$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda23817-feb6-3772-8f9c-e536d2194497.roa File: cda23817-feb6-3772-8f9c-e536d2194497.roa (raw, json) Hash identifier: jByYepOBn8AA3Rf+sE662JtsSmJnr7TKfZG2v4KwMjs= Subject key identifier: F8:E8:8D:5F:B0:22:DB:64:57:97:3B:3C:D1:9D:65:75:69:09:36:25 Certificate issuer: /CN=8314711c-e263-425a-adda-3995b7095d9d Certificate serial: 010D0C9F4328584F49882D9C4A2209D1B85B9260 Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda23817-feb6-3772-8f9c-e536d2194497.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 15169 IP address blocks: 136.126.253.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 04 Oct 2026 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:2d:9c:4a:22:09:d1:b8:5b:92:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=fff7f92f-97b0-4071-ab4f-ab6d23bd2183 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:88:f9:71:62:0f:24:f8:91:8a:cb:ea:a6:c1:5d: 06:5c:04:b4:b7:ab:7f:7e:10:8d:45:d7:ab:4f:e7: 90:94:53:d8:6a:77:e9:c6:eb:c1:de:9d:c1:85:e5: db:d8:44:69:fa:0c:98:b9:8e:aa:c3:af:e0:8c:45: af:65:c5:a3:06:a0:4d:e9:b6:a6:fc:b4:26:65:26: 9b:d4:a5:75:6d:ee:3a:7d:ed:7f:33:1b:65:4b:6c: c8:86:fd:0a:4a:ab:cc:70:0a:b5:da:a7:60:92:de: 2d:66:f4:77:96:b4:f5:d6:81:46:c3:e1:67:68:f1: 6c:b0:7a:57:78:fe:56:f9:57:7a:79:41:09:79:ff: 05:fd:c9:d5:cc:7a:d3:de:dd:d0:d0:11:9c:fa:72: eb:3f:48:c6:49:cc:62:da:ec:43:8b:ba:fb:99:25: f0:60:dd:50:6c:fb:48:b7:24:42:21:66:ef:9f:d6: a5:e2:09:bd:6d:a0:b1:7e:8a:d0:d6:01:57:ee:1b: 41:01:0f:eb:9f:d2:ce:07:fc:4e:d6:a1:1c:86:10: 10:1d:d3:f0:cd:54:ab:ec:dd:ac:8b:0e:d0:3c:76: 2d:36:d0:ce:8a:c2:de:d4:92:a2:16:ea:e2:34:14: ee:13:01:12:59:49:8f:6e:5f:c1:97:d8:f0:d4:c5: f0:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:E8:8D:5F:B0:22:DB:64:57:97:3B:3C:D1:9D:65:75:69:09:36:25 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/cda23817-feb6-3772-8f9c-e536d2194497.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl X509v3 Authority Key Identifier: keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer sbgp-ipAddrBlock: critical IPv4: 136.126.253.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 1a:42:4f:4a:5d:19:e2:22:62:d3:87:0c:aa:68:9f:88:6b:01: 89:bd:08:c1:24:62:71:ec:e9:da:2d:9c:79:5a:b4:3d:92:07: a7:94:d8:bf:d7:7a:94:dd:8d:cd:5c:79:89:f0:db:b0:88:c3: 44:4c:39:85:93:05:bb:25:81:15:2d:f5:a5:8e:29:c5:3e:a0: ac:65:fb:4a:66:25:6b:47:03:8b:78:74:6e:03:41:1a:db:07: 56:30:60:7e:64:b3:70:1b:36:c2:e1:e2:0a:5f:e8:88:72:c2: ab:ae:0e:b1:d8:90:29:bd:0f:4e:a1:4e:33:fd:e6:d1:de:eb: cc:97:09:24:32:66:76:86:6c:28:df:ca:34:fc:12:30:80:9c: da:0b:30:d9:82:67:85:89:66:98:3d:ec:d6:da:7f:dd:aa:84: 53:90:18:2a:f2:99:20:b9:11:d2:e6:9f:d9:00:47:69:50:a1: 63:cf:fd:b7:60:9d:f3:32:39:2c:75:b1:a3:54:a5:ae:58:7f: 86:d5:6e:47:b3:96:20:d7:60:3b:e4:4d:2c:9b:ee:0f:1d:09: 18:cd:70:85:71:d5:49:5c:dc:11:27:9a:27:2d:46:cc:cf:69: 10:44:01:57:5b:64:cc:cc:13:9e:3f:17:52:68:12:d6:8c:31: 75:81:7f:08 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JiC2cSiIJ0bhbkmAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1 ZDlkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk ZmZmN2Y5MmYtOTdiMC00MDcxLWFiNGYtYWI2ZDIzYmQyMTgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPlxYg8k+JGKy+qmwV0GXAS0t6t/fhCNRder T+eQlFPYanfpxuvB3p3BheXb2ERp+gyYuY6qw6/gjEWvZcWjBqBN6bam/LQmZSab 1KV1be46fe1/MxtlS2zIhv0KSqvMcAq12qdgkt4tZvR3lrT11oFGw+FnaPFssHpX eP5W+Vd6eUEJef8F/cnVzHrT3t3Q0BGc+nLrP0jGScxi2uxDi7r7mSXwYN1QbPtI tyRCIWbvn9al4gm9baCxforQ1gFX7htBAQ/rn9LOB/xO1qEchhAQHdPwzVSr7N2s iw7QPHYtNtDOisLe1JKiFuriNBTuEwESWUmPbl/Bl9jw1MXwrwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFPjojV+wIttkV5c7PNGdZXVpCTYlMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0 NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvY2RhMjM4MTctZmViNi0z NzcyLThmOWMtZTUzNmQyMTk0NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5 NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1 YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiH79MFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBABpCT0pdGeIiYtOHDKpon4hrAYm9CMEkYnHs6dotnHlatD2SB6eU2L/X epTdjc1ceYnw27CIw0RMOYWTBbslgRUt9aWOKcU+oKxl+0pmJWtHA4t4dG4DQRrb B1YwYH5ks3AbNsLh4gpf6IhywquuDrHYkCm9D06hTjP95tHe68yXCSQyZnaGbCjf yjT8EjCAnNoLMNmCZ4WJZpg97Nbaf92qhFOQGCrymSC5EdLmn9kAR2lQoWPP/bdg nfMyOSx1saNUpa5Yf4bVbkezliDXYDvkTSyb7g8dCRjNcIVx1Ulc3BEnmictRszP aRBEAVdbZMzME54/F1JoEtaMMXWBfwg= -----END CERTIFICATE-----Generated at Sat Oct 3 08:09:54 2026 by rpki-client