9RycWbFYSReTtrkjysxGT+ken2PLhakoJw1ME+tULorRmzXQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEj7kJQndiLFkeDSY7i6yVv1pDwbMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvOWJiNDQ0NTUtYzA0ZS0z Mzc1LWE5ZDctMDgwMWRhNTdhZjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiHkgMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAASL9PKiPwEGGJcmpuvGj3+fjy+ehHuff4u2ul2od+4Xd8t6jGIanc+e fBfz7a3B6fgXGhzuOhmJkjwRPE5eozXnrnHBqgn/ut64P/VYYvW81w4n0S8cAqHE j4Fe7cop6NFOW4XBb3yEoDn9QZAamohrsSt/s6jFPlyjrPhcRfdVYN4lnuBFYh4R 3sKbxA0FUG1AHKW5+l033GjW3EC1x70XLEXcbPUpOfNPmfRg89uy2eBw6ZYwgWIU ggKQRtCr6s5bNwzRhTPO4uruvjjPk/DcJxIloytgfd+wTSLa2WuBLkpi1bQ1dkNy fWLnrjuW60gNODvE1+O/uGSAcVc0kzA= -----END CERTIFICATE-----Generated at Mon Sep 28 08:43:17 2026 by rpki-client