$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa File: acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa (raw, json) Hash identifier: b3RVQXVkLIZbTuA0pr7AdhE0rEXBHslk3NiXSJ7aCmA= Subject key identifier: 45:58:86:07:1B:BD:DC:72:C1:84:9B:77:FD:FC:51:9F:AC:97:CD:B6 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584EF5B201F1AC006E513B9DEF00 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa Signing time: Wed 26 Aug 2026 01:00:12 +0000 ROA not before: Wed 26 Aug 2026 01:00:12 +0000 ROA not after: Tue 24 Nov 2026 02:00:12 +0000 asID: 36040 IP address blocks: 136.124.120.0/21 maxlen: 21 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 06 Sep 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:f5:b2:01:f1:ac:00:6e:51:3b:9d:ef:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Aug 26 01:00:12 2026 GMT Not After : Nov 24 02:00:12 2026 GMT Subject: CN=fd055848-c185-45f0-a988-e00f505d3645 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:d0:8a:43:f4:a8:c6:01:2a:93:63:75:b5:15: 41:ef:88:54:51:ea:76:e5:87:6a:d1:f9:86:c2:b3: e0:66:f8:b8:57:df:89:d8:f3:b0:ab:41:c1:67:92: fe:39:52:94:41:03:dc:96:86:c3:4d:6f:66:94:de: 88:5d:13:0b:35:24:07:24:06:21:27:a1:fc:f4:7e: 3c:24:5e:fa:a7:38:ad:8f:05:8f:65:06:5d:87:75: 21:0c:fa:4f:51:dd:d5:57:17:af:f5:6d:09:7e:6e: c3:70:bb:0c:15:ec:31:7f:c6:7e:b9:db:dd:ee:cb: 74:62:88:b8:83:fe:c6:c0:6d:9d:a9:e7:5f:15:c8: 87:3b:43:61:42:7d:8f:b5:b8:bd:8a:ee:21:1a:6e: da:4d:d2:ce:9f:f8:01:5d:d7:9b:98:06:56:c9:e1: ca:28:bc:37:de:15:68:5c:72:85:b2:b9:51:58:8e: 48:6a:2c:d1:26:ad:f8:2f:a7:f3:39:76:86:61:a0: 3d:99:a9:b6:d8:dd:b4:6a:8e:ac:65:d1:7e:c5:73: bf:b4:a5:43:91:91:96:4d:ac:9d:07:f6:44:b0:85: 2f:08:66:79:41:c8:d2:04:52:f9:c9:57:cf:e3:24: 46:18:23:a3:82:da:53:64:09:0b:d2:ea:2e:16:a1: 81:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:58:86:07:1B:BD:DC:72:C1:84:9B:77:FD:FC:51:9F:AC:97:CD:B6 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/acf3aaea-7222-323c-b620-ddf1c9fa6a9c.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.124.120.0/21 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 06:88:d7:02:22:78:f6:00:46:ad:6c:72:88:2b:c8:6c:37:28: bc:b4:2e:51:d9:b4:06:7d:dd:14:92:4d:4f:5d:10:0e:21:77: 7d:58:43:92:2d:b5:e2:80:20:8c:ec:2c:c5:7a:0a:d7:f9:b7: 4b:27:54:9f:10:52:f1:4a:8d:f7:e5:17:2f:9a:cd:e9:b2:f8: 21:c5:21:f1:c2:51:2d:d1:85:b3:04:b5:a4:3e:d6:6a:31:ca: cf:83:9f:0d:42:ac:87:85:8a:c5:55:5d:a8:34:d8:2e:c1:0b: 70:b8:59:a9:83:d8:9e:75:0c:0f:ce:c5:31:f5:9a:6c:fb:c1: a5:a8:ae:91:d4:90:6f:ec:19:61:5a:e8:65:59:a3:8b:20:e0: 99:a3:97:f4:70:46:e2:2c:85:b9:46:57:46:35:37:81:91:fa: 03:ef:3a:31:c5:98:7b:3e:4c:2d:c4:9d:77:cc:2c:c0:f6:de: 3f:50:89:c6:80:af:36:53:9c:ab:f3:2a:80:3d:f8:49:b8:5d: 25:af:1d:17:66:b0:54:f9:1d:12:51:13:c7:bf:a1:b2:a5:ac: 98:6c:3d:18:15:a2:ed:2b:22:59:1f:49:cd:93:4b:f9:3e:17: 31:c3:f6:96:90:16:c7:f2:12:20:c7:a5:1c:1d:d1:04:d6:b3: cc:b8:31:1f -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE71sgHxrABuUTud7wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDgyNjAxMDAxMloXDTI2MTEyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmQwNTU4NDgtYzE4NS00NWYwLWE5ODgtZTAwZjUwNWQzNjQ1MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtCKQ/SoxgEqk2N1tRVB74hUUep25Ydq0fmG wrPgZvi4V9+J2POwq0HBZ5L+OVKUQQPclobDTW9mlN6IXRMLNSQHJAYhJ6H89H48 JF76pzitjwWPZQZdh3UhDPpPUd3VVxev9W0Jfm7DcLsMFewxf8Z+udvd7st0Yoi4 g/7GwG2dqedfFciHO0NhQn2Ptbi9iu4hGm7aTdLOn/gBXdebmAZWyeHKKLw33hVo XHKFsrlRWI5IaizRJq34L6fzOXaGYaA9mam22N20ao6sZdF+xXO/tKVDkZGWTayd B/ZEsIUvCGZ5QcjSBFL5yVfP4yRGGCOjgtpTZAkL0uouFqGBCQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFEVYhgcbvdxywYSbd/38UZ+sl822MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvYWNmM2FhZWEtNzIyMi0z MjNjLWI2MjAtZGRmMWM5ZmE2YTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDiHx4MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAaI1wIiePYARq1scogryGw3KLy0LlHZtAZ93RSSTU9dEA4hd31YQ5It teKAIIzsLMV6Ctf5t0snVJ8QUvFKjfflFy+azemy+CHFIfHCUS3RhbMEtaQ+1mox ys+Dnw1CrIeFisVVXag02C7BC3C4WamD2J51DA/OxTH1mmz7waWorpHUkG/sGWFa 6GVZo4sg4Jmjl/RwRuIshblGV0Y1N4GR+gPvOjHFmHs+TC3EnXfMLMD23j9QicaA rzZTnKvzKoA9+Em4XSWvHRdmsFT5HRJRE8e/obKlrJhsPRgVou0rIlkfSc2TS/k+ FzHD9paQFsfyEiDHpRwd0QTWs8y4MR8= -----END CERTIFICATE-----Generated at Sat Sep 5 05:04:40 2026 by rpki-client