$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa File: 631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa (raw, json) Hash identifier: Q0T8sIQQEeo0+DOHYpgO+asCfu7aD4KuJd2z+f7DlAs= Subject key identifier: 33:45:97:57:A2:1C:15:78:AA:B2:EE:5C:CD:01:04:92:91:A5:B2:38 Certificate issuer: /CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Certificate serial: 010D0C9F4328584EE38CA29BDBD13F23E6C6D300 Authority key identifier: 73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa Signing time: Wed 19 Aug 2026 13:00:11 +0000 ROA not before: Wed 19 Aug 2026 13:00:11 +0000 ROA not after: Tue 17 Nov 2026 14:00:11 +0000 asID: 3320 IP address blocks: 136.22.153.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 12 Sep 2026 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4e:e3:8c:a2:9b:db:d1:3f:23:e6:c6:d3:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2 Validity Not Before: Aug 19 13:00:11 2026 GMT Not After : Nov 17 14:00:11 2026 GMT Subject: CN=260dbab3-c5fa-41c4-ae53-b7ddbf23e2f9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:6b:1d:cc:92:8a:43:b6:39:9b:ae:9a:7b:6d: 52:9c:b1:c9:25:15:49:8f:61:0d:bf:91:3d:0b:7c: d8:79:29:67:bf:ec:c8:dd:80:c5:1b:8c:e4:c6:60: 3d:b2:b5:43:bd:73:3d:92:38:22:05:0e:0d:16:c2: e3:28:31:50:3f:a7:f4:8d:fa:d1:67:e5:a9:56:ee: e6:82:2c:56:72:c2:89:bc:87:6d:fd:a7:13:fb:f0: 47:a8:55:db:e7:17:a4:63:5b:80:46:7a:3d:18:31: d0:c3:e3:64:87:ab:9b:90:a5:72:a2:62:2b:34:0f: f5:2a:b1:07:a7:a4:c1:dd:33:64:73:0d:f7:22:78: 0b:76:de:2d:91:d2:a5:7d:a7:a6:b7:1e:76:39:d8: 6d:97:56:ec:eb:98:4e:22:e5:2a:27:cf:b5:5b:a9: cf:f4:50:50:df:9f:2b:3a:ea:5a:3a:73:25:49:36: 6c:3e:e5:8d:a7:dd:2c:31:11:f4:3c:21:9d:6d:1f: 70:e6:df:d3:ce:23:6c:97:b9:11:a8:aa:ab:cc:d6: 99:75:8e:8f:53:be:7c:bf:92:dc:56:1b:d7:aa:d2: 36:9e:08:76:61:97:52:dc:af:15:ed:0d:0e:46:f3: ed:74:ca:18:a0:8c:7a:ca:e2:f2:47:96:b8:d3:8f: b1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:45:97:57:A2:1C:15:78:AA:B2:EE:5C:CD:01:04:92:91:A5:B2:38 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/631292f1-33d7-3b6b-a6c8-a9dfbb8fb71a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.crl X509v3 Authority Key Identifier: keyid:73:7B:70:7E:D1:8D:29:00:55:95:FA:AA:65:DE:7F:74:5B:75:CD:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7e6ca1e-ea97-4fdf-98e4-dcc6071aaea2.cer sbgp-ipAddrBlock: critical IPv4: 136.22.153.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4b:bc:5b:bb:0d:0a:49:53:a7:b1:5e:63:84:b9:df:79:53:58: 0c:5f:a8:ed:b8:7e:87:58:8f:f5:0d:1c:9d:10:f0:f2:54:2a: 40:72:b4:89:a0:5f:c7:f3:3f:f0:a2:09:fa:29:ce:2a:7e:ca: 79:12:cc:65:09:0f:c6:9c:89:8a:e5:59:82:0a:bf:da:6c:e9: de:d2:df:1d:01:34:51:de:43:f9:4e:f6:5a:78:9d:da:50:a2: a5:99:2d:2a:bf:88:67:7c:7f:a5:97:c4:83:84:b5:60:dc:cf: 5d:1c:16:3c:a9:3f:a6:d1:72:95:72:7f:53:bf:fb:8b:d6:94: fd:0b:b8:70:2d:e1:e5:1a:d0:ed:bd:9d:16:04:69:97:19:25: 73:1a:8a:82:f2:a8:d6:58:aa:d9:c6:9f:a5:c7:f8:b2:f1:50: be:55:ff:fb:ea:60:b4:f8:80:98:bf:ae:f0:8d:4a:90:68:c7: f1:16:d5:44:7d:c0:93:c1:76:be:b7:df:f9:d0:ea:80:f7:e0: 33:4a:71:6d:78:a6:89:b6:d2:57:61:ac:f0:60:08:92:b5:06: b0:3a:3c:11:81:f4:08:22:1d:41:54:35:2f:e7:e2:c4:90:dc: b2:93:48:57:61:ab:a5:47:0e:3f:1b:e4:73:f5:0e:1f:d2:e6: 60:37:29:d4 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7jjKKb29E/I+bG0wAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDdlNmNhMWUtZWE5Ny00ZmRmLTk4ZTQtZGNjNjA3MWFh ZWEyMB4XDTI2MDgxOTEzMDAxMVoXDTI2MTExNzE0MDAxMVowLzEtMCsGA1UEAxMk MjYwZGJhYjMtYzVmYS00MWM0LWFlNTMtYjdkZGJmMjNlMmY5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGsdzJKKQ7Y5m66ae21SnLHJJRVJj2ENv5E9 C3zYeSlnv+zI3YDFG4zkxmA9srVDvXM9kjgiBQ4NFsLjKDFQP6f0jfrRZ+WpVu7m gixWcsKJvIdt/acT+/BHqFXb5xekY1uARno9GDHQw+Nkh6ubkKVyomIrNA/1KrEH p6TB3TNkcw33IngLdt4tkdKlfaemtx52Odhtl1bs65hOIuUqJ8+1W6nP9FBQ358r OupaOnMlSTZsPuWNp90sMRH0PCGdbR9w5t/TziNsl7kRqKqrzNaZdY6PU758v5Lc VhvXqtI2ngh2YZdS3K8V7Q0ORvPtdMoYoIx6yuLyR5a404+xcwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFDNFl1eiHBV4qrLuXM0BBJKRpbI4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2 Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2MDcxYWFlYTIvNjMxMjkyZjEtMzNkNy0z YjZiLWE2YzgtYTlkZmJiOGZiNzFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdlNmNhMWUtZWE5Ny00ZmRmLTk4 ZTQtZGNjNjA3MWFhZWEyL2Q3ZTZjYTFlLWVhOTctNGZkZi05OGU0LWRjYzYwNzFh YWVhMi5jcmwwHwYDVR0jBBgwFoAUc3twftGNKQBVlfqqZd5/dFt1zSEwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2U2Y2ExZS1lYTk3LTRmZGYtOThlNC1kY2M2 MDcxYWFlYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiBaZMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAEu8W7sNCklTp7FeY4S533lTWAxfqO24fodYj/UNHJ0Q8PJUKkBytImg X8fzP/CiCfopzip+ynkSzGUJD8aciYrlWYIKv9ps6d7S3x0BNFHeQ/lO9lp4ndpQ oqWZLSq/iGd8f6WXxIOEtWDcz10cFjypP6bRcpVyf1O/+4vWlP0LuHAt4eUa0O29 nRYEaZcZJXMaioLyqNZYqtnGn6XH+LLxUL5V//vqYLT4gJi/rvCNSpBox/EW1UR9 wJPBdr633/nQ6oD34DNKcW14pom20ldhrPBgCJK1BrA6PBGB9AgiHUFUNS/n4sSQ 3LKTSFdhq6VHDj8b5HP1Dh/S5mA3KdQ= -----END CERTIFICATE-----Generated at Fri Sep 11 09:06:10 2026 by rpki-client